Main » 2011 » Март » 16 » Pwn2own 2011
12:04
Pwn2own 2011
Team Zero Day Initiative (ZDI) in HP TippingPoint announced the fifth contest Pwn2Own.

Pwn2Own - a contest of hackers, which is conducted on an annual security conference CanSecWest, starting in 2007. Contestants must find and exploit vulnerabilities in the suggested browsers and mobile devices. Winners receive a device and a cash prize.

TippingPoint reports about each vulnerability found in the product developer of this product. Details about the vulnerability are not disclosed until it is corrected.

This year the total prize fund has grown to 125 000 dollars. Of these, 105,000 provides HP TippingPoint, and the remaining 20,000 will give Google the one who will be able to find vulnerabilities in Chrome.

Browsers


Browsers will present the latest release candidate (at the time of the contest) the following products:
  • Microsoft Internet Explorer;
  • Apple Safari;
  • Mozilla Firefox;
  • Google Chrome.
Each browser is installed on a 64-bit systems running the latest version of OS X or Windows 7.

Prizes including laptops:
  • Sony Vaio Windows 7;
  • Alienware m11x Windows 7;
  • Apple MacBook Air 13? on Mac OS X Snow Leopard;
  • Google CR-48 at ChromeOS (this device and the OS will not participate directly in the contest, the Chrome browser will work on other laptops).
A successful hack IE, Safari or Firefox will bring $ 15 000 in cash, the notebook itself and a number of bonuses, including paid travel and registration for the conference DEFCON in Las Vegas.

As for Chrome, then competition will be held in two parts. In the 1 st day Google will offer U.S. $ 20 000 and CR-48 for vulnerabilities found in code that was written by Google. If the competition is inconclusive, then the 2 nd and 3 rd days ZDI offer 10,000 U.S. dollars for a vulnerability in the code written is not Google, and Google will offer 10,000 U.S. dollars for a bug in Chrome.

Mobile


Mobile devices in the following products:
  • Dell Venue Pro on Windows 7;
  • iPhone 4 in iOS;
  • Blackberry Torch 9800 on Blackberry 6 ; OS;
  • Nexus S on Android.
Finding vulnerabilities in any of these devices will bring $ 15 000 in cash, the device and the same bonus (including paid travel and registration for the conference DEFCON in Las Vegas).

Register


If you want to participate, write a letter to zdi@tippingpoint.com with the name, the browser / device, and anything else you might need (network connection, a static IP and so on).

Pre-registration will end February 15. On this day by the drawing of lots will determine the order in which contestants will make their attempt. Each participant will have 30 minutes to their attempts.

The contest will take place 9, 10 and March 11 in Vancouver. To keep track of news you can zafolovit @ thezdi or @ aaronportnoy or monitor heshtegom # pwn2own.
Views: 433 | Added by: w1zard | Rating: 0.0/0
Total comments: 0
Имя *:
Email *:
Код *: