Dino Dai Zovi and Shane Macauly succeeded in gaining OS X user-level shell access to a MacBook Pro over a wireless network, Macworld reports.
The hack was written and implemented on day two of the CanSecWest security conference held at the end of the last week. It was accomplished in just nine hours, but only after contest hosts eased rules and allowed security experts to attack through code sent through malicious websites instead of directly compromising the OS itself.
Apple has turned down an opportunity to comment on the Safari flaw, but the vulnerability will be disclosed to them by 3Com, who put up the cash prize.
Recommended Comments