Slashdot Mirror

← Back to Stories (view on slashdot.org)

MacBook Air First To Be Compromised In Hacking Contest

Posted by Soulskill on from the potential-reality-tv-show dept.

Multiple readers have written to let us know that the MacBook Air was the first laptop to fall in the CanSecWest hacking contest. The successful hijacking took place only two minutes into the second day of the competition, after the rules had been relaxed to allow the visiting of websites and opening of emails. The TippingPoint blog reveals that the vulnerability was located within Safari, but they won't release specific details until Apple has had a chance to correct the problem. The winner, Charlie Miller, gets to keep the laptop and $10,000. We covered the contest last year, and the results were similar.

46 of 493 comments (clear)

  1. 0wnership by Anonymous Coward · · Score: 5, Funny

    Ah, the pride of 0wnership.

  2. do you hear that ? by Anonymous Coward · · Score: 5, Funny

    the sound of a million fanbois as they screamed Nooooooooooooo i sense i disturbance in the reality distortion generator set comments to flamebait and activate the extra moderation modules captain taco

    1. Re:do you hear that ? by Lovat · · Score: 4, Funny

      You are correct, sir. Flaimbait tags on both the story and half the comments here in 3 . . . 2 . . . 1 . . .

  3. Better headline by BadAnalogyGuy · · Score: 5, Funny

    Safari browser has massive security hole.

    It's funny how they turned a huge hole in the Safari browser into a commercial for the Mac Air.

    "Small size, big holes"

    1. Re:Better headline by ilikejam · · Score: 5, Funny

      There's a 'yo mama' joke in there somewhere.

      --
      C-x C-s C-x k
  4. Re:Identical articles by Anonymous Coward · · Score: 5, Insightful

    No, this year Vista and Ubuntu were in the contest as well. But the mac got hacked in two minutes and the Vista and Ubuntu machines resisted every hack. Big difference there. Oh, and I'd like to say, HA HA /nelson - now tell us again how absense of mac malware is not because of small market share.

  5. Re:I think this section is relevant by chubs730 · · Score: 5, Insightful

    Pretty much says that a laptop widely meant for home users was only compromised when allowed access to some of the most widely used applications? I'm not sure what you're trying to say (or not, rather) but a hole in safari is a bit of an issue; unless of course you're just concerned with that server running on your Air ;).

  6. Keep the laptop by iliketrash · · Score: 4, Funny

    "The winner, Charlie Miller, gets to keep the laptop and $10,000."

    You mean like when your airplane flight is cancelled and the airline offers you a free ticket. Or when the food at a restaurant is crappy and they give you a coupon to eat there again.

    1. Re:Keep the laptop by MobileTatsu-NJG · · Score: 4, Insightful

      You mean like when your airplane flight is cancelled and the airline offers you a free ticket. Or when the food at a restaurant is crappy and they give you a coupon to eat there again. Well.. sorta. It's more like when a company loans you a laptop to hack, then they let ya keep it, then they give ya ten thousand dollars on top of that.
      --

      "I like to lick butts!" by MobileTatsu-NJG (#32700246) (Score:5, Informative)

  7. Re:Identical articles by Anonymous Coward · · Score: 5, Funny

    The Vista machine would have been hacked quicker if it ran faster

  8. Re:Get the Facts is a better tag. by Anonymous Coward · · Score: 5, Funny

    Yes. The totally unbiased facts from a guy with "Mac" in his username.

  9. Re:right by recoiledsnake · · Score: 5, Insightful
    And the karma-whoring RDF sets in.

    anyone who either has physical access to the computer being attacked or can convince the user running the machine to install/download anything is capable of breaking pretty much any OS they want. So no one wanted 20k of cash and expensive windows and linux laptops? Why weren't anyone able to hack the Windows and Linux laptops? They did not have physical access to the machine. Nothing was downloaded or installed manually. Only a website hosted by the attacker was just visited by the organizers on the browsers and mails were opened(attachemnts were not) and read.

    The fact that they had to relax the rules so that the Mac could be broken into illustrates this nicely. The fact that inspite of the relaxed rules, the Windows and Linux laptops were not broken into, illustrates totally something else. I will let you guess it. They are going to further relax the rules tomorrow to include third party applications to make it even easier to hack. Unfortunately, the Mac won't be there because it didn't make it to the third day.
    --
    This space for rent.
  10. Re:And in other news..... by chubs730 · · Score: 5, Informative

    "We Love Microsoft and Hate All Things Apple." O_O Are we on the same slashdot?
  11. Re:Users == the problem by recoiledsnake · · Score: 5, Insightful

    Good to see that social engineering is still all it requires to compromise something. So why weren't the Windows and Linux machines be able to be hacked inspite of the social engineering and users being at the helm all day?
    --
    This space for rent.
  12. Maybe it's major, or maybe no big deal by jht · · Score: 4, Insightful

    To me, a web hack to worry about (on any platform/browser) is one that can just be triggered by viewing a compromised page (like happens to most unpatched Windows machines that get nailed by drive-bys). I'm not nearly as worried about ones that require user intervention - clicking on a link, button, or something of the sort.

    So if the Mac was tagged by just loading a page that delivered the hack, that's bad. Quite bad. If he had to click and download something (and perhaps defeat the auto-quarantine they use), that's not so much a big deal, though still a hole that needs patching.

    One of the things about vulnerabilities on all platforms is that a significant part of the magnitude depends on how difficult it is to exploit. Remote connections to a system that avoid/defeat a firewall are really dangerous. Attacks that require the user to do something stupid are inevitable, but far less dangerous.

    Thus far most of the Mac vulnerabilities have been the second type. Luckily.

    --
    -- Josh Turiel
    "2. Do not eat iPod Shuffle."
  13. Re:Identical articles by recoiledsnake · · Score: 5, Informative

    You aren't totally correct on that. The article says "He was the first contestant to attempt an attack on any of the systems." (on the second day). None of the systems fell on the remote only side but when it came to test user interaction the Mac was the first one tested. I'm still waiting for the result on the other machines. It is what a lot of us suspected... because of Apple's rep., people would be eager to take on the Mac first. It is still not to say it isn't bad... oh, it is. But the contest isn't over yet. Sorry, that's just plain wrong. Every laptop had different contestants going on about it in 30 minute slots all day.

    Day 1: March 26th: Remote pre-auth All laptops will be open only for Remotely exploitable Pre-Auth vulnerabilities which require no user interaction. First one to pwn it, receives the laptop and a $20,000 cash prize. The pwned machine(s) will be taken out of the contest at that time. Day 2: March 27th: Default client-side apps The attack surfaces increases to also include any default installed client-side applications which can be exploited by following a link through email, vendor supplied IM client or visiting a malicious website. First one to pwn it receives the laptop and a $10,000 cash prize. The pwned machine(s) will be taken out of the contest at that time. Day 3: March 28th: Third Party apps Assuming the laptops are still standing, we will finally add some popular 3rd party client applications to the scope. That list will be made available at CanSecWest, and will be also posted here on the blog. First to pwn it receives the laptop and a $5,000 cash prize So the Macbook is out of the race since it finished last. Tomorrow, the Ubuntu and Vista machines will have a prize of $5000 on them being cracked with lots of third party apps installed.
    --
    This space for rent.
  14. Day 2 results by Nightspirit · · Score: 5, Informative

    If you look at their blog it seems the Vista and Ubuntu laptops are still not hacked yet at the end of day 2:
    http://dvlabs.tippingpoint.com/blog/2008/03/27/day-two-of-cansecwest-pwn-to-own---we-have-our-first-official-winner-with-picture

  15. Re:And, in this case, the attacker deliberately ch by recoiledsnake · · Score: 5, Informative

    It's time to abandon the general purpose browser. It's also time to quit surfing as your log-in user. You need a browser for surfing that you run (sudo or something) as a strictly limited privilege user without log-in capabilities. If you pulled your head out of the sand and informed yourself beyond the anti-Vista tripe that's posted on here, you might have known that IE7 on Vista does exactly what you described ever since it came out more than a year ago.
    --
    This space for rent.
  16. Re:Identical articles by Whiney+Mac+Fanboy · · Score: 4, Insightful

    because of Apple's rep., people would be eager to take on the Mac first.

    Hold on - are you saying that Mac's have a better reputation for security than linux?

    Congratulations sir. Apple fanboy's capacity for self-delusion never ceases to amaze me.

    --
    There are shills on slashdot. Apparently, I'm one of them.
  17. Re:I wouldn't be surprised.. by EraserMouseMan · · Score: 4, Insightful

    The Mac was hacked 2 minutes into day 2. After day 2 was over no other OSs or browsers had been hacked. Period. Give it up. Safari sucks. The web is a jungle. Tame it by not using Safari on your Mac.

  18. Re:well, tFriendlyA does mention by recoiledsnake · · Score: 5, Informative

    as more than one person mentions above,) ... that the attack on the mac was the first attempted hack under the relaxed rules. I think it's clear that the hacker wanted the mac, especially since there are known open vulnerabilities that could have been used on MSIE, and some highly probable directions fairly well known on Firefox. You've lost me. Where does it say that the mac(apart from your 'persons above' handwaving) was the first attempted hack under the relaxed rules? Go read the site. It says that all three laptops were tried all day and the Mac was removed from the competition because it failed to survive the second day. The others did. Under the same rules.

    especially since there are known open vulnerabilities that could have been used on MSIE, and some highly probable directions fairly well known on Firefox. So there are known open vulnerabilities in IE7 and Firefox and no one wanted a free 10k in cash (20k in total) for just running them plus 2 expensive laptops? Are you kidding me?

    We know that the browser is vulnerable. Anyone who thinks general purpose browsers are invincible is living in a dream world. IE7 on Vista runs in a sandbox. This kind of attack on IE7 wouldn't have worked without another hole compromising the sandbox. Stop coloring all the browsers with the same color just because the one you use got pwned.
    --
    This space for rent.
  19. I say well done. by catwh0re · · Score: 4, Insightful
    In the past I've written replies which effectively defended the mac platform, not due to some loyalty, but because most of the feedback people write is pure b/s. I prefer factual arguments, not near-random fear mongering.

    I haven't RTFA but from the surface it sounds like a fair exploit test, and sure it only fell over with user interaction, but it still fell first. So good on them, they'll enjoy their prize of a macbook air and a sweet $10k.

  20. Re:I think this section is relevant by nmb3000 · · Score: 4, Insightful

    Nobody was able to hack into the systems on the first day of the contest when contestants were only allowed to attack the computers over the network, but on Thursday the rules were relaxed so that attackers could direct contest organizers using the computers to do things like visit Web sites or open e-mail messages.

    Pretty much says it all.

    Wow, at +4 already for just quoting the summary and tossing in a vague and meaningless sentence.

    So anyway, what exactly is it saying? The only thing I see there is that a completely passive attack (that is, absolutely no user interaction, like many well-known worms worked) failed. Once this part of the test was passed they allowed interactive attacks (where the user must assist the attacker in some way). Since this is how nearly all malware and malicious software spreads these days, I don't see anything wrong with this. Aside from just attaching hardware to the network, a web browser and email client are the two applications with the most Internet "surface area". As all major operating systems come bundled with a primary browser (IE, Safari, Firefox) a flaw in the browser essentially amounts to a flaw in the OS. It seems natural and obvious to put them to the test.
    --
    "What do you despise? By this are you truly known." --Princess Irulan, Manual of Muad'Dib
    /)
  21. Re:linky, pleasey by Chokolad · · Score: 4, Informative

    Here is your linkey http://blogs.msdn.com/ie/archive/2006/02/09/528963.aspx

    Quote from the linkey

      In IE7's Protected Mode--which is the default in other than the Trusted security zone--the IE process runs with Low rights, even if the logged-in user is an administrator. Since add-ins to IE such as ActiveX controls and toolbars run within the IE process, those add-ins run Low as well. The idea behind Protected Mode IE is that even if an attacker somehow defeated every defense mechanism and gained control of the IE process and got it to run some arbitrary code, that code would be severely limited in what it could do. Almost all of the file system and registry would be off-limits to it for writing, reducing the ability of an exploit to modify the system or harm user files. The code wouldn't have enough privileges to install software, put files in the user's Startup folder, hijack browser settings, or other nastiness.

    In Protected Mode IE writes/reads special Low versions of the cache, TEMP folder, Cookies and History:

    Cache: %userprofile%\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low
    Temp: %userprofile%\AppData\Local\Temp\Low
    Cookies: %userprofile%\AppData\Roaming\Microsoft\Windows\Cookies\Low
    History: %userprofile%\AppData\Local\Microsoft\Windows\History\Low

  22. Re:Identical articles by Nightspirit · · Score: 5, Informative

    The results for the other machines are in, at the end of day 2 the Vista and Ubuntu laptops have yet to be compromised:
    http://dvlabs.tippingpoint.com/blog/2008/03/27/day-two-of-cansecwest-pwn-to-own---we-have-our-first-official-winner-with-picture

  23. Re:And in other news..... by linumax · · Score: 5, Funny

    "We Love Microsoft and Hate All Things Apple." O_O Are we on the same slashdot? We all are on the same website; some posters though, are inside the Reality Distortion Field.
  24. Re:Contest rules... by Nightspirit · · Score: 5, Informative

    According to secunia Vista has 2 minor vulnerabilities unpatched, Ubuntu 0, and OS X 6 vulnerabilities.

  25. Re:And, in this case, the attacker deliberately ch by Psychotria · · Score: 4, Informative

    Sudo runs things as the super user, hence the name......this is not what you want if you are going for higher security.

    Actually "su" stands for "switch user". You can just as easily sudo to _any_ user.

  26. Re:Identical articles by recoiledsnake · · Score: 5, Informative

    So is it official that the Vista and Ubuntu machines have survived day 2??! Judging from the blog... it isn't: Update 5:45 PST - The contest is officially over for today. Check back tomorrow to see how the Vista and Ubuntu laptops fare. Do you have an inside scoop?? You misunderstod the contest rules. No inside scoop. Just the blog.

    Day 1: March 26th: Remote pre-auth
    All laptops will be open only for Remotely exploitable Pre-Auth vulnerabilities which require no user interaction. First one to pwn it, receives the laptop and a $20,000 cash prize.
    The pwned machine(s) will be taken out of the contest at that time.
    Day 2: March 27th: Default client-side apps
    The attack surfaces increases to also include any default installed client-side applications which can be exploited by following a link through email, vendor supplied IM client or visiting a malicious website. First one to pwn it receives the laptop and a $10,000 cash prize.
    The pwned machine(s) will be taken out of the contest at that time.
    Day 3: March 28th: Third Party apps
    Assuming the laptops are still standing, we will finally add some popular 3rd party client applications to the scope. That list will be made available at CanSecWest, and will be also posted here on the blog. First to pwn it receives the laptop and a $5,000 cash prize.
    So the security will be even more relaxed on the third day because Ubuntu and Vista survived the first two days without a hack. The Mac finished last and is out of the race.
    --
    This space for rent.
  27. Re:And, in this case, the attacker deliberately ch by AdamTheBastard · · Score: 5, Informative

    Sudo runs things as the super user, hence the name Wrong. sudo, an extension of the idea behind su, allows you to switch user and do something, hence the name. Yes, the default is to switch to the super user. It also allows you to switch to any another user (which it has been configured to allow you to access) using the '-u username' command line parameter and do things under their account.

    What the parent was suggesting is to create an account with very limited access and to run the browser as that account using something like: `sudo -u sandboxaccount browserbin`.
  28. Re:Get the Facts is a better tag. by exley · · Score: 5, Funny

    The contest was also sponsored by the likes of Google, Cisco, Adobe, some security folk... They must all have it in for Apple, oh no Apple is screwed! Plus if you read how the contest was run, it's hard to make the case that this was all pro-MS.

    Get the facts... Up to the point where they support your agenda and then punt.

  29. Good. by brainfsck · · Score: 5, Insightful

    I'm typing this on a Macbook Pro running Safari, and I'm happy about the results of this competition. As Apple computers (slowly?) gain market share, they will eventually be forced to significantly adjust their terrible attitude in terms of security.

    I would rather have Apple "shamed" into providing me (and other OS X users) a more secure web browser/operating system than gain some pathetic "my system is more secure than yours" bragging rights.

  30. Re:I think the relevant part is: by vux984 · · Score: 5, Insightful

    In other words, the first to hack it gets it! Who wants a Vaio or a Fujitsu anyway? Given a choice between the three, I'm sure everybody wanted the MacBook Air. Naturally, the only machine getting the pounding is going to be the first to crack.

    Yes, that sounds logical, if your genitals are hooked up to a car battery.

    The winner got to keep the unit AND 10,000. So OBVIOUSLY they should crack the easiest unit, flip it on ebay, and then buy whatever they actually want, while pocketing the remaining 8-9 grand...

    So... the moral of this story? Never underestimate the ability of an Apple fan to rationalize how the Mac could be the first to fail, yet still be the finest computer in the competition. d(^_~) [Thumbs up!]

    I ... Zzzzzzzap.... couldn't.... Zzzzzzzzzap. ... agree... Zzzzzzzzzzap.... more. ;)

  31. Re:It Might Have Been Harder if... by moderatorrater · · Score: 4, Funny

    You're right. With a stricter firewall, the browser wouldn't have been able to fetch anything over the internet at all.

  32. Re:Inquiring minds... by moderatorrater · · Score: 5, Funny

    Does "first to be compromised" mean the only one to be compromised? At this time, it was the only one hacked. The contest continue tomorrow.

    Is the contest completely over once one machine is cracked? It continues tomorrow with more 3rd party apps installed that can be used to break into the system. I don't see much chance of the other two making it through tomorrow, but that depends on the programs they install.

    If not, were Windows and Ubuntu cracked minutes or hours after OS X? They're both still un-cracked.

    Does using Firefox on OS X make it uncrackable? If you plug one hole in a sieve, will it hold water?

    Was each OS required to use it's own browser: IE, Safari, and Epiphany? They had to use the software that comes pre-installed on the machine.

    Since Firefox works on all 3 systems, wouldn't that be a better gauge of OS security? Only if Firefox came preinstalled on all 3 systems.

    Where did I come from? Your mother's vagina. Hopefully you've never been back.

    Why is the sky blue? Do I look like Einstein?
  33. Can't wait to find out what and how by SpeedyG5 · · Score: 5, Insightful

    I am an apple fan and enjoy a lot of their products.

    There is no way any system can be perfectly secure, but this is a significant hole. While they probably won't get me to click that stupid link, they might get my mom or any number of the other avg everyday users.

    At least now we can get beyond the macs can't be hacked BS and move on to securing my favorite OS and keeping it that way.

    Now lets see how long it takes for apple to post a patch, that is really where the rubber meets the road.

  34. Re:Owning Beauty by recoiledsnake · · Score: 4, Insightful
    You first said:

    instead you got a beauty contest. Which apple apparently won. Any contestant with half a brain knows that he can get 4+ Macbook Airs for the $10,000 cash prize and then ebay or install hackintosh on the "non-beautiful" laptops if they really hate Ubuntu or Vista that much. Seriously, if it was easier to compromise Ubuntu or Vista why not do that instead of going to the trouble of hacking the more secure(your implied claim) Apple laptop?

    And you forgot the prospect for employment. Hack a mac and you put it on your resume, hack a PC and no one cares or worse thinks your are a script kiddie. If the company really thinks in that way, I don't think you want to be working there in the first place. And what about Linux? Why wasn't it hacked?

    More to the point, what you can't measure here is the real world vulnerability. I cringe at keeping my Linux machines up-to-date and protected. I rely on firewalls not themachines. With the machines, which are production machines, it's huge roll of the dice to try to apply a patch and descend into dependency hell and discover over the next week which parts of your production got broken and which need compat libs and so on. With my fleet of macs, I don't hesistate to software update (well actually, unless the vulnerability is rampant I wait a week cause even apple screws the pooch. But just a week, and then you know it's safe.) SO in the real world macs are highly patched. MS can be and it's only a wee bit harder. (And when they fuck up (SP1) they go big, but it's mainly a function of your hardware.) Linux requires real expertise and knowledge of how your specific magic mixture of packages will be affected. That's more besides the point than to the point. All the Apple patches in the world won't save you from this exploit, since they don't have a patch for it out, yet. Besides, are you comparing updating production servers on Linux to Mac desktops? That's not a fair comparison at all. Desktop Ubuntu can also be updated without a hitch. Also, I've never seen a Windows Server 2003 production server have any problems with any of Microsoft's updates. And if you're using Debian stable on your server, you will be pretty stable with installing all the security fixes and updates because they do a really good job of testing the fixes.
    --
    This space for rent.
  35. Re:Get the Facts is a better tag. by recoiledsnake · · Score: 4, Insightful

    Let's face it: if the prize is the laptop you hack then everyone would be trying to hack the Mac: who the fuck wants the shame of walking away with a Dell under their arm? Uhh? Can't they ditch the Dell in the nearest trashcan and run to the Apple store with the $10,000 in cash? Or did you miss reading about the cash prize under the influence of some kind of field.
    --
    This space for rent.
  36. Re:I think the relevant part is: by recoiledsnake · · Score: 5, Informative

    The winner got to keep the unit AND 10,000 Don't forget that the prize was 20,000 each for the first day. And none of the machines got compromised. Including the Vista and Ubuntu machines. So, the GP is even more wrong than you think.
    --
    This space for rent.
  37. Re:browse one site by recoiledsnake · · Score: 4, Informative

    As long as the browser has the ability to be re-directed to any site but the site it was defined for, you're going to have spoofing. As long as you have spoofing, you're going to be losing your tokens. Repeat after me. Security is not a product or a program. Security is all about layers. Vista's sandbox model for IE is another security layer that Safair is lacking. The anti-phishing features in IE and other browsers are another are another layer. None of the layers are perfect, but they stop a class of attacks. The sandbox won't prevent spoofing(even the antiphishing filter is useless against zero day phishing sites), but it can easily stop or mitigate the very kind of vulnerability we are discussing that took down the Mac in the contest. You can use VMs to browse if you're that paranoid about security(the recent security holes found in VMWare not withstanding).
    --
    This space for rent.
  38. I don't get it by CannonballHead · · Score: 5, Insightful

    Can't we admit that, for whatever reason, the Air/Safari was easier hacked than Vista/IE7? I know this is an unpopular bandwagon to be on, especially on Slashdot, but it seems there's no two ways about it. I refuse to believe that it was a conspiracy and that every hacker was actually just trying to hack the Air and make Ubuntu and Vista pass, that's stupid. If I were a hacker, I'd totally hack the EASIEST one simply to get the $10k and the laptop. And if there were known or open vulnerabilities, it should have fallen in what, 30 seconds?

    Seriously, it's not a huge deal. If we, like good open source cronies, admit that there was a problem with *gasp* part of the Apple software/laptop combo (whether it was Safari or the OS or whatever), then maybe it will be fixed. Isn't that the main idea here? I thought the point of these things were to discover vulnerabilities so that they could be fixed, not to place bets on Microsoft falling and go up in arms if it doesn't.

    Unless, of course, we really aren't interested in open source software or good software at all, but are more about claiming a company name as our own.

  39. Dell is actually starting to not suck. by Cordath · · Score: 5, Informative

    I was pretty surprised when Dell finally started putting some effort into their laptop designs. For example, take the XPS m1330 that came out last year. It's actually really nice. I wanted an near-ultra-portable but *powerful* Ubuntu laptop and was within a hair's breadth of getting a macbook pro. (The air is a slick design, but the power just isn't there.) Then I found out I could get something every bit as powerful as a high-end macbook pro in the form-factor of a 13" macbook, only lighter, and for less money. (Caveat to follow.) Then I found out that the design actually looked nice. Nicer than the macbooks to my tastes. (Seriously, it's time for a design update Apple.) On top of that, the m1330's design makes a fair bit of ergonomic sense too. The laptop tapers down towards your wrists, rather than the tendinitis-inducing edge on macbooks.

    Even more surprising, the m1330 is really well supported in Ubuntu. (Dell actually sells the m1330 with Ubuntu pre-installed, although the discount is rather pathetic.) More things just work in a default install of Ubuntu on the m1330 than in Vista! (The only thing that doesn't work as well in Ubuntu as it does in Vista is the fingerprint reader, but that's just because biometric password support in Linux, and KDE especially, sucks dingo balls at present.) And yes, if I bought a macbook I probably would have tossed the OSX disks and reformated the drive first thing. I've had to develop under OSX and, while I don't mind it, I definitely prefer Ubuntu.

    Caveat time. Dell's customization options are still royally borked. You can pick up a lot of accessories, like bluetooth mice, fairly cheap when buying a laptop, but other components are just insanely expensive. Anyone who maxes out the memory on a Dell while ordering it and then complains about the price is an idiot. Upgrading the memory on a Dell won't void the warranty. You want 4GB? Get 1GB from Dell and, toss it, and buy a couple 2GB sticks yourself. You'll save at least a couple hundred dollars. If Dell would smarten up about that kind of thing I'd have no complaints.

    Still, one thing is pretty clear. You can no longer mindlessly slag Dell for epitomizing bland and crappy laptop designs. They do still have ultra-cheap crap and bland bricks built like tanks for the corporate types, but they're also gunning for the sexier end of the market now.

  40. A real hero by Fulkkari · · Score: 5, Interesting

    The successful hijacking took place only two minutes into the second day of the competition, after the rules had been relaxed to allow the visiting of websites and opening of emails. The TippingPoint blog reveals that the vulnerability was located within Safari, but they won't release specific details until Apple has had a chance to correct the problem. The winner, Charlie Miller, gets to keep the laptop and $10,000.

    In other words this guy most likely found a security bug in Safari, but instead of reporting it directly, made an exploit and waited for a hacking contest to get a monetary benefit out of it. A real hero. Or maybe he was just quick. Which seems more plausible?

    --
    I demand the Cone of Silence!
  41. Re:Get the Facts is a better tag. by The+Evil+Couch · · Score: 4, Insightful

    Yes, the walk of shame with a $3,000 laptop that's highly ebay-able and $10,000 in prize money. I wish someone shamed me like that.

    --
    The World's Worst Webcomic!
  42. Re:Owning Beauty by Anonymous Coward · · Score: 4, Insightful

    Oh sweet jesus... Apple owners... spinning a truly piss-poor performance into a plus.

  43. Alternate headline: Mac last hacked IRL by sootman · · Score: 4, Interesting

    My teenage son can demolish any PC in an afternoon of unsupervised surfing. My neighbor's Vista box barely runs; God knows what they've got on it. (Unlike the Ubuntu box I let them borrow for two years before they bought their new Dell 3 months ago.) The Mac mini my son uses to surf (when he's allowed) runs as well as it did two years ago and I haven't even run software updates on it. (No sense mentioning it has no antivirus software either.)

    I don't care if it's spyware, adware, a virus, a tray icon, or or even just a simple browser toolbar or homepage or search-engine hijacking; or if it's installed manually or via drive-by methods--whether its due to small market share, inherent (UNIX) security, or something else, I will continue to argue that Mac and Linux are the better platforms, IN PRACTICE, for the average user.

    --
    Dear Slashdot: next time you want to mess with the site, add a rich-text editor for comments.