MacBook and Safari Conquered Within Seconds

[YuMeng]

How long does it take to hack into a fully patched MacBook computer? The security researcher, Charlie Miller, has again wooed participants in the Pwn2Own 2009 competition held in conjunction with the Tenth Annual CanSecWest Conference at Vancouver. Charlie Miller spent just a couple of seconds to hack into the MacBook computer by exploiting a security vulnerability in Apple’s Safari browser.

Charlie Miller was also last year’s champion. The success of hacking into MacBook computer won Miller $10,000 in cash and the MacBook machine hacked by Miller. In the interview with Miller, Miller has highlighted that before going to the CanSecWest security conference, he has planned to hack into the MacBook computer via the Safari browser. “It took a couple of seconds. They clicked on the link and I took control of the machine,” Miller said moments after his accomplishment.

Apple will not release the technical details of the vulnerability until a patch is ready.

This guy is great that can hack into Mac in few seconds \

Source:MyDigitallifeInfo

[Polkadot]

He won the contest last year. It took him almost 2 (two) minutes to do it last year. He predicted that Safari would be hacked 4 times in this years contest (by 4 different exploits). To win in any category, you had to use an exploit that required NO user interface, other than clicking on a website. Glad I didn't click on that site! 'course I don't use SaF*!#ari either. Ha! Ha!

[YuMeng]

And i don't use M@c B00k and S@f@ri so i don't scare of it .

[Polkadot]

To set the record straight, Charlie only got $5,000 (plus the computer to take home). But, also on the same day a guy named 'Nils' took down Safari, IE8, AND FF3. So, at $5K each, he had a good day. So far, nobody has hacked any of the Mobile devices. It appears nobody has targeted Chrome yet, and Opera was left out of the compitetion (because it didn't have a large enough user base).
None of the winners may make public statements regarding their exploits. The exploits will ALL be disclosed ONLY to the respective company, in order for them to address. Mozilla is currently working on theirs, Microsoft will get around to theirs someday, and Safari...who cares!

[Solaris]

http://arstechnica.com/security/news/2009/03/chrome-is-the-only-browser-left-standing-in-pwn2own-contest.ars
Chrome stands tall on its own in the middle of War-land, not even a single scratch. That is why Solaris is proud of Google Chrome.

[hellnoire]

Chrome might appear to be the winner, but the only issue is when you open too many tabs at once

[Polkadot]

Once the 'browser' segment is over, they will move on over to the poon-to-own segment, when the following Systems/Machines will be up for grabs (with a $20,000 prize to boot)

• VAIO VGN-TZ37CN running Ubuntu 7.10
• Fujitsu U810 running Vista Ultimate SP1
• MacBook Air running OSX 10.5.2

[LunarWolf]

I use Chrome too. But I use FireFox for speed. Let see whether Chrome can be hack or not. We shall wait...

[Ceyfer √]

Chrome will be the next target too -

[ginzon]

Well Well Apple has a stunning security then....