Masu binciken tsaro sun gano kurakurai da yawa a cikin OS X da Safari yayin Pwn2Own 2016

Pwn2Own 2016-safari-os x-gazawar-0

Ya riga ya fara taron tsaro na shekara-shekara na CanSecWest a cikin bugu na goma sha shida, wanda aka gudanar a Vancouver (Kanada), inda wasu daga cikin mafi kyawun masu bincike tsaro suka shiga cikin gasa ta musamman wacce tuni Mun yi magana da kai a wani lokaci. Wannan ita ce Pwn2Own, gasa ta "hacking" ta kwamfuta inda ake yunƙurin kai hari ga samfuran software daban-daban (galibi tsarin aiki da masu bincike) don gano raunin kuma ta haka ne za a ci kyaututtuka.

A wannan lokacin, masu bincike sun gano mahimmancin lahani a cikin OS X da Safari, wannan ba yana nufin cewa za a bayyana gazawar tsaro ba amma akasin haka ne tun daga cikin mahalarta masu haɓakawa da injiniyoyi sun haɗu na kamfanoni daban-daban da aka yi musu gargaɗi don ƙaddamar da facin da ya dace don magance waɗannan matsalolin, don haka babu wata cutar da ba ta zo ba.

Pwn2Own 2016-safari-os x-gazawar-1

A ranar farko ta taron, mai binciken tsaro mai zaman kansa Junghoon Lee ya sami $ 60.000 ta hanyar gano abubuwa daban-daban. a cikin duka OS X da Safari, har zuwa yanayin rauni har sau huɗu gabaɗaya, gami da ɓarna a Safari da uku a cikin OS X bisa ga Tred Micro. Wannan binciken ya nuna nasarar kai hari kan aiwatar da kagaggen doka akan Safari don samun gatan tushen.

A gefe guda, ƙungiyar da ake kira Tencent kuma ta sami nasarar samun gatanci a cikin Safari ta hanyar gano ƙarin lahani biyu a gare su, don haka sun lashe $ 40.000. Gabaɗaya, an rarraba kyaututtukan dalar Amurka 282.500 tsakanin 'yan takara "daban-daban, wanda ya ci nasara shine ƙungiyar 360Vulcan tare da jimillar $ 132.500.

Baya ga software na Apple, Adobe Flash, Chrome da Microsoft Edge suma an yi amfani da su a kan Windows. Kamar yadda aka ruwaito daga wannan taron, an riga an fara aiki don sakin facets ɗin da aka ambata a wuri-wuri.


Bar tsokaci

Your email address ba za a buga. Bukata filayen suna alama da *

*

*

  1. Wanda ke da alhakin bayanan: Miguel Ángel Gatón
  2. Manufar bayanan: Sarrafa SPAM, sarrafa sharhi.
  3. Halacci: Yarda da yarda
  4. Sadarwar bayanan: Ba za a sanar da wasu bayanan ga wasu kamfanoni ba sai ta hanyar wajibcin doka.
  5. Ajiye bayanai: Bayanin yanar gizo wanda Occentus Networks (EU) suka dauki nauyi
  6. Hakkoki: A kowane lokaci zaka iyakance, dawo da share bayanan ka.