Safari first to fall in hacking contest

Safari first to fall in hacking contest

Safari was cracked by a hacker team in just five seconds at the Pwn2Own browser hacking contest. Google Chrome and Mozilla Firefox currently still standing...

Safari and Internet Explorer were the browsers to be taken down in the Pwn2Own hacking contest.

Held annually at the CanSecWest conference in Vancouver, the competition pits security researchers against browsers. This year, Microsoft's IE8, Apple's Safari, Mozilla's Firefox and Google's Chrome are all in the contest.

However, no researcher chose to take on Firefox, and the one that was expected to hack Chrome reportedly didn't show up.

The first browser to fall in the three-day hacking contest was Safari, running on 64-bit version of Mac OS X. It was cracked by a team from Vupen Security in five seconds - all the team had to do was point the browser at a site containing their malicious code to take advantage of a vulnerability in WebKit.

That flaw was yesterday fixed by Apple, but the patch came too late to make it into the browser for the contest.

The second browser to fall was IE8 running on a 64-bit version of Windows 7. It was hacked by researcher Stephen Fewer using a trio of vulnerabilities.

Both teams win a $15,000 prize plus the computer they were working on.

Chrome's part in the contest was to be different than the other browsers. It was initially not going to be included, but Google stumped up $20,000 for a prize - but only if hackers could crack the browser in the first day and escape Chrome's sandbox using a flaw in Google-written code.

For the second part of the contest, researchers will focus on smartphones.

This article originally appeared at pcpro.co.uk

Source: Copyright © PC Pro, Dennis Publishing

See more about:  safari  |  first  |  fall  |  hacking  |  contest
 
 

Readers of this article also read...

Next gen: Acer's TimelineX laptops join the new Intel crowd 

Next gen: Acer's TimelineX laptops join the new Intel crowd

 
iTunes 10.2.2 tightens security, fixes bugs 

iTunes 10.2.2 tightens security, fixes bugs

 
Apple addresses Comodo hack with security patches 

Apple addresses Comodo hack with security patches

 
Apple in angry spat over iPhone browser speed slur 

Apple in angry spat over iPhone browser speed slur

 
Beware those bonus schemes and cash back offers 

Beware those bonus schemes and cash back offers

 
Comments: 7
Slatts
12 March 2011
They in fact managed to hack Safari, an iPhone running 4.2.1 and IE8, the blokes who were going to have a go at FF and Chrome backed out.

More info here.

The apple invulnerability folk may not want to go there...


Comment made about the PC & Tech Authority article:
Safari first to fall in hacking contest?
Safari was cracked by a hacker team in just five seconds at the Pwn2Own browser hacking contest. Google Chrome and Mozilla Firefox currently still standing...

What do you think? Join the discussion.


edit: I was looking at last years results before :oops:

Edited by Slatts: 12/3/2011 06:24:14 PM
.:Cyb3rGlitch:.
12 March 2011
Chrome is awesome. I've been using it for years.
Slatts
12 March 2011
.:Cyb3rGlitch:. wrote:
Chrome is awesome. I've been using it for years.


I tried it when it first came out and it didn't do it for me.

I'm sure it's a whole lot better now, but it takes a bit to get me off my backside to change seats these days.

Something about the devil you know...:)

.:Cyb3rGlitch:.
12 March 2011
I used to use Firefox too. I switched because Chrome has a clean logical UI, which is sandboxed to prevent severe crashes and plug-in exploits. I guess that's why it's so difficult to hack. :P
Slatts
12 March 2011
Oh yes, but the blokes who were going to hack Firefox legged it at the last moment too.

From what I've been able to find out, the chrome blokes threw in the towel because Google released a patched version just before the comp that killed the exploits they'd been hoping to exploit.

FF went to version3.6.(I think)16 a few days ago so the same may be true there as well.

The H security wrote:
At the conference, there is currently some speculation about whether Google closed some vulnerabilities with the update to Chrome 10, two days before the competition, which would explain why some hackers did not come.


Oh, and I can't remember the last time FF crashed on me or I had a security problem with it..

Edited by Slatts: 12/3/2011 08:02:43 PM
.:Cyb3rGlitch:.
12 March 2011
All modern browsers are quite stable. But every now and then you get plug-ins which aren't, and they can bring down your whole session. The main issue with Firefox is that plug-ins get free reign, so any exploits they introduce can compromise security.

I believe that all the browsers released patches right before the competition.

Edited by .:Cyb3rGlitch:.: 12/3/2011 08:49:49 PM
Slatts
12 March 2011
.:Cyb3rGlitch:. wrote:
I believe that all the browsers released patches right before the competition.


As you would...

Comments have been disabled for this article.

Latest Comments

Latest Competitions

Win a PC copy of DEFIANCE plus a Hellbug figurine and messenger bag! 

Win a PC copy of DEFIANCE plus a Hellbug figurine and messenger bag!

Win a Defiance prize pack and join the fight now!
 

Latest Poll

Which broadband network do you think is the best choice for Australia?



or View results
The Coalition's.
  19%
 
Labor's.
  63%
 
Screw this I'm going back to smoke signals and string on a can.
  19%
TOTAL VOTES: 1638

Vote now
Ads by Google

From our Partners

PC & Tech Authority Downloads