
Charles Miller, last year's winner of the annual "hackers VM" Pwn2Own, officially known as the CanSecWest, was well-prepared this year, and used only ten seconds to demonstrate a URL (URL) that breaks down the defense systems to a fully patched and updated MacBook whit Apple's own Safari browser.
If this site had been posted as a link to a freely accessible website, would anyone who clicked on it has been hijacked. CanSecWest is a security conference sponsored by the IT-security company Tipping Point, among others known for their deliveries to the Pentagon and other highly protected U.S. data environments.
After the rules for competition have Miller not the opportunity to publicly describe how his hack has worked.
Apple will have the opportunity to clean up. Miller is the security analyst in Independent Security Evaluator. He wins $ 5000, and will keep the hacked MacBook. He said he discovered the unknown security hole last year, and could then come up with a well prepared script to win the prize. In advance of Pwn2Own Miller had predicted that Safari would be hacked first.
Another hacker, known only as "Nils", won the prize for a URL that crack Windows 7 whit Internet Explorer 8, ie Microsoft's most secure computer technology.
His script had to be adjusted, and the demonstrators demanded consequently longer than Millers. "Nils" won also the "trifecta", the price is for the first person that are able to crack the three browsers Internet Explorer, Safari and Firefox.
The Hack of IE8 was described as "brilliant" by the organizer.
At the CanSecWest conference competitions are also about to crack operating systems for mobile phones: Android, Blackberry, iPhone, Symbian and Windows Mobile. This competition lasts three days, and is not yet completed.