MacBook Pro security toasted

CanSecWest had a competition to break into a pair of MacBook Pros, the prize was a MacBook Pro.

Apparently there was very little interest in hacking the MacBook, as no one was going to get too famous from doing it. There were some pretty tough rules as to how the hack had to be done too. In the end 3Com's TippingPoint Division stumped up $10,000 bounty and hackers became more interested.

Dino Dai Zovi managed to do it, although details of how are sketchy. It seems to be based around exploitable flaw in Safari.

However it does mean that every copy of OS X out there now is vulnerable to this. So it looks like Apple users will have to join their Microsoft friends in the trek to download Firefox until Jobs' Mob gets around to fixing it.

Last week the outfit released a patch to fix twenty-five holes in its leaky software.

More here. µ