Macbook Hacked in 2 Minutes!


Recommended Posts

Macbook (MacbookAir) got hacked withing 2 minutes!! :-)

Source: From Macworld

(http://www.macworld.com/article/132733/2008/03/hack.html)

Where: Security Conference open (http://cansecwest.com/post/2008-03-20.21:33:00.CanSecWest_PWN2OWN_2008)

:-D

Prize he won: 3 laptops (Sony Vaio, Fujitsu U810 and the MacBook ) + US$10,000

Edited by guruparan
Link to comment
https://www.neowin.net/forum/topic/628158-macbook-hacked-in-2-minutes/
Share on other sites

OMG a computer got hacked when the hacker was actually at the computer, im so in trouble from hackers /sarcasm

Nobody was able to hack into the systems on the first day of the contest when contestants were only allowed to attack the computers over the network, but on Thursday the rules were relaxed so that attackers could direct contest organizers using the computers to do things like visit Web sites or open e-mail messages

ha.

so did he pick the macbook? :p

OMG a computer got hacked when the hacker was actually at the computer, im so in trouble from hackers /sarcasm

read the article....he wasnt on the computer, he took control of it by "tricking" someone into going to a certain webpage, which has a malicious script on it, and gives him control of the hosts computer.

directed people to go to a site, instructing somebody is about the same as actually doing it personally.

thats like ariving at somebodys door saying your from their bank and telling them to go to www.whatever.tv and having them enter their bank information to confirm they are who they say they are

directed people to go to a site, instructing somebody is about the same as actually doing it personally.

thats like ariving at somebodys door saying your from their bank and telling them to go to www.whatever.tv and having them enter their bank information to confirm they are who they say they are

You fail. Most sites tailored for specific countries start with two letters, for example, us.abc.com, i'm sure it would be simple to have someone click a link going to usa.abc.com which is controlled by the hacker who then gains access to your computer, not that hard and the person doing the clicking probably didn't suspect a thing.

directed people to go to a site, instructing somebody is about the same as actually doing it personally.

thats like ariving at somebodys door saying your from their bank and telling them to go to www.whatever.tv and having them enter their bank information to confirm they are who they say they are

No, you can get someone to go to a site by a maliciously placed link at a number of places (like a youtube video or something) or an email.

Honestly. OS X sux0rs. I bet my IE 7 with UAC protected mode wouldn't fall for something like this, lol.

Now all those snob Mac users can weep with their false brainwashed statements. IT just goes to show you no OS even LINUX is safe from hackers. Just use COMMON SENSE when computing and don't tell me the Average Joe crap because he'd even hang himself trying to follow common sense.

there is a track history that proves that it would, especially since the hacker would have directed the operator to allow it

I bet my IE 7 with UAC protected mode wouldn't fall for something like this, lol.
directed people to go to a site, instructing somebody is about the same as actually doing it personally.

thats like ariving at somebodys door saying your from their bank and telling them to go to www.whatever.tv and having them enter their bank information to confirm they are who they say they are

No, that's like saying, "hey, check this new blog out at blog.whatever.tv" and it's not a blog, but a site that serves a maliciously crafted page.

the .tv was not serious, i didnt actually mean the country

and besides

Except for reserved names like .com.tv, .net.tv, .org.tv and others, any person in the world can register a .tv domain for a fee. In 2000, Tuvalu negotiated a contract leasing its Internet domain name ".tv" for $50 million in royalties over a 12-year period
You fail. Most sites tailored for specific countries start with two letters, for example, us.abc.com, i'm sure it would be simple to have someone click a link going to usa.abc.com which is controlled by the hacker who then gains access to your computer, not that hard and the person doing the clicking probably didn't suspect a thing.

and besides even that, this is not the least bit worrying

You fail. Most sites tailored for specific countries start with two letters, for example, us.abc.com, i'm sure it would be simple to have someone click a link going to usa.abc.com which is controlled by the hacker who then gains access to your computer, not that hard and the person doing the clicking probably didn't suspect a thing.

The way domain names work is like a hierarchy. the part all the way to the right of the domain name is the top level, and the part all the way to the left is at the bottom. So in the example us.abc.com, com is at the top, and us is at the bottom.

com

|

abc

/ | \

jp us uk

So, in order for someone to create the domain usa.abc.com, they would have to gain control over the abc domain. If someone were to gain control over the abc domain, they could cause a lot more damage than just creating a new URL to trick people.

Now all those snob Mac users can weep with their false brainwashed statements. IT just goes to show you no OS even LINUX is safe from hackers. Just use COMMON SENSE when computing and don't tell me the Average Joe crap because he'd even hang himself trying to follow common sense.

Only reason its said that OS X/Linux users are safer from hackers than windows users, is because the amount of people that use windows and dont have a clue what they are doing with a computer, thus makin them a easy target for hackers

The way domain names work is like a hierarchy. the part all the way to the right of the domain name is the top level, and the part all the way to the left is at the bottom. So in the example us.abc.com, com is at the top, and us is at the bottom.

com

|

abc

/ | \

jp us uk

So, in order for someone to create the domain usa.abc.com, they would have to gain control over the abc domain. If someone were to gain control over the abc domain, they could cause a lot more damage than just creating a new URL to trick people.

I understand how domains are formed, i was commenting in regards to copycat/phishing sites where the goal is to look exactly like a legit site. In my example, a hacker could take that a step further and create a domain that looks very similar to the legit site.

I'm glad this has come out.

I'd rather that other Mac users woke up and realised that we AREN'T magically protected by Mac OS X and that given the knowledge of a flaw and what seems harmless to a user, damage can be done.

If anything, I'd say Windows users are a little better protected - not only do the browsers try and pick up on stuff (like phishing or fake sites), but they are also probably running Anti-Virus software and have a reasonable firewall in place - something which is rare on Mac OS X or Linux.

Edited by daveoc64
This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Posts

    • So its a museum of AI prompts? Boring
    • This one baffles me...so they are creating a museum based around the Ship of Theseus? A museum is supposed to preserve things. It doesn't really work if the conversation goes, "I gazed upon Starry Night the other day, the colours were beautiful!" "Yeah...I didn't expect Godzilla to show up, though." Create a building devoted to displaying AI work, fine. The rainforest idea sounds interesting and I would consider visiting if they pay me a few bucks. But don't call it a museum...
    • >defenders of AI-generated artworks often claim that AI is just a tool It is not. It is the inhuman artist replacement. The human writing the prompt is the employer/manager requesting the work product of the artist -- a supervisory/descriptive job that doesn't carry with it any rights to the copyright of that work product at all. And since AI is not human itself, it can't gain copyright for anything it is asked to regurgitate or hallucinate, so it can't transfer that copyright to the employer/manager/human who asked for the output. This was all legally reaffirmed last year. So, no, while there are AI tools, AI slopware generation is NOT a "tool" in the legal definition of that word.
    • As long as i get to play GTA 6 before it ends 😂😂
    • Google is opening the world's first AI museum in Los Angeles by Ivan Jenic Image via: Google Ever since AI image generators went mainstream, the debate over whether AI-generated art is real art hasn't let up. Those who don’t consider AI to be art say that if a machine does the creating and anyone can prompt it, there’s no skill involved, and therefore no art is produced. The counter-argument is equally persistent, as defenders of AI-generated artworks often claim that AI is just a tool, and that every major technological breakthrough, like the camera or the computer, was met with the same skepticism before eventually being accepted as a legitimate creative medium. Google’s position in this debate is clear. Which is no surprise, as the company is investing billions in AI infrastructure. And now, in efforts to encourage people to use its AI even more, Google is opening Dataland on June 20, which it's calling the world's first AI arts museum. Located inside The Grand LA, a Frank Gehry-designed building in Los Angeles, the museum spans 25,000 square feet. The museum is built around a collaboration with media artist Refik Anadol, who has worked with Google since 2016. The inaugural exhibition is called Machine Dreams: Rainforest, and is powered by an AI model trained on “an extensive dataset of the natural world.” It generates 1.2 billion pixels of visuals in real time and reacts to visitors dynamically. The space also generates soundscapes, real-time emotion sensing, and algorithmically produced scents. Image via: Refik Anadol Studio / Google Google says that the museum is powered by its Gemini models, which run on Google Cloud. So, everything is generated inside one of Google’s AI data centers and is streamed to the museum. Alongside the museum opening, Google Arts & Culture is funding an AI Artist Residency, giving four artists $25,000 grants each, along with mentorship from Refik Anadol Studio and access to Google's machine learning tools. Their work will be shown at Dataland and on the Google Arts & Culture website later this year. Google’s AI museum will undoubtedly initiate a fired-up debate on social media, and we can’t wait to see the first reactions. Via: Smithsonian Magazine
  • Recent Achievements

    • First Post
      AndreaB earned a badge
      First Post
    • Week One Done
      Huge Trailer earned a badge
      Week One Done
    • Week One Done
      Classifyskilleducation earned a badge
      Week One Done
    • One Month Later
      eurospharma62 earned a badge
      One Month Later
    • Week One Done
      With What earned a badge
      Week One Done
  • Popular Contributors

    1. 1
      +primortal
      570
    2. 2
      +Edouard
      178
    3. 3
      PsYcHoKiLLa
      74
    4. 4
      Michael Scrip
      68
    5. 5
      neufuse
      64
  • Tell a friend

    Love Neowin? Tell a friend!