28-03-2008, 07:01 PM
ArrayMiguel, so vem deitar por terra o mito q os Mac sao super seguros, etc etc etc.
a medida q a base instalada aumenta, vai aumentar tambem o conhecimento de falhas, pontos vulneraveis, erros and so on.[/quote]
not entirely accurate<!--sizec--><!--/sizec-->
The supposed hack was on the second day of the challenge which isn't mentioned by MacNN. Not a single attendee entered the contest on day one, when all vulnerabilities had to reside in the machine's operating system, drivers or network stack. On day two, the attack surface was expanded to include browsers, mail applications and other common applications.
He exploited a bug in Safari. Nothing says this guy didn't find the exploit in Safari before going. Does this exploit affect firefox also?
ah, not 2 minutes
What the article does not point out is that on the first 24-hours of the contest, the contestants were suppose to do an attack on the Mac remotely via the network alone.
No one could hack the Mac remotely via the network alone.
The second day, they relaxed the rules and allowed the contestants physical access to the Mac so that they could install an automated user to receive emails or use a browser to go to a malicious website set up by the contestant.
Duh.
It took more than 24-hours to hack the Mac. It takes days to program an automated user or develop and program a malicious website. They had to do the work even before the contest.
And it took physical access to the computer to hack it. They could not hack it over the network at all!
Thus the contest is a crock.
I doubt any user will allow a crook or stranger physical access to their personal computer. Once a person has physical access to a computer then any computer can be hacked. Through the firewire ports, any Windows computer is instantly compromised, for example.
:noworry:
a medida q a base instalada aumenta, vai aumentar tambem o conhecimento de falhas, pontos vulneraveis, erros and so on.[/quote]
not entirely accurate<!--sizec--><!--/sizec-->
The supposed hack was on the second day of the challenge which isn't mentioned by MacNN. Not a single attendee entered the contest on day one, when all vulnerabilities had to reside in the machine's operating system, drivers or network stack. On day two, the attack surface was expanded to include browsers, mail applications and other common applications.
He exploited a bug in Safari. Nothing says this guy didn't find the exploit in Safari before going. Does this exploit affect firefox also?
ah, not 2 minutes
What the article does not point out is that on the first 24-hours of the contest, the contestants were suppose to do an attack on the Mac remotely via the network alone.
No one could hack the Mac remotely via the network alone.
The second day, they relaxed the rules and allowed the contestants physical access to the Mac so that they could install an automated user to receive emails or use a browser to go to a malicious website set up by the contestant.
Duh.
It took more than 24-hours to hack the Mac. It takes days to program an automated user or develop and program a malicious website. They had to do the work even before the contest.
And it took physical access to the computer to hack it. They could not hack it over the network at all!
Thus the contest is a crock.
I doubt any user will allow a crook or stranger physical access to their personal computer. Once a person has physical access to a computer then any computer can be hacked. Through the firewire ports, any Windows computer is instantly compromised, for example.
:noworry:
..................................................................................................................
I know you believe you understand what you think I said, but I am not sure you realize that what you heard is not what I meant....
.................................................................................................................
I know you believe you understand what you think I said, but I am not sure you realize that what you heard is not what I meant....
.................................................................................................................