|
|
|

Hacking Contest Pits MacBook Air Against Vista, Ubuntu
By: Ryan Naraine
2008-02-22
Article Rating:    / 44
There are 11 user comments on this Network Security & Hardware story.
CanSecWest organizers are urging hackers to fire code execution exploits at the three biggest desktop operating systems.Organizers of the annual CanSecWest security conference have expanded the PWN 2 OWN hacking contest to pit fully patched laptops running Mac OS X, Windows Vista and Ubuntu against some of the world's smartest hackers.
Last year, the contest was aimed specifically at two MacBook Pro machines and was won by Dino Dai Zovi, a New York-based researcher who exploited a QuickTime zero-day vulnerability.
This year, CanSecWest organizer Dragos Ruiu says there will be three targets: A MacBook Air, running the latest OS X, fully patched with typical configuration; A Sony VAIO VGN-TZ37CNB, running Ubuntu, latest release; and a Fujitsu U810, with a fully patched Windows Vista installation.
"The victory conditions will be the contents of specific, specially planted files on each system, to be extracted by winners," Ruiu said.
The hacker who successfully takes control of any of the machines gets to keep the laptop and any associated prizes for the exploits used, he explained.
At last year's conference, TippingPoint's Zero Day Initiative added a $10,000 cash bounty to the pot that was eventually won by Dai Zovi.
This year, the attack surface will be widened to include some of the most commonly used desktop applications.
For example, an attacker can find and exploit holes in the three main browsersInternet Explorer, Mozilla and Safarior vulnerabilities in mail clients like Microsoft Outlook, Apple's Mail.app or Mozilla Thunderbird.
It will also include instant messaging clients like Skype, MSN Messenger, Adium or Pidgin. "They are all in scope," Ruiu said.
Ronald Dodge, associate dean, information and education technology at the United States Military Academy, will serve as the judge for the contest.
| | Reader Comments: Hacking Contest Pits MacBook Air Against Vista, Ubuntu | | >>> Post your comment now!
| | Lesson: Nobody is SecureI love these exercises because it teaches that none of these systems is actually secure. The general public is blind to threats to their security... Posted At: 05-06-08 By: John | | | | | | give Vista the bootI'm curious how you switched from Vista to XP. I was told the only way was to have Vista Business installed, which could be uninstalled. and then a... Posted At: 05-05-08 By: Anonymous | | | | | | A user comment on this articleI'm sure any of these Os's can be hacked.. oh hhmm just about forgot, Linux is not an OS, but a kernel, but still it can be breached, seeing that... Posted At: 04-27-08 By: kyelite | | | | | | bit flippinAll that is needed is to flip the correct bit and crash goes the box!
ON the security side it goes to show physical access is everything. yes with... Posted At: 02-29-08 By: SirJames | | | | | | Vista OiyI have New Lenovo Desktop with Vista Home Basic and it is pain in the A***, Same Machine with Ubuntu 7.10 runs like Lightning!!.
Vista is constantly... Posted At: 02-26-08 By: Uncle Sam | | | | | | XP SP3 runs like a dream!I don't know how it would compare security-wise,but it does add plenty of new security features like black hole router detection. What I can tell you... Posted At: 02-25-08 By: kb | | | | | | Why isn't XP SP3 included?I'm interested in how the new XP path SP3 would do also. I'm hearing that it's superior to Vista in many ways. Posted At: 02-25-08 By: D. Chase | | | | | | >>> Post your comment now! | | | | | |
|
 |
|
|
x}ks㶲*Q3CiJؖIm"!1E=N6~bvKJcLٖhݍF|Gλ$i9cr3ݩkj.w߽!d[f8iTE[]ߤ~Am;t =4mFNHB ~}@~sf*wD!H/ԎTa@]2x6;k:&o4veki cߨ_[&``1Z|R j9iݑ |i @I>R(CѺQQy_IږyH6EGJ+ߣ"C7ݩHrW2X^DP~FDM:ǎ-4rwN̚<3τPcwҴv[P;E{QUh /B1r!f-{4ɿTݱ[L=iLVC;%0ýtf?Dk>NR#ZSˆ辥{$)5< \g4QL1H6}~8IZ Q68Q)K? GN8CEnڏe[پtwgy@ffbt9a&ԃ P2zhNt(`_dY7;Ͱ-P6CM-ZMQKJ]ٯ:E}`[쫅S
who>;W*)Jw9*C[wn-ua(.:^O.ac'HH_L
Z.JT:( Ԙ8rg`rM7Jqq+~)ڡVR]jF[V@a`%pfQUriO'sK߾ڤ>>;O}b)̠VPAf`WKe`9=y\toz{MNڟ;w:Rڟ+̪ok*~k!
/x_6~ b
MuôWuI-Gf{r&j]}::$7cY>韐/ !}_wnr@
i/],Kj,nHˤdL2Tc ]N joNX ^YK7B)
u%u(7>hr
Q@e)#8?݇IhJq䨉k>ذ1"%hy啋,}Et"A)O%ތ1E|r'yfRB(&pHqbgd{Ӱ erq}\oV͉2]X]uUjoE?t_wθyn?]OH{⧋vІ)ICsEhYf7wI9qI}sQV_[%kPQ/QG'&-d`q86acJݤ#}fE=A AӧIz>56R#Gst$AG61^zK
ucb>'ݸäWX(}Zc3{QKW4Кk:FAтMtT;n ]`2Zw9ܻ-L&wzt#`VGPC!]7$>(d@+ 9=P_)qmNl}h`1 >5g%G@i0x1C.O)))?]HPw9DJ
B!B0H`P, a\.y"M':ݱ;P}sGe-n^d6gF2LYG0-&D7rb.G E_-Muc{s_9Դziڛ,Â%bi]yfm,`bD$%\Ew,Ofwq=7cBCD
ݜZ,'1!&B~aZ&4"
7qYlEA\'1nuC\f{aMr"Vv6P0*FSMzF9;m9 \Лvs9n$!+xWY 2gdRUͳqtʝ+PXZ2n2>=MO%XScX`D~wzb0qm/n)NaV|\t\g˪rKfYU{-UWv/KƠ\?ou riO,ohm_¼xeP4@VRkϥ%2=6PCD6"CzچxTX5:m,_&TYW+@-ZYSj2ej-[`B ]P eܠQ@5%X3PQ[
lx
kuPCߵ|#7=dsgH>:`(e!\o
N(>AװDؚZSS{<`m1Jx>hx#d\6,[b)0#Všk?L=Kwaﴽ.J-.lFd>n 'L[QHz{%1͉V*a0Y6؋T,a?7:HycI_)+%UMH&[b"ud\6˰@\ kOa3<(yRrf!9˅Q4$\*
ؕGQ~Pc6ư5wpH}[Lݡ\wlSIB=OOքk&.D:#DA#Ez.
ZAЏ0 BrIaj H"*UH`mR@;kRUtC ^qvW JI:Nd=j|tǜ}h3ʋ2
YΣEVJjB
=5jZ͎=>YP2~2j&8x_?p+zM85hN(vo? SMK\}O>yN '-h'^)0ZN
+u\NS!4dP.Q95f>
S#<~Ɋ0
ClWõX1pWPV:LuOi?!GFlʂu!MU~tzVE @ GzCH
'`QtEa*NiBHYZX9ih 5f~+ˣ ,ć{i#f
MaFž.nJ^+=4xAs1ክ54f;NV'wjO6Jh)VXS!RW
dĞe~g'QyϤ͋h3|5y@mvgfӏ6=_`t
mAؙY%7CuitLeb`l
"Z`|iY`&c1s*?
|l3pڳ
`Mɧb_k`p1\EAn#>ҍۙ'yUcү|m*,n1}a %[ŜQx`fzlhLi7J}MVJȅe#uL!ٯԾ=bH%~w9@`|RQzt># `t>9kۻBlpI75
SXx|{
KPHe, ,"zдr3=<f(V*UX㘘ٽՔݷS(
@/I6\CnU]uv1g f[i)3(+Ees?; %mcv/is 0#ёnt/x01vY?&`;/4.š?K˓HsGQ9g! K1rCE1>dt+]=^NN:k^aOQ區҈FU~Bh]\/~wϻ!9\tx`.'!
upy@!hWHv:: b 3hmƛ&%c֗5!g<72lzA
q^9`\\h5c-ͅH'S&aDu0aZ, |