Pwn2Own: What OS really won?

TalkBack 1 of 104:

Next »

• Thread View
• Flat View

They all lost!

In my opinion, the Flash flaw would've been able to compromise any of the OS's, so I would say they all lost. BUT, if I had to go on who lost the most, I'd go as follows:

1.) Mac OS X - A flaw in Safari led to this compromise, that's a default running application, and it's built by Apple... so no one to blame but themselves.

2.) Vista - The Vista machine was pwned, that's the cut and dry of it, it was the one that went home in someone's laptop bag, so it barely gets the edge in my book over *Nix.

3.) *Nix - Word on the street is, it could've been pwned, but the rules state a cross-platform flaw can only be used once, so it skated by on a technicality.

Honorable Mention: Sun and Adobe

4.) Adobe for having the code flaw to begin with. We don't know what it is yet, but it's likely some form of stack overflow... seems like the common theme, especially considering Sotirov had to use Ninja skills and Java to get it to be exploitable (which means he needed to use Java to bypass DEP).

5.) Sun for still not getting JVM to work with DEP. I know it's hard, I completely understand that, but still... this is a very serious flaw and we really need DEP protection.

-Nate

Posted by: nmcfeters   Posted on: 03/31/08 You are currently: a Guest | Members login | Terms of Use

Alert moderator to an offensive message

Subscribe to this discussion via Email or RSS

SponsoredWhite Papers, Webcasts, and Downloads

• The New Generation of System X Servers: Lower datacenter costs through server refresh IBM Join Intel and IBM for a deep dive into the new Intel Xeon Processor 5500 ... Download Now
• File System Auditor Version 2.0.8 ScriptLogic File System Auditor? allows administrators to audit file access, generate ... Download Now
• Security Explorer for Exchange Version 7.0.2 ScriptLogic Security Explorer for Exchange is a powerful, graphical solution for ... Download Now