28 Mar 2008
A three-way hacking contest between Apple, Windows and Linux laptops has ended in the Mac caving in first - in just two minutes.
The contest was part of the CanSecWest security conference in Vancouver, and was won by Charlie Miller, one of the security researchers who cracked Apple's iPhone last year.
Miller walked away with the $10,000 prize put up by the organisers, along with the MacBook Air he hacked.
No one was able to hack into any of the machines by attacking them over the network on the first day of the contest.
But Miller succeeded when the organisers allowed hackers to direct human operators of the three machines to visit websites and open emails.
Miller's exploit code was on a website and the Mac fell within two minutes. He was only able to use software preinstalled on the Mac, so experts assume that the vulnerability must lay with Apple's Safari browser.
However, Miller signed a non-disclosure agreement which means that the exploit will not be made public until Apple has been informed.
At the time of posting, the other two machines remain intact.
Latest stories from Security
Related articles
Related jobs
Poll
What is the most important IT priority for your company this year?
Connect with V3.co.uk
This paper focuses on a series of best practices and techniques for development teams looking to improve their software development processes
Why good data management at all levels is essential in the modern business (video, 6mins)
IT Security Specialist Move in2 Solutions /Pre-Sales...
SOFTWARE ENGINEER - BERKS - to £34k plus package WAREHOUSE...
We currently have a position for a Senior Project Manager...
JAVA DEVELOPER TRANSPORT MANAGEMENT SYSTEMS / TMS...
Keep up to date with the latest products, services and technologies from the world's leading IT companies. IThound.com brings you over 2,000 white papers, case studies and analyst reports.
Do you agree?
and wasn't it a direct connection?!
This hack was done using a MacBook connected to the Air using a crossover cable and a directed user. c'mon, you mean to tell me that this is only way it could be hacked...sounds like a hack job of a security argument to me.
Posted by: keep phishin' 28 Mar 2008
Still couldn't do it without a directed exploit
With nothing but net access they still couldn't crack the Mac! It required directing the "automated user" to go to a compromised web site.
Posted by: Scott Beckstead 28 Mar 2008