IE8, Firefox and Safari Hacked to Bits at Pwn2Own

[JMcEntegart]

Firefox, IE8 and Safari have all been successfully hacked at CanSecWest's Pwn2Own event.

IE8, Firefox and Safari Hacked to Bits at Pwn2Own : Read more

 

[bison88]

So does that mean Opera 10 users are safe?

 

[scuba dave]

All i have to say is.. I need to switch majors.. 10,000 bucks for less than a month of work? Sold!

 

[milktea]

I better stop using Firefox, IE8, Safari, and ... my computer.

 

[amabhy]

Give people money and prizes and anything can be hacked. I'm surprised tech companies don't hire professional hackers (or crackers, as the good guys like to be called) to find holes so they can fix em early.

 

[Mottamort]

I'm surprised tech companies don't hire professional hackers (or crackers, as the good guys like to be called) to find holes so they can fix em early.

I think they do that already

 

[dman3k]

I wonder how long it took to hack FF or IE8.

 

[hellwig]

[citation][nom]bison88[/nom]So does that mean Opera 10 users are safe?[/citation]
Uh, sadly no. While I use Opera myself, it more than likely means they didn't waste time hacking a web browser only 1.5% of us use.

 

[aneasytarget]

The key point is that you have to go to a specific website. If you go to trusted websites, less chance of being hacked.

 

[warezme]

Hey look I hacked Opera!!!!....., (sounds of crickets in the background)

 

[war2k9]

There is no such thing as 100% safe from hacks.

 

[Guest]

What about Google Chrome?

 

[dgingeri]

yet all this can be avoided by avoiding either untrusted sites or allowing scripting on sites you don't trust but want to visit. I'm good with that. Firefox with Noscript, AdBlock plus, and flash blocker is good for me. Couple that with Spybot's immunize function and it's almost invulnerable. No viruses, trojans, or other malware for over 7 years now. (Not counting BitDefender's little false positive that brought my system down on Saturday. That was an inside job and a malfunction.)

 

[dgingeri]

[citation][nom]war2k9[/nom]There is no such thing as 100% safe from hacks.[/citation]

There are 2 ways to prevent hacking 100%: not having your computer hooked to the internet in any way, or simply not using a computer.

 

[masop]

[citation][nom]war2k9[/nom]There is no such thing as 100% safe from hacks.[/citation]

Remove network cable and/or phone cable from computer, disable lan card, disable wireless card and modem port if applicable. Remote hack is not possible at that point, but the computer would be releatively worthless, as most computers in the world have some type of connectivity to the internet. Oh well, what can you do? Vulnerabilities are a side effect of life itself; especially when technology is involved.

 

[scuba dave]

[citation][nom]dgingeri[/nom]There are 2 ways to prevent hacking 100%: not having your computer hooked to the internet in any way, or simply not using a computer.[/citation]

And what happens when someone goes "The Net" on you?(Old Sandra Bullock movie)

With how everything is going digital nowadays, there is no solid way to be 100% safe from the right hacker, who is 100% determined to mess your life up. Its just a matter of whether you are fortunate enough to not be noticed and/or not be a desirable enough target to them. And desirable, for the record, can mean almost anything.

 

[maestintaolius]

[citation][nom]amabhy[/nom]Give people money and prizes and anything can be hacked. I'm surprised tech companies don't hire professional hackers (or crackers, as the good guys like to be called) to find holes so they can fix em early.[/citation]
they do

 

[ben850]

i'll stick to sub7 /sarcasm

 

[Shadow703793]

My question is, would NoScript have been able to block the Fire Fox attack?

 

[cryogenic]

[citation][nom]JmeNdriks[/nom]What about Google Chrome?[/citation]

No one attempted to hack Google Chrome (according to arstechnica.com). Chrome was patched for a series of critical vulnerabilities a few days before Pwn2Own. I personally don't put my entire believe in coincidences, and this one is somewhat funny ...

 

[hoof_hearted]

[citation][nom]war2k9[/nom]There is no such thing as 100% safe from hacks.[/citation]

Confiker uses autorun.inf and jumpdrives. No network needed. If one of these sits dormant on your PC, then the one day you hook up, snap.

 

[JohnnyLucky]

I've got the wrong job!

 

[Hatecrime69]

2 weeks to hack ie8? Isn't that a tad slow?

 

[hotchrisbfries]

"I could use it to do the ASLR bypass,"

"I started with a bypass for ALSR"

What???????

 

[wolfseeker2828]

[citation][nom]hotchrisbfries[/nom]"I could use it to do the ASLR bypass,""I started with a bypass for ALSR"What???????[/citation]

He was looking through his LOGS so he could FIND the ASLR bypass, silly.