Pwn2Own and Pwnium 3 Details Announced – Competitions Offer Big Bucks for Hacking Skills
HP’s Zero Day Initiative (ZDI) announces details for the annual Pwn2Own competition.
Pwn2Own 2013 will be held at the CanSecWest security conference March 6-8 in Vancouver, BC. This year, HP ZDI is offering rewards for vulnerabilities and exploitation techniques in the following categories.
Web browsers:
- Google Chrome on Windows 7 (US$ 100,000)
- Microsoft Internet Explorer – either IE 10 on Windows 8 (US$ 100,000) or IE 9 on Windows 7 (US$ 75,000)
- Mozilla Firefox on Windows 7 (US$ 60,000)
- Apple Safari on OS X Mountain Lion (US$ 65,000)
Web browser plugins using Internet Explorer 9 on Windows 7:
- Adobe Reader XI (US$ 70,000)
- Adobe Flash (US$ 70,000)* Oracle Java (US$ 20,000)
Also this year, Google worked with ZDI on the Pwn2Own rules and will be underwriting a portion of the winnings. According to the Chromium blog, the new rules enable “a contest that significantly improves Internet security for everyone.”
Additionally, Google has announced another competition – Pwnium 3 – with rewards totaling up to US$ 3.14159 million for vulnerabilities in Chrome OS. The categories and reward for this competition are:
- US$ 110,000 for a browser- or system-level compromise in guest mode or as a logged-in user, delivered via a web page.
- US$ 150,000 for a compromise with device persistence – guest to guest with interim reboot, delivered via a web page.
“The attack must be demonstrated against a base (WiFi) model of the Samsung Series 5 550 Chromebook, running the latest stable version of Chrome OS. Any installed software (including the kernel and drivers, etc.) may be used to attempt the attack,” according to the Chromium blog.
Issue 192/2016
Buy this issue as a PDF
News
-
Nextcloud Announces Raspberry Pi-Powered Home Cloud Box
Innovative system adds a hard drive and Ubuntu Core to the RPi for an IoT hub.
-
Linus Torvalds Confirms the Date of the First Linux Release
Linux is two weeks younger than we thought!
-
End of OpenOffice?
The Apache Software Foundation considers retiring OpenOffice
-
Adobe Gives New Life to NPAPI Plugin for Linux
Adobe won’t kill the plugin in 2017
-
LinuxCon North America Convenes in Toronto, Canada
Linux Foundation's big event celebrates the 25th anniversary of Linux
-
Linux Turns 25
Linux has evolved from “won’t be a professional” project to one of the most professional software projects in the history of computers.
-
Mirantis Joins Hands with SUSE To Offer RHEL Support; Red Hat Not Happy
Competitors get in the game with RHEL without Red Hat
-
Linux on Windows 10 Poses a Security Risk
Security researchers have already notified Microsoft; some fixes are available
-
Mirantis to Refactor OpenStack Fuel for Kubernetes
The company is collaborating with Google and Intel to use Kubernetes as an engine for Fuel
-
Canonical Joins Document Foundation Advisory Board
The upcoming release of LibreOffice will be available as a snap package