Can the MacBooks go the distance?

[LTD]

Let's keep track of this, folks. So far, so good!

Note that they're going to "lower the barriers" a bit, for a more sporting situation, it seems. ;)

Link:

http://blogs.zdnet.com/security/?p=173

[Slimy]

Right after a major patch was released. Great day for them to choose :yes:

[User6060]

Yeah they broke it, i think today or yesterday

In winning the contest, he exposed a hole in Safari, Apple's browser. "Currently, every copy of OS X out there now is vulnerable to this," said Sean Comeau, one of the organizers of CanSecWest.

http://www.infoworld.com/article/07/04/20/...nference_1.html

[Slimy]

Hey! You ruined it! I was about to get that up on the front page :p (it's coming, give me some time)

[LTD]

Yep, they got through. Nice prize, too!

[QuarterSwede]

Read a pretty good point on Macrumors.com

... if this is a WebKit bug, claiming the 'Macintosh' or 'OS X' has been exploited because of a bug in the browser engine is just as silly as claiming Linux has been exploited because Firefox has a vulnerability.

[random_n]

Is it really so silly? Safari is made by Apple, comes with all Apple computers, and is one of the most popular programs for the platform. The program is designed to wander the Internet, so the avenue of infection is a rather likely one. And speaking of Linux, there is a chance that this bug was carried over from the KHTML core, which could mean the vulnerability exists in Konqueror as well. That could mean a KDE exploit, which is used by a very significant portion of the Linux crowd.

Claiming the WebKit bug is a Mac OS X exploit is no more silly than claiming that an MSHTML exploit is a vulnerability in Windows.

[raskren]

Claiming the WebKit bug is a Mac OS X exploit is no more silly than claiming that an MSHTML exploit is a vulnerability in Windows.

Zing!

That's a good point.

[duhk]

Can a hacker access a windows xp machine with no programs running too?

[PyX]

I think they needed Safari (the issue is in Safari, right?) and Mail (a user had to click a link in an email, right?) or something, so the no program running... I don't believe it.

Will they try to break it again another way or if it's over now?

[PyX]

Hmmm okay, apparently, you have to click a link in Safari, but the flaw is in QuickTime... and not just on OS X.