Linked by Thom Holwerda on Fri 20th Mar 2009 13:51 UTC, submitted by google_ninja
Privacy, Security, Encryption Fresh from winning the PWN2OWN contest yesterday, Charlie Miller has been interviewed by ZDNet. He talks about how Mac OS X is a very simple operating system to exploit due to the lack of any form of anti-exploit features. He also explains that the underlying operating system is much more important in creating a successful exploit than the bowser, why Chrome is so hard to hack, and many other things.
Thread beginning with comment 354345
To read all comments associated with this story, please click here.
I am missing something ?
by Francis Kuntz on Sat 21st Mar 2009 17:57 UTC
Francis Kuntz
Member since:
2006-09-23

They said they hack Mac OS. Ok, but which release of Mac OS ?

Because Leopard should have sandbox and randomization of memory (according to Apple).

I can't find the information anywhere ;)

Reply Score: 2

RE: I am missing something ?
by soonerproud on Sat 21st Mar 2009 18:03 in reply to "I am missing something ?"
soonerproud Member since:
2008-03-05

The contest rules are to use the most recent released version of the OS (In this case it is leopard) fully patched. There were also Apple representatives present during the contest.

Edited 2009-03-21 18:03 UTC

Reply Parent Score: 2

RE: I am missing something ?
by kaiwai on Sun 22nd Mar 2009 03:02 in reply to "I am missing something ?"
kaiwai Member since:
2005-07-06

They said they hack Mac OS. Ok, but which release of Mac OS ? Because Leopard should have sandbox and randomization of memory (according to Apple). I can't find the information anywhere ;)


There is a difference between having the technology in the operating system and the software actually using it. In the case of Safari, it exists in the operating system but Apple isn't taking advantage of it.

Reply Parent Score: 1