Chrome Still Standing at Pwn2Own

Posted on 25. Mar, 2010 by in News

flattr this!

pwnedYesterday’s first day for the Pwn2Own contest came and went literally for the Chrome browser. The competition, which pits security minded hackers against web browsers, operating systems and mobile phone platforms did however do a number on Apple products. Apple’s Safari browser was hacked on both Snow Leopard and the iPhone, while Charlie Miller, a previous winner, snagged ten grand by remotely taking control of Safari on a MacBook Pro. Miller is the one who was quoted a while ago saying that Chrome 4 without Flash on Windows 7 was the most secure computing environment out there today.

Also, IE8 on Windows 7 was successfully hacked on the first day of Pwn2Own, with researcher Peter Vreugdenhil getting past Windows 7′s data execution protection (DEP) and address space layout representation (ASLR) to exploit IE8. An hour after that, a freelancer named Nils was also able to use those same Windows vulnerabilities to also hack Firefox 3.6.

Yesterday was the day for Windows 7, and today the competition will face Vista, with tomorrow highlighting XP. Will Chrome fall on a less secure system? We shall see. Here is the complete three day schedule for Pwn2Own:

Day 1

The target pairings for day one are:

  • Microsoft Internet Explorer 8 on Windows 7
  • Mozilla Firefox 3 on Windows 7
  • Google Chrome 4 on Windows 7
  • Apple Safari 4 on MacOS X Snow Leopard

Day 2

  • Microsoft Internet Explorer 7 on Windows Vista
  • Mozilla Firefox 3 on Windows Vista
  • Google Chrome 4 on Windows Vista
  • Apple Safari 4 on MacOS X Snow Leopard

Day 3

  • Microsoft Internet Explorer 7 on Windows XP
  • Mozilla Firefox 3 on Windows XP
  • Google Chrome 4 on Windows XP
  • Apple Safari 4 on MacOS X Snow Leopard

Most top prizes are in the $10,000 range, plus the hardware that is hacked on is also awarded. There is also a focus on these mobile platforms (and as we said that the iPhone has already been hacked):

  • Apple iPhone 3GS
  • RIM Blackberry Bold 9700
  • Nokia E72 device running Symbian
  • HTC Nexus One running Android

We’ll keep you posted, especially on the Google-related products.

  • services sprite
  • services sprite
  • services sprite
  • services sprite
  • services sprite
  • services sprite
  • services sprite
  • services sprite
  • services sprite

Tags: , , , , , , , , , , , , , ,

2 Responses to “Chrome Still Standing at Pwn2Own”

  1. Eralper

    26. Mar, 2010

    Chrome had many security problems when it first come out, but it seems that they had worked a lot to close these problems.
    I was hoping IE8 to have a better performance actually.
    Let’s wait and see how this competition will end.

  2. [...] Related posts:Chrome Still Standing at Pwn2Own [...]

Leave a Reply

Name

Email

Website

Comment