Home
Search:
1146 feeds
357 categories
0 articles (<24 hours)
36 registered users

Use the Mobile version
Mobile

Follow our Twitter feed

View our Linkpartners
Links

Username:
Password:

Register | Retrieve

Technology


RSS FeedsHackers Win $60,000 for Finding iPhone Safari Exploit at Tokyo Pwn2Own Contest
(MacRumors iPhone)

 
 

15 november 2018 00:45:26

 
Hackers Win $60,000 for Finding iPhone Safari Exploit at Tokyo Pwn2Own Contest
(MacRumors iPhone)
 


Richard Zhu and Amat Cama, two white hat hackers, recently teamed up at the Mobile Pwn2Own contest in Tokyo and ended up earning a $60,000 prize after finding an iPhone exploit, according to a blog post on the Zero Day Initiative website. The duo used a Safari weakness on an iPhone X running iOS 12.1 to retrieve a photo that had recently been deleted from the device. The hackers used a malicious Wi-Fi access point to exploit a just-in-time (JIT) compiler vulnerability. The exploit the two hackers discovered can also be used to access additional files beyond deleted photos; the deleted photo just happened to be the first file the two came across and so it was used as a demonstration.Next up, Amat and Richard returned to the Short Distance category. This time, they were targeting the iPhone X over Wi-Fi. They used a pair of bugs - a JIT vulnerability in the web browser followed by an Out-Of-Bounds write for the sandbox escape and escalation. The successful demonstration earned them $60,000 USD more and 10 additional Master of Pwn points. This ends their first day of competition with $140,000 USD and a commanding lead for the Master of Pwn with 31 points.With the prize money and points awarded from the iPhone vulnerability along with other exploits shown off at the event, Zhu and Cama won the `Master of Pwn` title. Apple has been informed of the vulnerability and will likely address it in an upcoming iOS update.Discuss this article in our forums


 
11 viewsCategory: Technology > Mobile > Iphone
 
Instagram Rolling Out `Your Activity` Feature Detailing Amount of Time Spent Using the App
(MacRumors iPhone)
Apple Wins Stop Slavery Award From Thomson Reuters Foundation for Its Supply Chain Efforts
(MacRumors iPhone)
 
 
blog comments powered by Disqus


Copyright © 2008 - 2024 Indigonet Services B.V.. Contact: Tim Hulsen. Read here our privacy notice.
Other websites of Indigonet Services B.V.: Nieuws Vacatures Science Tweets Nachrichten