Comments on: New Apple Air notebook vaporized in PWN2OWN contest http://itknowledgeexchange.techtarget.com/security-bytes/new-apple-air-notebook-vaporized-in-pwn2own-contest/ A SearchSecurity.com blog Sat, 28 Nov 2009 03:48:38 +0000 http://wordpress.org/?v=2.6.2 By: Fred Okum http://itknowledgeexchange.techtarget.com/security-bytes/new-apple-air-notebook-vaporized-in-pwn2own-contest/#comment-520 Fred Okum Mon, 21 Apr 2008 19:36:09 +0000 http://security.blogs.techtarget.com/2008/03/28/new-apple-air-notebook-vaporized-in-pwn2own-contest/#comment-520 No suprices here given the complete denial of security risks by Apple. We are just waiting for a major virus to target Apple and the class action lawsuit following that. I will have my recording of the Apple store guys saying "Security is not an issue on a Mac" ready to cash in. No suprices here given the complete denial of security risks by Apple. We are just waiting for a major virus to target Apple and the class action lawsuit following that. I will have my recording of the Apple store guys saying “Security is not an issue on a Mac” ready to cash in.

]]> By: Quinn Taylor http://itknowledgeexchange.techtarget.com/security-bytes/new-apple-air-notebook-vaporized-in-pwn2own-contest/#comment-519 Quinn Taylor Thu, 17 Apr 2008 17:57:50 +0000 http://security.blogs.techtarget.com/2008/03/28/new-apple-air-notebook-vaporized-in-pwn2own-contest/#comment-519 "A few minutes of work" is quite the overstatement. While an exploit may run within a few minutes, the preparation behind it is generally not trivial. You might also mention that the exploit came on the second day of the contest, after the rules were relaxed. Or you might not, since it seems there isn't a great deal of concern for responsible journalism. It's easy to write and gloat about successful exploits. However, it may interest you to know that the actual vulnerability was part of the PCRE project (pcre.org) and not Apple-written code. I'm sure they're miffed that they missed the exploit regardless, but it's still an interesting detail that nobody has cared to learn or report. Huh. At any rate, putting "vaporized" in the headline should bring some sensationalism and drive web traffic. Well done you. “A few minutes of work” is quite the overstatement. While an exploit may run within a few minutes, the preparation behind it is generally not trivial. You might also mention that the exploit came on the second day of the contest, after the rules were relaxed. Or you might not, since it seems there isn’t a great deal of concern for responsible journalism.

It’s easy to write and gloat about successful exploits. However, it may interest you to know that the actual vulnerability was part of the PCRE project  <a href="http://pcre.org" title="http://pcre.(" target="_blank">pcre.org</a>) and not Apple-written code. I’m sure they’re miffed that they missed the exploit regardless, but it’s still an interesting detail that nobody has cared to learn or report. Huh.

At any rate, putting “vaporized” in the headline should bring some sensationalism and drive web traffic. Well done you.

]]>