IT Pro is supported by its audience. When you purchase through links on our site, we may earn an affiliate commission. Learn more

MacBook gets hacked in security conference contest

Zero-day vulnerability in Apple Safari allows hacker to gain access to remote shell to MacBook.

A MacBook running a patched up version of OS X was successfully hacked, using an vulnerability in Safari, as part of a Hack a Mac contest.

The vulnerability was exploited at the CanSecWest conference in Vancouver, Canada, by software engineer Shane Macaulay, who won a laptop for his hacking efforts, and security researcher Dino Dai Zovi, who has been credited by Apple in the past for discovering vulnerabilities in its software.

Dai Zovi, who developed the exploit away from the conference and sent it to Macauly who then applied it, will now be submitting his work in an effort to claim the $10,000 bounty on offer for successfully hacking an element of Apple's operating system.

The hacked MacBook was fully updated with the latest version of Mac OS X and all relevant patches, but had no extra security measures in place.

Matasano Security reports that the vulnerability made use of Java, and so could also lay open other browsers on the platform, including Firefox.

Had nobody successful hacked the two MacBooks that acted as test subjects for the contest, they would have been awarded as prizes for the best speakers at the three-day event.

The contest was overseen by TippingPoint's Zero Day Initiative. TippingPoint, a division of 3Com, works to reward the responsible handling of discovered vulnerabilities in systems and software.

Featured Resources

The state of Salesforce: Future of business

Three articles that look forward into the changing state of Salesforce and the future of business

Free Download

The mighty struggle to migrate SAP to the cloud may be over

A simplified and unified approach to delivering Enterprise Transformation in the cloud

Free Download

The business value of the transformative mainframe

Modernising on the mainframe

Free Download

The Total Economic Impact™ Of IBM FlashSystem

Cost savings and business benefits enabled by FlashSystem

Free Download

Most Popular

How to boot Windows 11 in Safe Mode
Microsoft Windows

How to boot Windows 11 in Safe Mode

29 Jul 2022
Samsung proposes 11 Texas semiconductor plants worth $191 billion
Hardware

Samsung proposes 11 Texas semiconductor plants worth $191 billion

21 Jul 2022
Should you take your password manager off the internet?
Sponsored

Should you take your password manager off the internet?

28 Jul 2022