Independent evaluators Enterprise Security Network Security Officer Charlie Miller needed only approximately 10 seconds in the CanSecWest security conference “Pwn2Own” to take full control over a MacBook laptop, which had the latest Mac OS X operating system version, and win 5 thousand dollars. Charlie Miller used in Apples Safari web browser vulnerability, which allows the attacker remotely gain total control over the computer, which is installed in Mac OS X operating system after the user has uzklikšķinājis to the malicious hyperlink. Miller acknowledged that the vulnerability he had already discovered last year.
Security Specialist Charlie Miller
The new large-scale vulnerability finding Charlie Miller received 5 thousand dollars, and before the start of the security conference, he made his intention known to the Apple company exists, who was happy that Miller has found this vulnerability because, under the conference rules, he shall not disclose publicly details information about this vulnerability – it is made known to the companys TippingPoint, which is the security conference sponsors, who during the conference found the most popular web browser vulnerabilities to develop patches.
TippingPoint annually offers 5 thousand dollar bonus for each vulnerability in one of the major Internet browsers and the 10 thousand dollar bonus for each of the most popular smart vulnerabilities.
Interestingly, the Millers and last year received 10 thousand dollars for a public vulnerability in mobile Safari browser, is allowed 2 minutes of the attacker to gain control over the Apple iPhone smartphone. This year, Miller received a gift of MacBook computers, which he used the vulnerability demonstrational.
More should be noted a 25-year-old Oldenburg University (Germany), a computer science student, who declined to publicly disclose his name, performance, and in this achievers received 15 thousand dollars and Sony Vaio laptop computer for Internet Explorer 8, Safari and Firefox Web browser vulnerabilities are detected.
