Pwn2Own Competition Shows No Mercy For Browsers, OSes, or Phones
- 1 Comment
Up north in Vancouver, the well known computer security conference CanSecWest got off to an impressive start with its famous Pwn2Own competition. The goal each year is to take down various different platforms to highlight their security holes. And this year showed that no matter what you run, you probably are not safe.
For example, German hacker “Nils” managed to take down a Windows 7 PC which was running Firefox. Using a previously unknown hole, he took total control over the PC. Before this, Charlie Miller managed to take down a Mac OS X machine running on Safari, and Dutchman Peter Vreugdenhil took down another Windows 7 PC using Internet Explorer 8.
Most disturbing, however, was probably the attack against iPhone users. Two Europeans by the names of Vincenzo Iozzo and Ralf Phillipp Weinmann managed to lead an iPhone to a webpage where in 20 seconds the entire SMS database, including previously deleted messages, was stolen. All of the bugs were reported to the software’s creators by Pwn2Own and won’t be released until they are fixed.