Skip to main content

Hacking Chrome? Google Bets $20,000 you can't

Google has donated $20,000 to a yearly hacking competition to be awarded to the first researcher able to crack its Chrome browser. The Mountain View, Calif. company's move marks the first time a browser developer has contributed money to the contest.

The Pwn2Own competition is in its fifth year and is held at the CanSecWest security conference. Participants are tasked with cracking a variety of other browsers too (Apple's Safari, Microsoft's Internet Explorer, and Mozilla's Firefox) on computers supplied by the contest creators running Windows 7. Those that perform a successful crack win the computer it was done on as well as a $15,000 cash prize.

Cracking Chrome will be hard. The browser uses what is called a "sandbox," which isolates system processes. In order for a crack to be successful, first the sandbox must be cracked, and then the exploit code itself executed.

Google is offering a CR-48 netbook as a prize itself in addition to the cash award. The netbook would only be offered as a prize -- the exploit would need to be performed on the other computers offered.

"Kudos to the Google security team for taking the initiative to approach us on this; we're always in favor of rewarding security researchers for the work they too-often do for free," HP TippingPoint security research team manager Aaron Portnoy said. Portnoy's firm runs the Pwn2Own competition.

Another portion of the contest will include hacks to popular mobile OS platforms including BlackBerry OS, iOS, and Android. Like the browser competition, a $15,000 prize and the device itself would be awarded.

Registration for the contest is open until February 15. Instructions and more information can be found from HP TippingPoint's website.

http://www.betanews.com/article/Hacking-Chrome-Google-Bets-20000-you-cant/1296848941

Comments

Popular posts from this blog

Synchronize Folders Between Computers and Drives with SyncToy 2.1

If you have a few different computers and drives, it can be annoying making sure the same data is each one you need. Today we take a look at making folder and data synchronization easier with the Microsoft SyncToy 2.1 utility. You might have a flash drive that you use to carry files and documents from the workplace to your home office and vice versa. Sometimes though, you might forget to copy the files you need over to the drive. With Microsoft’s SyncToy it allows you to easily make sure the data between drives and folders is synchronized everyday. There are a lot of reasons you might want to synchronize folders. For example, maybe you want to sync your My Pictures folder with the one at work, or sync your music at home with music on another computer. This is a free tool from Microsoft that was once part of the XP Power Toys but has continued to grow and improve. Installing SyncToy When you install SyncToy it also installs Microsoft Sync Framework 2.0 Core Components, which is t...

Windows Server Backup Step-by-Step Guide for Windows Server 2008

The Windows Server Backup feature provides a basic backup and recovery solution for computers running the Windows Server® 2008 operating system. Windows Server Backup introduces new backup and recovery technology and replaces the previous Windows Backup (Ntbackup.exe) feature that was available with earlier versions of the Windows operating system. What is Windows Server Backup? The Windows Server Backup feature in Windows Server 2008 consists of a Microsoft Management Console (MMC) snap-in and command-line tools that provide a complete solution for your day-to-day backup and recovery needs. You can use four wizards to guide you through running backups and recoveries. You can use Windows Server Backup to back up a full server (all volumes), selected volumes, or the system state. You can recover volumes, folders, files, certain applications, and the system state. And, in case of disasters like hard disk failures, you can perform a system recovery, which will rest...

[AIX] How to restart network service in AIX environment?

When network service like telnet connection hangs, then it is possible the inetd subsystem is not working properly. # refresh -s inetd 0513-095 The request for subsystem refresh was completed successfully. If the refresh hangs for some time and comes back with 0513-056 time out waiting for command response, then the inetd subsystem may not be working correctly and should then be killed nicely. Run #ps -ef | grep inetd and do a kill -15 on the process ID on the line that has /usr/sbin/inetd. Once inetd has been killed, type startsrc -s inetd. If inetd starts, try to telnet into the machine. If inetd does not start up successfully, or if telnet still hangs indefinitely, run kill -15 on the PID of inetd again. Back up the original /etc/inetd.conf file to a new file name by typing: # mv /etc/inetd.conf /etc/inetd.conf.backup The original template is in /usr/lpp/bos.net/inst_root/etc/. You can copy it by typing: # cp /usr/lpp/bos.net/inst_root/etc/inetd.conf /etc/inetd.conf Run start...