VANCOUVER--For the fourth consecutive year, researcher Charlie Miller won one of the prizes at the annual Pwn2Own contest here. The difference this time is that Miller successfully exploited an iPhone 4 to win, rather than Safari, which he's gone after the last three years. The BlackBerry Torch 9800 also was taken down, by a multinational team of researchers who were able to exploit the device's browser by chaining three exploits together.
The team that went after the BlackBerry faced a series of major hurdles during the research process, the largest of which was the fact that there is no debugger available for the BlackBerry's current browser. The browser, which is based on WebKit, has little documentation either, so the team of Willem Pinckaers, Vincenzo Iozzo and Ralf-Philipp Weinmann essentially were working in the dark, with no crash dump data and just tiny pieces of the memory map emerging as they went through the research process.
More: http://threatpost.com/en_us/blogs/iphone-blackberry-fall-second-day-pwn2own-031011
The team that went after the BlackBerry faced a series of major hurdles during the research process, the largest of which was the fact that there is no debugger available for the BlackBerry's current browser. The browser, which is based on WebKit, has little documentation either, so the team of Willem Pinckaers, Vincenzo Iozzo and Ralf-Philipp Weinmann essentially were working in the dark, with no crash dump data and just tiny pieces of the memory map emerging as they went through the research process.
More: http://threatpost.com/en_us/blogs/iphone-blackberry-fall-second-day-pwn2own-031011