Comments on: PWN2OWN Rehashed http://www.gnucitizen.org/blog/pwn2own-rehashed/ Information Security Think Tank Tue, 09 Mar 2010 03:24:34 +0000 http://wordpress.org/?v=2.9.1 hourly 1 By: Kishfellow http://www.gnucitizen.org/blog/pwn2own-rehashed/comment-page-1/#comment-117806 Kishfellow Thu, 03 Apr 2008 12:04:51 +0000 http://www.gnucitizen.org/blog/pwn2own-rehashed/#comment-117806 Alex sotirov, the bid's already been removed :( Alex sotirov, the bid’s already been removed :(

]]> By: Awesome AnDrEw http://www.gnucitizen.org/blog/pwn2own-rehashed/comment-page-1/#comment-117776 Awesome AnDrEw Wed, 02 Apr 2008 17:50:25 +0000 http://www.gnucitizen.org/blog/pwn2own-rehashed/#comment-117776 I figured it would only be a matter of time until eBay pulled the auction, but I did get a chance to read about it from the interview with Alexander. I figured it would only be a matter of time until eBay pulled the auction, but I did get a chance to read about it from the interview with Alexander.

]]> By: PWN to OWN Reading « Iqag Notes http://www.gnucitizen.org/blog/pwn2own-rehashed/comment-page-1/#comment-117734 PWN to OWN Reading « Iqag Notes Tue, 01 Apr 2008 14:34:54 +0000 http://www.gnucitizen.org/blog/pwn2own-rehashed/#comment-117734 [...] Planet Websecurity (links to original blogs): 1, 2 (the real winner? NoScript!), 3 (is a Flash flaw Microsoft’s fault? Would it work [...] [...] Planet Websecurity (links to original blogs): 1, 2 (the real winner? NoScript!), 3 (is a Flash flaw Microsoft’s fault? Would it work [...]

]]> By: pdp http://www.gnucitizen.org/blog/pwn2own-rehashed/comment-page-1/#comment-117725 pdp Tue, 01 Apr 2008 07:19:48 +0000 http://www.gnucitizen.org/blog/pwn2own-rehashed/#comment-117725 zer0, I am aware of a few vulns around the Java sockets which affect JVM at the moment. However, there were even some in the past which could allow access to localhost services, via the use of the relatively unknown URL handler. I hope that the JVM was patched :) for the contest. Alexander, current bid US $202.51, that's kind of cheep for this laptop + bonus exploit. zer0,

I am aware of a few vulns around the Java sockets which affect JVM at the moment. However, there were even some in the past which could allow access to localhost services, via the use of the relatively unknown URL handler. I hope that the JVM was patched :) for the contest.

Alexander,

current bid US $202.51, that’s kind of cheep for this laptop + bonus exploit.

]]> By: Alexander Sotirov http://www.gnucitizen.org/blog/pwn2own-rehashed/comment-page-1/#comment-117718 Alexander Sotirov Tue, 01 Apr 2008 04:40:31 +0000 http://www.gnucitizen.org/blog/pwn2own-rehashed/#comment-117718 You have a chance to find out for yourself, we're selling the pwned Vista box on eBay. The exploit might still be in the IE cache :-) http://cgi.ebay.ca/ws/eBayISAPI.dll?ViewItem&item=280214168502 You have a chance to find out for yourself, we’re selling the pwned Vista box on eBay. The exploit might still be in the IE cache :-)

http://cgi.ebay.ca/ws/eBayISAP.....0214168502

]]> By: zer0 http://www.gnucitizen.org/blog/pwn2own-rehashed/comment-page-1/#comment-117716 zer0 Tue, 01 Apr 2008 04:30:10 +0000 http://www.gnucitizen.org/blog/pwn2own-rehashed/#comment-117716 I think you might want to have a look at java socket handling. I think you might want to have a look at java socket handling.

]]>