MacBook Hacking Contest Won ($10,000)
Macworld reports on a winning "hack" claimed by Shane Macaulay and Dino Dai Zovi for the Hack a Mac contest at CanSecWest this week.
The conference and contest took place between April 18-20th in Vancouver, British Columbia:
CanSecWest organizers will set up the MacBooks with their own access point and all security updates installed, but without additional security software or settings. Attendees will be able to connect to the machines via the access point through Ethernet or Wi-Fi, according to the CanSecWest Web site.
As originally planned, the rules for the hack a mac contest were relaxed on Friday after nobody had won the contest on the previous days. In the relaxed set of rules, a URL was provided that exposed Safari to a "specially-constructed Web page" which allowed the hacker to gain shell access to the MacBook.
The URL opened a blank page but exposed a vulnerability in input handling in Safari, Comeau said. An attacker could use the vulnerability in a number of ways, but Di Zovie used it to open a back door that gave him access to anything on the computer, Comeau said.
According to Matasano, Apple's most recent Security update does not address this specific issue with Safari.
Popular Stories
Apple has yet to reveal when the iPhone 18 Pro and iPhone Ultra will be announced and released, but the dates usually follow a familiar pattern.
Labor Day is September 7 this year. The last time the holiday fell on that day was in 2020, but the iPhone event that year was delayed until October due to the COVID-19 pandemic. So, the last time Labor Day was on September 7 in a normal year was in ...
The touchscreen and the OLED panel have dominated discussion about Apple's next high-end laptop, but the redesign wrapped around them may prove to be an equally consequential change, largely because it is not expected to stay unique to the machine for long.
Bloomberg's Mark Gurman last week laid out Apple's plan to refresh every Mac it sells over the next two years. In the report, he...
Apple is developing an all-new operating system that is essentially a mix of tvOS, watchOS, and iOS, according to Bloomberg's Mark Gurman.
In a report this week, he said the operating system will feature a grid of icons, widgets, and apps, along with customizable clock faces.
The new software platform is intended for Apple's long-rumored smart home hub. With built-in facial recognition,...
