Linked by Thom Holwerda on Fri 20th Mar 2009 13:51 UTC, submitted by google_ninja
Privacy, Security, Encryption Fresh from winning the PWN2OWN contest yesterday, Charlie Miller has been interviewed by ZDNet. He talks about how Mac OS X is a very simple operating system to exploit due to the lack of any form of anti-exploit features. He also explains that the underlying operating system is much more important in creating a successful exploit than the bowser, why Chrome is so hard to hack, and many other things.
Permalink for comment 354131
To read all comments associated with this story, please click here.
RE[2]: Comment by sadyc
by lurch_mojoff on Fri 20th Mar 2009 15:24 UTC in reply to "RE: Comment by sadyc"
lurch_mojoff
Member since:
2007-05-12

And selling exploits to the makers of the software - what's wrong with that?

Nothing. But it needs to be done exactly the opposite way of what he's doing. He should have contacted Apple with the proposition to search for exploitable bugs at whatever terms he has (flat fee, per issue fee, whatever). If they had refused - move on to the next company. What he's doing now is surprisingly similar to extortion. "Boy, Apple, you have a mighty fine browser there. It'd be a shame if something bad happened to it. Care to give me a token of appreciation?"

Reply Parent Score: 4