UPDATED 16:31 EDT / MARCH 11 2011

Pwn2Own hackfest: Apple goes down, Google, Android unscathed

Reports are coming in from the Pwn2Own annual hacking contest.  These things are always great to read about and fun to watch.  Apparently, the Apple Safari Browser was compromised in a blazing 5 seconds by using a specially crafted web page.  In preparation for the contest several of the leading web browsers released updates to try and secure their respective products.  Also quickly hacked were the iPhone 4 browser and RIM Blackberry Torch 9800.  Internet Explorer version 8 was another victim of hacks as well as Firefox.

The security update Apple released ahead of the hacking contest patched some 64 potential security flaws, but missed the one exploited by the Vupen team. That turned out to be good news for the team because they were attacking Safari 5.0.3, but if their exploit had been patched with the just released 5.0.4 update they wouldn’t have won the prize.

Surprisingly. Google’s Chrome browser was not compromised under the auspices of the event.  They even offered a $20,000 prize that was hardly challenged.  Experts point at the extensive use of sandboxing in the Chrome application as a deterrent.  Additionally Google released up to 25 updates just two days ago in anticipation of the challenge.   Microsoft notably did not release any updates ahead of the event.  Google’s Android was also not compromised after the crafted attacks as well as Windows 7 mobile.

Each year, members of the community gather for this event held during the CanSecWest security conference, and participants gather their hacking efforts to compromise technology devices.  Vulnerabilities discovered and exploited during the contest are not released until the vendors have been notified of the details of the compromise and they have been corrected.


A message from John Furrier, co-founder of SiliconANGLE:

Support our mission to keep content open and free by engaging with theCUBE community. Join theCUBE’s Alumni Trust Network, where technology leaders connect, share intelligence and create opportunities.

  • 15M+ viewers of theCUBE videos, powering conversations across AI, cloud, cybersecurity and more
  • 11.4k+ theCUBE alumni — Connect with more than 11,400 tech and business leaders shaping the future through a unique trusted-based network.
About SiliconANGLE Media
SiliconANGLE Media is a recognized leader in digital media innovation, uniting breakthrough technology, strategic insights and real-time audience engagement. As the parent company of SiliconANGLE, theCUBE Network, theCUBE Research, CUBE365, theCUBE AI and theCUBE SuperStudios — with flagship locations in Silicon Valley and the New York Stock Exchange — SiliconANGLE Media operates at the intersection of media, technology and AI.

Founded by tech visionaries John Furrier and Dave Vellante, SiliconANGLE Media has built a dynamic ecosystem of industry-leading digital media brands that reach 15+ million elite tech professionals. Our new proprietary theCUBE AI Video Cloud is breaking ground in audience interaction, leveraging theCUBEai.com neural network to help technology companies make data-driven decisions and stay at the forefront of industry conversations.