Linked by Thom Holwerda on Fri 20th Mar 2009 13:51 UTC, submitted by google_ninja
Privacy, Security, Encryption Fresh from winning the PWN2OWN contest yesterday, Charlie Miller has been interviewed by ZDNet. He talks about how Mac OS X is a very simple operating system to exploit due to the lack of any form of anti-exploit features. He also explains that the underlying operating system is much more important in creating a successful exploit than the bowser, why Chrome is so hard to hack, and many other things.
Permalink for comment 354151
To read all comments associated with this story, please click here.
RE[3]: Comment by sadyc
by dagw on Fri 20th Mar 2009 17:08 UTC in reply to "RE[2]: Comment by sadyc"
dagw
Member since:
2005-07-06

According to rumors on some other site I read the exploit wasn't in WebKit per se, but in a third party (open source) library used by the javascript engine. The real kicker, according to the same post, was the the bug Miller exploited has already been found and fixed upstream, but Apple is using an old version of that library that still has the bug.

Of course the only people who actually know what happened are under NDA, so take this with a grain of salt.

Reply Parent Score: 6