| | |
IE8 is here, IE8 is hacked
Well that didn't take long. No sooner had Microsoft officially launched Internet Explorer 8 to the waiting masses and talked up how new security features will ensure hackers will find it more difficult to exploit the new browser that guess what? Yep, a hacker exploits the new browser.
During his keynote speech at the Las Vegas MIX 09 conference, Dean Hachamovitch, the Microsoft Internet Explorer head honcho, made much about how IE8 had been specifically engineered in order to better withstand the type of evolving attacks methods that the hackers of today like to employ. He even went as far as to make the point that IE8 is the only browser that packs "built-in protection from cross-site scripting and out-of-the-box protection against clickjacking" in fact.
Others have remained unconvinced, and it is not too diff cult to find security researchers and analysts who will happily tell you how it is still too difficult to secure easily because it remains too bloated.
So I guess it should come as no great surprise to discover that even as Hachamovitch was talking so a hacker called Nils from Germany was accepting a $5000 cash prize and a Sony Vaio laptop as his reward for successfully hacking IE8 at the annual PWN2OWN contest during the CanSecWest security conference.
This is the same conference that has already seen one chap successfully hack a MacBook in less than 10 seconds can you believe?
Nils, like the MacBook hacker, achieved his feat by exploiting a previously unknown vulnerability in the browser running on a recent build of Windows 7. The MacBook fell courtesy of a Safari exploit. The good news being that PWN2OWN sponsors TippingPoint use the prize money to purchase details of the vulnerability and any exploit code used, and then pass this information immediately to the vendors who can then work to fix the security holes exposed.
During his keynote speech at the Las Vegas MIX 09 conference, Dean Hachamovitch, the Microsoft Internet Explorer head honcho, made much about how IE8 had been specifically engineered in order to better withstand the type of evolving attacks methods that the hackers of today like to employ. He even went as far as to make the point that IE8 is the only browser that packs "built-in protection from cross-site scripting and out-of-the-box protection against clickjacking" in fact.
Others have remained unconvinced, and it is not too diff cult to find security researchers and analysts who will happily tell you how it is still too difficult to secure easily because it remains too bloated.
So I guess it should come as no great surprise to discover that even as Hachamovitch was talking so a hacker called Nils from Germany was accepting a $5000 cash prize and a Sony Vaio laptop as his reward for successfully hacking IE8 at the annual PWN2OWN contest during the CanSecWest security conference.
This is the same conference that has already seen one chap successfully hack a MacBook in less than 10 seconds can you believe?
Nils, like the MacBook hacker, achieved his feat by exploiting a previously unknown vulnerability in the browser running on a recent build of Windows 7. The MacBook fell courtesy of a Safari exploit. The good news being that PWN2OWN sponsors TippingPoint use the prize money to purchase details of the vulnerability and any exploit code used, and then pass this information immediately to the vendors who can then work to fix the security holes exposed.
Similar Threads
- IE8 cookies problem (I think) (Web Browsers)
- CSS and IE8 Problem (HTML and CSS)
- ie8 - xp home sp3 (Windows tips 'n' tweaks)
- IE8 Tabs (Web Browsers)
- News Story: Windows 7 gets IE8 killswitch (Windows Vista and Windows 7)
| Thread Tools | Search this Thread |
advertising age amd android apple avatar ballmer bluegene botnet browser business cellphone china chips crime data database development dos downloads economy email encryption energy enterprise europe facebook firefox games gaming google government hacker hacking hardware ibm ibm.news ie8 intel intelibm internet iphone ipod itunes law linux mac malware marketing medicine memory microsoft mobile mozilla music news nintendo novell office openoffice opensource os pc phishing porn privacy ps3 recession redhat research russia search security sex socialnetworking software spam sun supercomputer supercomputing survey technology trends trojan twitter ubuntu uk video virus vista web wii windows windows7 working x86 xbox xp yahoo youtube




