x404.co.uk
http://www.x404.co.uk/forum/

Safari security issues
http://www.x404.co.uk/forum/viewtopic.php?f=3&t=12961		 Page 1 of 1
Author:  bobbdobbs [ Thu Mar 10, 2011 8:34 am ]
Post subject:  Safari security issues
Just to balance CC :lol:

Safari/MacBook first to fall at Pwn2Own 2011
clicky

Quote:
Bekrar’s winning exploit did not even crash the browser after exploitation. Within five seconds of surfing to the rigged site, he successfully launched the calculator app and wrote a file on the disk without crashing the browser.


Quote:
The exploit bypassed ASLR (Address Space Layout Randomization) and DEP (Data Execution Prevention), two key anti-exploit mitigations built into Mac OS X.

“The victim visits a web page, he gets owned. No other interaction is needed.”


and he won 15k plus a mac book air.
Author:  HeatherKay [ Thu Mar 10, 2011 8:39 am ]
Post subject:  Re: Safari security issues
I have a feeling this was patched yesterday.

Don't quote me on that, though.
Author:  adidan [ Thu Mar 10, 2011 9:04 am ]
Post subject:  Re: Safari security issues
I had visions of a monkey shield.
Author:  MrStevenRogers [ Thu Mar 10, 2011 9:17 am ]
Post subject:  Re: Safari security issues
bobbdobbs wrote:
Just to balance CC :lol:

Safari/MacBook first to fall at Pwn2Own 2011
clicky

Quote:
Bekrar’s winning exploit did not even crash the browser after exploitation. Within five seconds of surfing to the rigged site, he successfully launched the calculator app and wrote a file on the disk without crashing the browser.


Quote:
The exploit bypassed ASLR (Address Space Layout Randomization) and DEP (Data Execution Prevention), two key anti-exploit mitigations built into Mac OS X.

“The victim visits a web page, he gets owned. No other interaction is needed.”


and he won 15k plus a mac book air.


well done that man and have just updated ...
Author:  big_D [ Thu Mar 10, 2011 9:31 am ]
Post subject:  Re: Safari security issues
The problem is, OS X has pretty much stood still, in terms of security measures over the last 5 years and now lags behind Windows 7.

The Apple implementation of DEP and ASLR are fundamentally flawed, which was pointed out, when it came out in 2008, and Apple haven't addressed the issue in the interviening time, even Lion doesn't address the flaws in the implementation of ASLR.

Basically, ASLR should randomise where programs are loaded in memory. In Windows, this includes the underlying operating system and key libraries as well. Under OS X, it only applies to applications, not to system libraries and the OS itself. This means, that, once you have an exploit in an application, like Safari, you can't attack its memory or the memory of 3rd party applications, but if you also have a flaw in the base OS, you can exploit it, because you know where it is...

It is interesting, OS X has gone from secure plus security through obscurity (there aren't enough devices out there to warrant developing exploits for it), to just security through obscurity... And with increasing market share, they are also becoming less obscure.

That isn't to say that Microsoft don't have problems, just that they have addressed a lot of the key technologies which were causing problems and have toughened up the default security. In contrast, Apple seem to be sitting on security issues, until it is pointed out that they haven't patched a bug - a lot of the bugs that have been patched recently are in open source software, where the open source projects themselves (often projects run by Apple!) have released patches up to 18 months ago, but Apple haven't "bothered" to implement them, until they get bad press...
Author:  steve74 [ Thu Mar 10, 2011 9:35 am ]
Post subject:  Re: Safari security issues
Apple issued the Safari 5.0.4 yesterday and also some Java Updates to address security issues. I wonder if they intentionally didn't download these before they started? Not that this makes it OK, as there must have been vulnerabilities there before these patches, but Apple's release date implies that they were issued because they knew this event was coming this week. I wonder if they were using Safari 5.0.4 or the older 5.0.3?
Author:  jonbwfc [ Thu Mar 10, 2011 11:26 am ]
Post subject:  Re: Safari security issues
steve74 wrote:
Apple issued the Safari 5.0.4 yesterday and also some Java Updates to address security issues. I wonder if they intentionally didn't download these before they started? Not that this makes it OK, as there must have been vulnerabilities there before these patches, but Apple's release date implies that they were issued because they knew this event was coming this week. I wonder if they were using Safari 5.0.4 or the older 5.0.3?

Quote:
The hijacked machine was running a fully patched version of Mac OS X (64-bit)
according to the article. However I'd assume that would mean 'fully patched at the time the competition started' and that nobody would be allowed to interfere with the target once the competition was on, other than under the terms of the competition, otherwise any conclusions from it are pretty much moot.

It may possibly be that the patches were released within the timescale of the competition being active, so the effect you get is the hack can be used to win the competition but by the time it's publicized it's no longer as useful. I'd imagine all parties involved would be fairly happy with that.

Jon
Author:  bobbdobbs [ Thu Mar 10, 2011 12:15 pm ]
Post subject:  Re: Safari security issues
Quote:
Vupen previously wrote about the Safari patch on its Twitter feed. It said, "This breaks some exploits, but not all!"

clicky

Quote:
Charlie Miller said that he also has an exploit for Safari up his sleeve, but that he didn't get to demonstrate it because the order of contestants to demonstrate their exploits is decided by a draw; VUPEN were drawn to appear first. However, Miller's exploit reportedly still functions in the updated version – whether the expert will save it for next year's Pwn2Own is unknown.

clicky
Author:  big_D [ Sat Mar 12, 2011 11:50 am ]
Post subject:  Re: Safari security issues
Just to balance things, Apple's update to iTunes has fixed over 50 bugs, many critical, in Webkit...
Page 1 of 1 All times are UTC
Powered by phpBB® Forum Software © phpBB Group
https://www.phpbb.com/