MacBook Hacking Contest Won ($10,000)
Macworld reports on a winning "hack" claimed by Shane Macaulay and Dino Dai Zovi for the Hack a Mac contest at CanSecWest this week.
The conference and contest took place between April 18-20th in Vancouver, British Columbia:
CanSecWest organizers will set up the MacBooks with their own access point and all security updates installed, but without additional security software or settings. Attendees will be able to connect to the machines via the access point through Ethernet or Wi-Fi, according to the CanSecWest Web site.
As originally planned, the rules for the hack a mac contest were relaxed on Friday after nobody had won the contest on the previous days. In the relaxed set of rules, a URL was provided that exposed Safari to a "specially-constructed Web page" which allowed the hacker to gain shell access to the MacBook.
The URL opened a blank page but exposed a vulnerability in input handling in Safari, Comeau said. An attacker could use the vulnerability in a number of ways, but Di Zovie used it to open a back door that gave him access to anything on the computer, Comeau said.
According to Matasano, Apple's most recent Security update does not address this specific issue with Safari.
Popular Stories
Apple today sent out invites for an experience in Los Angeles on Wednesday, October 28, and the "Pro and tell" tagline on the invitation likely means that the rumored MacBook models with touch-enabled OLED displays will stick with MacBook Pro branding instead of the once-rumored "MacBook Ultra" name.
The long-rumored "iPhone Ultra" ended up being named iPhone Duo, so speculation that Apple...
With just three days to go until the iPhone Duo is released, Apple is getting ready for the launch. Behind the scenes, the App Store now has screenshots of Apple's built-in apps running on the Duo. We've seen some apps in marketing materials, but images of the ones we haven't seen give us an idea of what it will be like using the iPhone Duo day to day.
Many apps are shown in landscape...
Some Apple retail employees have been told to warn customers against visiting to purchase an iPhone Duo without a pre-order on Friday, October 23.
Apple Store employees told MacRumors that they have been advised that there will likely be no iPhone Duo stock available for walk-in purchases on launch day. Staff have been instructed to discourage customers without pre-orders from coming in...
