Mac OS X is 'not invulnerable', according to the competition's organiser
New competition challenges hackers to break into an OS X system connected to the internet

Dodgy OS X hack prompts genuine challenge

Hack a Mac for fame

Written by Tom Sanders in California

The University of Wisconsin has launched a competition in which hackers are challenged to break into an OS X system connected to the internet. 

"Mac OS X is not invulnerable. Like any other operating system, it has security deficiencies in various aspects of the software," claimed Dave Schroeder, the competition's organiser.

"However, the general architecture and design philosophy of Mac OS X, in addition to the use of open source components for most network-accessible services that receive intense peer scrutiny from the community, make Mac OS X a very secure operating system."

Schroeder is a systems administrator at the University of Wisconsin where he manages both OS X and Unix systems.

His challenge was launched in response to a similar competition last month in which a blogger created user accounts for contestants on a Mac Mini and challenged them to hack into the system by defacing a website. 

A hacker by the name of 'Gwerdna' claimed to ZDNet Australia that he won the competition, boasting that the operating system was "easy pickings" and that it took him no more than 30 minutes. 

The story made the headlines on Monday, but incorrectly presented the penetration as a 'genuine hack' when it should have been described as a 'privilege escalation for a legitimate user'.

A privilege escalation is similar to breaking into a different user account while sitting behind a computer and is considered significantly easier then hacking into a fully protected system over the internet.

The failure to make this difference prompted Schroeder to describe the ZDNet Australia report as "woefully misleading".

A spokesman for Apple did not return vnunet.com's phone calls seeking comment.

The University of Wisconsin's challenge provides contestants with a URL for the system that they need to hack. 

The system is a Mac Mini running the latest version of OS X as well as all the latest security updates. It has been configured with two local user accounts and has SSH and HTTP open. The latter are not typical settings for an average user, according to Schroeder.

Contestants who claim to have succeeded in hacking the system must provide details about how they breached the security walls, which will be provided to Apple. The winner gets a claim to fame, but no material price.

Tags:

Further reading

Apple OS X update plugs 20 security holes

Vendor responds to security and worm concerns   More...

Users report Apple iMac video glitch

White streaks could cause recall   More...

Apple rewards Webkit contributors

All-expenses paid trips to Worldwide Developer Conference 2006   More...

Apple powers up iPod Hi-Fi boombox

'Home stereo reinvented for the iPod age,' trumpets Jobs   More...

Related articles

vnunet.com analysis: OU tackles computer forensics

First course heavily over-subscribed   More...

Do you agree?

Advertisement

Job of the week

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Hiring now on ComputingCareers:

Related IT jobs

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Advertisement

Watch

22 Jul 2008

3.22 MBSat-nav crashes, open source security and female gamers More...

21 Jul 2008

3.12 MBGlobal internet reach, online spending and the space race More...

18 Jul 2008

7.91 MBPodcast Special: Views from the Valley More...

Poll

EUROPEAN E-COMMERCE

EUROPEAN E-COMMERCE

Are you happy making an online purchase from another European country?

Previous poll results

Newsletter signup

Sign up for our range of FREE newsletters:

Existing User

Newsletter user login:

Enter email address to edit your newsletter preferences

Spotlight

Beijing 2008

Online sports market kicks off

Sports fans among the biggest online spenders   More...

Oyster card

Court rules Oyster hack can be revealed

Judge sanctions release of full hack details   More...

Advertisement

Carl Icahn

Yahoo settles with Icahn

Boardroom coup called off as investor is given seat   More...

Prince

Mum fights Universal over YouTube clip

Child dancing to Prince song leads to court case   More...

Advertisement