Appletell | Apple, Mac, iPhone, iPod | News, Rumors, Reviews, How-Tos

Subscribe to our content for free: (?)
Get our Daily Email

Safari used to hack MacBook…sort of

by Adam Fisher-Cox on Mar 22, 2009 at 10:32 PM
Safari 4 width=

It happened last year, and it happened again this year. The tech sector of the internet is seeing a fair share of headlines to the tune of “Safari hacked in 10 Seconds!” At the Pwn2Own conference this year, Charlie Miller, who hacked Safari last year to much the same media explosion, used Safari to gain control of a MacBook in under ten seconds. Sounds like we should be worried, right?

How easy is it to hack into a MacBook in under ten seconds? Incredibly easy if, like Charlie, you had months to find the hole, prepare the exploit well in advance, and simply run it when the time came. Oh, also, you’ll need a person willing to click on a specific link at your direction (in this case, the judges) and you’ll have full control of their computer. Yes, Miller had the whole thing planned well in advance, and he set up a link, which he then directed the judges to click and (shock and awe) he then had control of their computers.

For a hacker, that seems extremely unsatisfying. I was under the impression that hacking was more on the fly…or at least didn’t require the person being hacked to know what was going on. The fact is that the Mac OS still has no viruses for it out in the wild. There is very little threat of this type of exploit being able to take over your computer. Add to that the fact that the exploit has been told to no-one but Apple until a patch is released, and there is no reason to start freaking out about the Mac’s inherent security flaws.

As long as you are smart about what you download, and don’t type your password into applications you didn’t explicitly run, you will be fine. “Mac hacked in record time” just makes for a great headline.

Via [AppleInsider]

Subscribe to keep up with the latest Apple news and rumors! - Subscribe to our feed


Comments
  • mpbk said:

    You are kidding, right?  This is exactly how most exploits happen these days.  Some people have even figured out how to inject attacks into Google Ads, so it isn’t like this only happens on obscure sites.

  • jack said:

    he’s saying that everyone has actually blown the story out of proportion and the claim that it took the hacker 10 seconds is false, not that it could never happen again.

  • Page 1 of 1 Comment Pages
Join the Discussion

Name: *

Email: *

Location (Links to Google Maps):

URL:

Enter Your Comment Below...

* Required fields

Remember my information?

Notify me of follow-up comments?

Submit the word you see below:


Special Features