A bad hair day for Safari
[Quote:]
Show organizers offered a Sony Vaio, Fujitsu U810 and the MacBook as prizes, saying that they could be won by anybody at the show who could find a way to hack into each of them and read the contents of a file on the system, using a previously undisclosed “0day” attack.
Nobody was able to hack into the systems on the first day of the contest when contestants were only allowed to attack the computers over the network, but on Thursday the rules were relaxed so that attackers could direct contest organizers using the computers to do things like visit Web sites or open e-mail messages.
Miller, best known as one of the researchers who first hacked Apple’s iPhone last year, didn’t take much time. Within 2 minutes, he directed the contest’s organizers to visit a Web site that contained his exploit code, which then allowed him to seize control of the computer, as about 20 onlookers cheered him on.
March 29th, 2008 at 11:37
I remember last year or the day before Safari was hacked similarly. Bug still around?
March 29th, 2008 at 11:38
No, it appears this is a new one.
March 29th, 2008 at 11:40
Hope so. I expect them to correct stuff like this fast