Linked by Thom Holwerda on Sun 30th Mar 2008 20:35 UTC
Privacy, Security, Encryption As you surely know by now, the CanSecWest conference was the stage for a contest, PWN to OWN. Three laptops were set up; laptops running Windows Vista, Ubuntu Linux, and Mac OS X. The goal was to hack the computer and read the contents of a file located on each of the machines, using a 0day code execution vulnerability. During the first day, you can only attack the machine over the network, without physical access. On the second day, user interaction comes into play (visiting a website, opening an email). On the third and final day, third-party applications are added to the mix. Each machine had the same cash prize on its head. As you all know, the Mac was hacked first, on day two. The user only had to visit a website, and the Mac was hacked. Vista got hacked on the third day using a security hole in Adobe's Flash, and the Ubuntu machine did not get hacked at all. Update: Roughly Drafted responds.
Permalink for comment 307276
To read all comments associated with this story, please click here.
RE[2]: OOooh Oooh Me first?
by MamiyaOtaru on Sun 30th Mar 2008 21:52 UTC in reply to "RE: OOooh Oooh Me first?"
MamiyaOtaru
Member since:
2005-11-11

I tend to keep sudo, but use a limited account with no sudo rights. Getting root access involves sudo adminUser (adminuser password), sudo -i (addminuser password). I get the benefits of having no root password as given by sudo, while running as what I'd actually consider a limited user.

Edited 2008-03-30 21:53 UTC

Reply Parent Bookmark Score: 3