# Macbook Air PWN3D!!
**URL:** https://forums.speedlife.net/t/macbook-air-pwn3d/45754
**Category:** NYSpeed Off Topic
**Created:** [March 27, 2008, 3:34pm UTC](https://forums.speedlife.net/t/macbook-air-pwn3d/45754 "2008-03-27T15:34:03Z")
**Posts on this page:** 19
**Page:** 1
### Author:  [@RuBiCaNT](https://forums.speedlife.net/u/RuBiCaNT)
#### Post date: [March 27, 2008, 3:34pm UTC](https://forums.speedlife.net/t/macbook-air-pwn3d/45754/1 "2008-03-27T15:34:03Z")
[http://news.yahoo.com/s/infoworld/20080327/tc\_infoworld/96676](http://news.yahoo.com/s/infoworld/20080327/tc_infoworld/96676)
PWN 2 OWN - Macbook Air gets hacked in 2 minutes…
---
### Author:  [@Nikuk](https://forums.speedlife.net/u/Nikuk)
#### Post date: [March 27, 2008, 3:39pm UTC](https://forums.speedlife.net/t/macbook-air-pwn3d/45754/2 "2008-03-27T15:39:38Z")
Oh Noes Apple!!!
:roll2:
---
### Author:  [@micah](https://forums.speedlife.net/u/micah)
#### Post date: [March 27, 2008, 3:42pm UTC](https://forums.speedlife.net/t/macbook-air-pwn3d/45754/3 "2008-03-27T15:42:58Z")
that is a funny contest IRLI!
---
### Author:  [@LZ1](https://forums.speedlife.net/u/LZ1)
#### Post date: [March 27, 2008, 3:43pm UTC](https://forums.speedlife.net/t/macbook-air-pwn3d/45754/4 "2008-03-27T15:43:25Z")
Wouldn’t that be an OS issue and not really just an airbook issue? :lol:
---
### Author:  [@Dr.Stevil](https://forums.speedlife.net/u/Dr.Stevil)
#### Post date: [March 27, 2008, 3:44pm UTC](https://forums.speedlife.net/t/macbook-air-pwn3d/45754/5 "2008-03-27T15:44:30Z")
hahaha, right on.
he’s a smart dude… first a 350z, now 10K bucks
---
### Author:  [@Nikuk](https://forums.speedlife.net/u/Nikuk)
#### Post date: [March 27, 2008, 3:45pm UTC](https://forums.speedlife.net/t/macbook-air-pwn3d/45754/6 "2008-03-27T15:45:58Z")
> [@LZ](#):
>
> Wouldn’t that be an OS issue and not really just an airbook issue? :lol:
Yea, I believe it said this was a safari issue…
---
### Author:  [@Matt\_Danger](https://forums.speedlife.net/u/Matt_Danger)
#### Post date: [March 27, 2008, 6:11pm UTC](https://forums.speedlife.net/t/macbook-air-pwn3d/45754/7 "2008-03-27T18:11:51Z")
> [@RuBiCaNT"](#):
>
> [http://news.yahoo.com/s/infoworld/20080327/tc\_infoworld/96676](http://news.yahoo.com/s/infoworld/20080327/tc_infoworld/96676)
>
> PWN 2 OWN - Macbook Air gets hacked in 2 minutes…
It was the 2nd day of the event, not the first 2 minutes… And if it was a Safari or Webkit exploit then the code that was executed would have been running with only user privileges. Not that that’s any better but we won’t know for sure until the code is released. Either way I’m a bit disappointed the Mac was taken down first.
---
### Author:  [@RuBiCaNT](https://forums.speedlife.net/u/RuBiCaNT)
#### Post date: [March 27, 2008, 10:09pm UTC](https://forums.speedlife.net/t/macbook-air-pwn3d/45754/8 "2008-03-27T22:09:52Z")
> [@Matt Danger](#):
>
> It was the 2nd day of the event, not the first 2 minutes… And if it was a Safari or Webkit exploit then the code that was executed would have been running with only user privileges. Not that that’s any better but we won’t know for sure until the code is released. Either way I’m a bit disappointed the Mac was taken down first.
Well, it brings the arguement back to “all things being equal” since none of the OS’ in question were giving anything up until they did that.
I just pointed this out for all the Mac humpers on this forum, _cough_ _cough_ dozr. 😉
---
### Author:  [@LZ1](https://forums.speedlife.net/u/LZ1)
#### Post date: [March 28, 2008, 7:03am UTC](https://forums.speedlife.net/t/macbook-air-pwn3d/45754/9 "2008-03-28T07:03:13Z")
meh
---
### Author:  [@dozr](https://forums.speedlife.net/u/dozr)
#### Post date: [March 28, 2008, 7:44am UTC](https://forums.speedlife.net/t/macbook-air-pwn3d/45754/10 "2008-03-28T07:44:38Z")
1. So he was able to hack the computer only after he was physically using it, using exploit code retrieved from his own website… Congrats!
2. I do not “hump” apple products. I value good product and interface design, and apple just happens to kick ass at both. I was a “PC Guy” for a very long time, I was only swayed after actually using these products on a daily basis.
3. I certainly have never claimed that Apple (or any other company) produced perfect code… that would be a ridiculous claim to make about any piece of software.
4. You are a douchebag.
---
### Author:  [@Nikuk](https://forums.speedlife.net/u/Nikuk)
#### Post date: [March 28, 2008, 8:09am UTC](https://forums.speedlife.net/t/macbook-air-pwn3d/45754/11 "2008-03-28T08:09:08Z")
I’m pretty sure that the article states he didn’t have physical access to it. I believe he directed the event organizer to a website with the exploit code on it.
---
### Author:  [@boardjnky4](https://forums.speedlife.net/u/boardjnky4)
#### Post date: [March 28, 2008, 8:14am UTC](https://forums.speedlife.net/t/macbook-air-pwn3d/45754/12 "2008-03-28T08:14:08Z")
Nobody was able to hack into the systems on the first day of the contest when contestants were only allowed to attack the computers over the network, but on Thursday, the rules were relaxed so that attackers could direct contest organizers using the computers to do things like visit Web sites or open e-mail messages.
Miller, best known as one of the researchers who first hacked Apple’s iPhone last year, didn’t take much time. Within 2 minutes, he directed the contest’s organizers to visit a Web site that contained his exploit code, which then allowed him to seize control of the computer, as about 20 onlookers cheered him on.
He was the first contestant to attempt an attack on any of the systems.
Miller was quickly given a nondisclosure agreement to sign, and he’s not allowed to discuss particulars of his bug until the contest’s sponsor, TippingPoint, can notify the vendor.
Contest rules state that Miller could only take advantage of software that was preinstalled on the Mac, so the flaw he exploited must have been accessible by, or possibly inside, Apple’s Safari browser.
* * *
nobody was able to hack any of the systems until they executed some bad code inside of a browser or other software.
---
### Author:  [@Nikuk](https://forums.speedlife.net/u/Nikuk)
#### Post date: [March 28, 2008, 8:15am UTC](https://forums.speedlife.net/t/macbook-air-pwn3d/45754/13 "2008-03-28T08:15:12Z")
> [@boardjnky4](#):
>
> nobody was able to hack any of the systems until they executed some bad code inside of a browser or other software.
and it had to be via OEM software.
So, OS or Browser hole.
amirite?
---
### Author:  [@Dr.Stevil](https://forums.speedlife.net/u/Dr.Stevil)
#### Post date: [March 28, 2008, 8:21am UTC](https://forums.speedlife.net/t/macbook-air-pwn3d/45754/14 "2008-03-28T08:21:10Z")
yup, you are correct
on 3rd day, if nobody was able to break in, then I think they’d be able to start using 3rd party/tainted software to gain access
---
### Author:  [@Shockwave179](https://forums.speedlife.net/u/Shockwave179)
#### Post date: [March 28, 2008, 9:14am UTC](https://forums.speedlife.net/t/macbook-air-pwn3d/45754/15 "2008-03-28T09:14:52Z")
> [@Dr.Stevil](#):
>
> hahaha, right on.
>
> he’s a smart dude… first a 350z, now 10K bucks
It’s not that kid.
---
### Author:  [@Dr.Stevil](https://forums.speedlife.net/u/Dr.Stevil)
#### Post date: [March 28, 2008, 9:17am UTC](https://forums.speedlife.net/t/macbook-air-pwn3d/45754/16 "2008-03-28T09:17:42Z")
your right… my bad.
it appears that the guy who won, Charlie Miller, is ex-NSA, no shit
---
### Author:  [@theblue](https://forums.speedlife.net/u/theblue)
#### Post date: [March 28, 2008, 9:19am UTC](https://forums.speedlife.net/t/macbook-air-pwn3d/45754/17 "2008-03-28T09:19:55Z")
the only thing owned in this thread is RuBiCaNT
---
### Author:  [@dozr](https://forums.speedlife.net/u/dozr)
#### Post date: [March 28, 2008, 1:05pm UTC](https://forums.speedlife.net/t/macbook-air-pwn3d/45754/18 "2008-03-28T13:05:44Z")
> [@Nikuk](#):
>
> I’m pretty sure that the article states he didn’t have physical access to it. I believe he directed the event organizer to a website with the exploit code on it.
Yea, you’re right… but same difference.
---
### Author:  [@Dr.Stevil](https://forums.speedlife.net/u/Dr.Stevil)
#### Post date: [March 28, 2008, 1:10pm UTC](https://forums.speedlife.net/t/macbook-air-pwn3d/45754/19 "2008-03-28T13:10:56Z")
well, I think the point is… if you phished someone to another site, or somehow gained access over a site frequented by mac users and discreetly injected that code into the page, you’d compromise a lot of people. Not that IE is any better
firefox +noscript plugin FTMFW
I wonder if it was the .Tif exploit