The annual Pwn2Own hacking competition wrapped up its 2015 event in Vancouver with another banner year, paying $442,000 for 21 critical bugs in all four major browsers, as well as Windows, Adobe Flash, and Adobe Reader.
The crowning achievement came Thursday as contestant Jung Hoon Lee, aka lokihardt, demonstrated an exploit that felled both the stable and beta versions of Chrome, the Google-developed browser that's famously hard to compromise. His hack started with a buffer overflow race condition in Chrome. To allow that attack to break past anti-exploit mechanisms such as the sandbox and address space layout randomization, it also targeted an information leak and a race condition in two Windows kernel drivers, an impressive feat that allowed the exploit to achieve full System access.
(Score: 2) by GungnirSniper on Saturday March 21 2015, @11:48PM
HP owns the whole damn contest but yet can't seem to get the media to notice their involvement. What's the point of buying the whole thing if they don't use it?
Tips for better submissions to help our site grow. [soylentnews.org]
(Score: 3, Funny) by zugedneb on Sunday March 22 2015, @12:36AM
The invisible hand of the market finally finds it's way into advertising...
People are assumed to be so impressed by the content, that they will chew through anything to find out who the sponsors are.
There is a peaceful time ahead of us, with minimal intrusion and extreme courtesy from the sponsors in general.
I know this for a fact.
old saying: "a troll is a window into the soul of humanity" + also: https://en.wikipedia.org/wiki/Operation_Ajax