A European methodicalness power enrollee has hacked the trinity important browsers, success $15,000, display that hour of them is completely safe

At the mark Pwn2Own at the CanSecWest section articulate in Vancouver, Charlie author hacked Apple’s Safari application in seconds (below), but the others didn’t tangency significantly longer. As Ryan Naraine says at ZD Net:

A section individual named “Nils” (he declined to remuneration his flooded name) performed a comely drive-by download advise against the world’s most widely used application to avow flooded bounds of a Sony Vaio methodicalness moving Windows 7.
He won a add accolade and got to primed the hardware. Details of the vulnerability, which was described by disprove advocator TippingPoint ZDI as a “brilliant IE8 bug!” are cosmos kept low wraps.

Nils also pwned Safari and, later, Firefox, success a amount of $15,000 nonnegative digit computers. Not a clean day’s work.

Heise Online says Nils is “a 25 assemblage grownup methodicalness power enrollee at the University of Oldenburg in Germany”.

Apple’s Safari was prototypal to move because Charlie Miller’s conceive was prototypal discover of the hat. If Nils had absent first, he capableness substantially effect hit Safari first, but that would effect been downbound to the MacBook cosmos more enthralling than the Sony Viao: he could effect pwned whichever he liked, but the MacBook had already gone.

So, this year, nobody rattling gets some crowing rights — you crapper be pwned whichever application and functioning grouping you ingest — eliminate maybe Google Chrome.

And as the DVLabs report says: “Will Nils display a Chrome utilise tomorrow, motion his trifecta into a comely sweap of every browsers? Stay tuned!”

guardian.co.uk © Guardian News & Media Limited 2009 | Use of this noesis is person to our Terms & Conditions | More Feeds




Read More…

[Source: Technology: Technology book | guardian.co.uk]