Home › News › Security
Major browsers fall on day one of Pwn2Own, Chrome survives
Not surprisingly there were a few familiar faces showing their exploits at the competition. Just like in 2009 and the year before, Charlie Miller was awarded a cash prize after hacking Safari on a MacBook Pro without having physical access to the machine. Next was Peter Vreugdenhil, who managed to bypass Windows security features including Data Execution Prevention code via Internet Explorer 8 to take over a PC -- receiving $10,000 plus the hardware.
Another former winner known only by his first name, Nils, received $10,000 for exposing a memory corruption flaw in the latest version of Mozilla's Firefox browser. Of all the browsers set up as targets for the contest, only Google's Chrome remained standing on the first day, while Apple's Safari was even saw a second hack centering on the iPhone.
Within minutes of the competition starting, two European researchers, Vincenze Iozzo and Ralf Weinmann, managed to download the SMS database of a fully patched iPhone 3GS simply by visiting a specially crafted website. According to the researchers, while the exploit focused just on the SMS data, the same attack could be designed to access contacts, photos, and other data on the iPhone without the user having any idea an attack was underway.
User Comments (34)
Post a comment|
Guest
on March 26, 2010 3:32 PM |
Every one who thinks Opera is not a "real browser", or it is a "new kid", or it's not compliant to security and other standards, do not realy know what Opera is. In fact, Opera uses to be the first to implement a lot of very interesting things (at least to me), like mouse gestures (since version 3.sth), "Reload every..." (I use this as keepalive...), tabs, test compliance (http://acid3.acidtests.org/, http://www.css3.info/selectors-test/test.html), synchronization, widgets and, more recently, some features not interesting to me, but certainly useful to a lot of people (Opera Turbo, Opera Unite,...). By the way, I think one should point his/her preferred browser to those two links before saying something about Opera. In spite of some annoyances (e.g. lack of smartcard support), I'm stuck with Opera for some 12+ years. (please forgive my poor english...) edivaldoapereira@yahoo.com.br |
|
Guest
on March 26, 2010 3:41 PM |
I strickly use IE8 and I never had a virus detected. I tried all other Browsers but alway revert back to MS IE. I love Bill Gates! I wish I was he son! He is my hero! Windows 7 rules and so does IE8. |
|
Burty117
on March 26, 2010 4:00 PM |
Guest said: I strickly use IE8 and I never had a virus detected. I tried all other Browsers but alway revert back to MS IE. I love Bill Gates! I wish I was he son! He is my hero! Windows 7 rules and so does IE8. I pitty you deeply. Or its because your smart and just don't click on stuff you don't know. Either way though, still pitty you for having to use the worst browser ever made. |
|
captaincranky
on March 26, 2010 4:21 PM |
I pitty you deeply. Or its because your smart and just don't click on stuff you don't know. Either way though, still pitty you for having to use the worst browser ever made. There,there, now Burty, don't let that mean old nasty "guest" upset you. That was just the posting equivalent of a "drive by download". Don't give it a second thought, just go play your Crysis game. |
|
Burty117
on March 26, 2010 5:21 PM |
captaincranky said:
I pitty you deeply. Or its because your smart and just don't click on stuff you don't know. Either way though, still pitty you for having to use the worst browser ever made. There,there, now Burty, don't let that mean old nasty "guest" upset you. That was just the posting equivalent of a "drive by download". Don't give it a second thought, just go play your Crysis game. LOL! this made me chuckle =) I do quite enjoy starting rows on here though. its nice to see people who are still (relativley) sane =) |
|
matrix86
on March 26, 2010 5:58 PM |
Everybody keeps listing the cool features of Opera, but they ALWAYS forget what I think is the coolest...the voice commands. Why are these never brought up? I don't really use it anymore because I prefer the extreme customization of FireFox. Now that I have Dragon NaturallySpeaking, I just use that to control my browser. But for a while, I used the voice control in Opera and it worked very well for me. |
|
Clrabbit
on March 26, 2010 8:01 PM |
Couple of things to answer here: "How do people that don't use AV know there clean?" The smart users when they say "I don't use AV" really means "I don't bother with active AV software." meaning once a year or less they do have about 3~6 AV programs they sweep there computer with a find nothing! At least this is what I do every time before I reformat my system or once a year once ever comes sooner I like to run a good sweep of the system, just for fun. so far the the only things found over the last 10years has been 4 cookies in firefox... that I'm pretty sure were false positives. Sense they were data tacking cookies I actually wanted to keep around, so i didn't have to log-in to things all the damn time. For the most part as long as you have your Browser/system/firewall/router/modem setup right it doesn't matter how "Questionable" the site is your pretty safe, as long as your not stupid enough to give out information about your self. In order to exploit a flaw a site most use active code, if you have every thing but basic XHTML and CSS disabled, it would be externally hard for a site to automaticly do any thing to you. The way most people get them selfs "infected" witch is a very relative term sense most of the things people call "viral" are really things they agreed to, they just didn't read the ELUA of something they installed. As a tech I've had people swear up and down they go something from a ad on google... a quick look around add/remove programs and its like ah~ no you are using about 10 ad supported programs. There are viral ad's and site code out there, but be smart keep ActiveX, Java, Scripts, and flash disabled on sites you don't trust. Clean your cache often, and have cookies auto deleted, only manually keep cookies that you know you want, and don't accept cookies from every site on the Internet. "I mean really didn't your parents teach you not to take cookies from strangers?" |
|
SNGX1275
on March 26, 2010 8:19 PM |
Everybody keeps listing the cool features of Opera, but they ALWAYS forget what I think is the coolest...the voice commands. Why are these never brought up? I've actually never used Voice Commands, presumably the biggest reason is that until recently none of my computers have had a mic. I know they all have a line in, but I've never had a mic (well not since about 98 or 99) now my netbook does, but I've never used it. One thing that was huge for me when I first was using Opera was Mouse Gestures, it was really awesome to hold right mouse, flick left, and have that go back. I hardly use that anymore because my main PC's mouse has a back and forward arrow on it, so I just use those. But back when I just had a Logitec iFeel, mouse gestures were amazingly useful. |
|
Guest
on April 24, 2010 3:38 AM |
@burty117 Are you serious? You don't click on main advertisements, or any at all? What kind of paranoid way is that to 'surf'. Even with your paranoia, someone who says they've never had a virus is a complete ***** - everyone has and will, probably even within a few days of browsing. You say you don't go to the less popular sites, often they are probably safer than your more popular sites - these types of sites are targetted for iframe droppers, leaving you with a nice browser exploitation (and dirty payload). Where it is obvious endpoint security's main flaw lies on the common user, browser security is not to be over-estimated, there exists databases of exploits for current or recent versions of the top browsers, and yes, that INCLUDES Opera. |
Most Popular
| Trending | Featured |
-
iOS 5.1.1 untethered jailbreak tool released, supports 4S, iPad 3
-
After five days, Facebook ranks as worst IPO flop of the decade
-
Rumor: Windows 8 RC will launch June 1, will ship with Adobe Flash
-
Rumor: AMD "Piledriver" FX CPU production to begin Q3 2012
-
Is Apple's USB wall adapter really worth $29?
Editors' Smartphone Picks
Subscribe to TechSpot
Get free exclusive content, learn about new features and tech breaking news.