Organizers of CanSecWest Vancouver 2007 have announced that they will be running a contest “PWN to OWN” where two, “loaded up, Apple Macbook Pro’s will be set up on their own AP (with security updates but otherwise default) and attendees will be able to connect to the ethernet or WiFi. The first to exploit it (there are victory conditions, and progressive rules over the three days) gets to go home with it. (Limit one per person, Can’t use the same vuln on both.) If they survive the three days in the ‘jungle,’ they become prizes for best lightning talk and best speaker. Detailed contest rules to follow shortly.”
Full article here.
That an operating system that has just recently celebrated its sixth birthday is subject to such a contest should tell you all you need to know about Mac OS X security.
Apple Mac remains ‘unhacked’ as University of Wisconsin’s Mac OS X Security Challenge ends – March 08, 2006
Mac OS X ‘unhacked’ over 24 hours and counting in genuine security challenge – March 07, 2006
University of Wisconsin launches Mac OS X Security Challenge – March 06, 2006