510°

Apple MacBook Air Hacked In 120 Seconds

Boston (dbTechno) - Security researchers have managed to team together to win $10,000. They won the prize after they hacked into the MacBook Air in just two minutes. It is believed that they hacked the MacBook Air using a vulnerability found in the Safari Web browser.
decapitator - contributor
Published: 49 days 21 hours ago | News | PC | Tech
 
 

Showing: 1 - 30 of 30 Comments
Shut this user up Let user speak
decapitator - 49 days 21 hours ago
1 -
Damn, thats a gotta be anew record in hacking computers..whoa!!!
Shut this user up Let user speak
Cryos - 49 days 11 hours ago
1.1 -
why is everyone so amazed with the speed in which they hacked it? They obviously already had a program written and uploaded that would exploit the safari weakness before the competition began. It's not like they started from scratch.

Also, this isn't a problem inherent to the macbook air, but the safari browser. It's why I use Firefox. Now, if they hacked it through the Air's ability to connect to another computer to use it's DVD drive, that's something else......
Shut this user up Let user speak
Percy - 49 days 6 hours ago
1.2 - kinda impressive
During the event you had to find a way to execute a code remotly in a way that has never been done before even if they had it written before hand how could they know that it would work. they had no clue going into it what versions of software or anti piracy the computer would be running.
Shut this user up Let user speak
Tempist - 49 days 21 hours ago
2 -
What a blow to Safari... And potentially Macs and PCs running Safari.
Shut this user up Let user speak
Apocwhen - 49 days 20 hours ago
3 -
It just means Apple will now patch the security hole in Safari. However it must have been somewhat embarrassing to Apple
Shut this user up Let user speak
Matsuiichi - 49 days 20 hours ago
4 -
Why did this happen? Because Macs don't need to be as secure. It's not as widely used for hacking as Windows so it makes sense that there will be holes in security that people can exploit.

Still, 120 seconds...Holy crap, I want some of whatever they're smokin'. XD
Shut this user up Let user speak
Kholinar - 49 days 20 hours ago
4.1 -
If there's a hole, there's a hole.

Last year proves your theory wrong. Macs had a far smaller install base and still held out far longer as did linux.
Shut this user up Let user speak
The Lazy One - 49 days 17 hours ago
4.2 - @4.1
Reword that. It makes no sense the way you said it.
Shut this user up Let user speak
zainkis - 49 days 20 hours ago
5 -
lol... cr*p? is that good or bad.... i was planning to get one of those next month...
Shut this user up Let user speak
mighty_douche - 49 days 19 hours ago
5.1 -
Well unless you hand it over to a team of haxors you should be alright. Either way, while its embarrassing for Apple this would of helped them to establish the "hole" in their security and stick a plaster over the sucker before the problem becomes more well known, in certain circles (or forums lol).
Shut this user up Let user speak
KaaL - 49 days 19 hours ago
6 -
didn't people say that apple pc are hardest to hack?
Shut this user up Let user speak
ITR - 49 days 19 hours ago
7 -
Looks like rumors are floating around the hacker actually didn't crack the Mac on the spot, but actually had the exploit code written weeks before hand.

If so it kinda makes sense he could seize control of the remote Mac in 2 mins flat.

Apple will probably issue a sec. update in the coming weeks.
Shut this user up Let user speak
Kholinar - 49 days 19 hours ago
7.1 -
Yeah, it should also say "Apple MacBook Air Hacked in One Day and 120 seconds."

This was the second day/phase of the challenge, where the hacker had permission to direct a user to their website in order to install a hack. Today they install third-party software and see how it goes.
Shut this user up Let user speak
Adamalicious - 49 days 17 hours ago
7.2 -
10.5.3 is a pretty large security update - it's currently in testing and should be along very soon.
Shut this user up Let user speak
mirroredderorrim - 49 days 18 hours ago
8 -
Better to find this vulnerability now than later, especially being out in the open kind of helps Apple in the long run. Kind of surprised, really. Was it the first machine to be hacked, of the three?
Shut this user up Let user speak
350ZRunner - 49 days 18 hours ago
9 - But... But... But...
But the Mac fans are always giggling and pointing at the security problems or bugs in PC and point out how great the Mac is...

And people like me just ask them "If you could choose to have a key that could open a million doors or a key that could open a thousand, why would you even bother with the thousand?"
Shut this user up Let user speak
Kholinar - 49 days 17 hours ago
9.1 -
But... but... but...

Have you even researched botnets?

"MSNBC’s Bob Sullivan quotes $5,000 per day for a botnet of 50,000 to 70,000 PCs in his description of the wars between botnet owners trying to steal each other’s machines ( http://redtape.msnbc.com/20...

So 70000 machines amount to 1.825 million per year for botnet operators.

Now, the apple install-base: http://www.appleinsider.com... 22 million in early 2007.

Let's say 5 percent of that is hackable. 1 million macs waiting there easy to hack... that's $5 billion that botnet operators are passing up just because Windows has a larger install base? I don't think the Russian mob and others that run these things are that stupid.

"Vint Cerf and other pioneers were quoted in an article by the BBC saying that 150 million of the 600 million machines are bots and the situation is an epidemic." http://advosys.ca/viewpoint...

So 1/4 of pcs are owned. Believe me, there are tons of people that would die to grab a million macs.
Shut this user up Let user speak
The Lazy One - 49 days 17 hours ago
9.2 - lol
So the thousand stop telling the million every 5 seconds how much better their security is?

Do I get a prize?

edit: @9.1, I think you missed his point. Why hack those 1 million macs, when you can hack 10 million PCs in the same time?
Shut this user up Let user speak
Kholinar - 49 days 16 hours ago
9.3 -
And you missed mine.

If you have both keys and one gets you $100 billion and the other gets you five billion, you open the 100 billion door but only an idiot would throw away $5 billion. You open both.

Even a tiny bot-net is extremely lucrative. That's the point. If macs are easily hacked, then only idiots would ignore the money they could make.
Shut this user up Let user speak
The Lazy One - 49 days 15 hours ago
9.4 - But
You don't have the time or resources to do everything. It's opportunity cost. You can either open a million doors on PC, or you can open the thousand on mac and only 800 thousand on PC.

That's basic econ. for every unit of costs you put in, you get greater gains on PC hacks/greater numbers affected. There is an opportunity cost on every decision.

I could use your example to say, why don't I get 5 million jobs work each for one hour on April 29th from 9-10 at minimum wage, and be ready to retire by may.
Shut this user up Let user speak
Kholinar - 49 days 14 hours ago
9.5 -
Yep. Finding an exploit (that one lone programmer found in a couple of weeks) and running an exploit on a few dozen sites is exactly like working 5 million jobs. One person with limited resources found it for the prize of $10000. You're telling me that the best bot programmers in the world wouldn't do it for even a 1% exploit? $1 Billion dollars a year, but they won't look, while some anonymous guy does it for $10k. The guy must have been an idiot. He could have easily hacked Vista in 60 seconds and walked away with the prize.

It takes no more work if the exploit is just as available. In addition, macs will run better than the majority of the machines in their botnets. Most are 95, 98, and Me machines. Enabling more spam, ddos, etc.

There's extreme competition for the Windows bots. Most are so easy to exploit that they change hands regularly, thus losing whatever investment you had. Much easier to exploit, then lock down the Mac.
Shut this user up Let user speak
350ZRunner - 49 days 3 hours ago
9.6 - Well if I simply must continue
I only gave one reason PC security is so frequently more compromised but the underlying idea remains the same. It's all about time: There's only so much of it and simple human behavior dictates that you will spend the resources you have to obtain the greatest return on your time investment... Which in this case means going after PCs as opposed to Macs.

Another issue entirely comes from the fact that the PC is far more widely available which means two things: First of all, there are more people familiar with the systems, security and methods of PC operation and as such there are more people that know how to compromise them. Second of all a lot of the ground work in compromising PC security is already done due to the tens of thousands of people working on it.

My statement came in and of the fact that anytime a bug, security problem or virus for a PC crops up the Mac idiots start giggling like this isn't a problem they have and my point was that they don't have these problems largely because there are a lot less people working against the Mac and not because the Mac is oh so much better. If the situation were reversed and Mac's were popular while PCs were not then you would see the same thing: PC users giggling at the problems Mac has.
Shut this user up Let user speak
verb3k - 49 days 15 hours ago
10 -
Safari is a failure that is being promoted.
Shut this user up Let user speak
athlon770 - 49 days 13 hours ago
11 - I remember the setup for this last week
I am interested in the other two systems. Never been a Apple guy. So the Mac was hacked in under 2min, what about the other two? Anyone have info on the Linux or Vista machine? Or is this still going on?
Shut this user up Let user speak
obinofunkenobi - 49 days 13 hours ago
12 - that's awesome
he must've really wanted that macbook air if he put that much work into it. Safari isn't a bad browser, it's just not idiot proof enough for some people. Before firefox 3, it was the fastest browser in benchmark tests, and it comes with svg support built in unlike ie, which makes you get a stupid adobe plugin, but Opera is the king of svg if you ask me. It handles SMIL animation right out of the box, and an experimental video version as well to embed videos into svg. The big three names in web development are google, apple, and opera. IE is kind of like throwing a hot dog down a hallway for hackers. It's nice they're attacking others because it really helps with security. Look at the early hackers, now they're security experts for corporations. You'd have to be really dumb to fall for that hack btw. An unknown link is like a loaded gun.

My question about the linux box. Is it running Bastille?
Shut this user up Let user speak
The Lazy One - 49 days 13 hours ago
12.1 - The big three names in web development are google, apple, and opera
MOZILLA?!
Shut this user up Let user speak
obinofunkenobi - 49 days 13 hours ago
13 -
haha sorry about that...add mozilla as well...sorry I haven't slept for quite some time. Make that four big names to those of us who sleep properly. I givest ye bubbles for that one.
Shut this user up Let user speak
Jrome - 49 days 12 hours ago
14 - Lol
I don't think people realize that macs don't get as many bugs because hackers don't really hack for mac rofl. They generally hack PCs and send bugs on PCs because they will effect more people. If mac was mainstream it would get owned since everyone thinks it's so "secure". No, that is not the case. People just don't waste the time hacking them because it won't effect as many people