All the latest UK technology news, reviews and analysis

Apple OS X withstands hacking contest

by Tom Sanders in California

08 Mar 2006

Comments: 2

  • Tweet this
The OS X hacking contest ran for 38 hours and resulted in no successful hacks
The University of Wisconsin's OS X hacking contest produced no successful attempts

The University of Wisconsin has ended its OS X hacking contest with no successful hacking attempts. 

The challenge was cut short after the University's Chief Information Officer found out about it and deemed that it was unauthorized. The competition's website has since been removed.

Dave Schroeder, the competition's organiser and a systems administrator at the university, launched the challenge in response to a similar competition last month in which a blogger created user accounts for contestants on a Mac Mini and challenged them to hack into the system by defacing a website.

The Mac Mini contest made headlines earlier this week, and the winner boasted that it had taken him under 30 minutes to penetrate OS X's security.

But Schroeder pointed out that his accomplishment "failed to mention a very critical point: anyone who wished it was given a local account on the machine".

He claimed that his hacking contest would create a more accurate image of OS X's security. The contest ran for 38 hours and resulted in no successful hacks, Schroeder said on the contest's website

The site suffered from heavy traffic that peaked at 30Mbps, logging lots of traffic from scripts that sought to exploit known software vulnerabilities.

A number of dictionary attacks were also launched where special tools try out possible passwords such as birth dates, names and common words based on pre-defined dictionaries.

The site also was brought down twice by a denial of service attack that overloaded the server.

The test system was a Mac Mini running the latest version of OS X as well as all the latest security updates. It had been configured with two local user accounts and had SSH and HTTP open. The latter were not typical settings for an average user, according to Schroeder.

Contestants who claimed to have succeeded in hacking the system had to provide details about how they breached the security walls, which would have been provided to Apple. The winner was promised a claim to fame, but no material price.

Do you agree?

 

Add your comment

We won't publish your address
By submitting a comment you agree to abide by our Terms & Conditions. Your comment will be moderated before publication.

Poll

Flame virus poll

Are you confident that the UK's IT infrastructure is secure from attack in the wake of the Flame malware revelations?

30%

1%

12%

57%

Connect with V3.co.uk

Sign up to our daily or weekly newsletters

Symanteccloud

Social networking: a guide for IT managers

Social networking is almost ubiquitous. This white paper examines the benefits and risks and it looks at the different ways companies can reconcile them

Riverbed

Mitigating the risks of IT change

The importance of understanding your infrastructure

Procurement/P2P Transformation Consultant

Premier Consulting Firm - Procurement/P2P Transformation...

IT Strategy and Transformation Professional

Premier consulting firm - IT Strategy and Cloud Consulting...

C# Developer- Shropshire, West Midlands

Software developer/ C# developer, (ASP.NET, C#, MVC...

Oracle Developer/ Programmer- Forms, Reports, PL-SQL

Oracle Developer/ Programmer- Oracle ebusiness suite...

To send to more than one email address, simply separate each address with a comma.