Just while Apple is busying release patch for 25 vulnerabilities in OSX, a hacker, Dino Di Zovie, managed to break into Safari browser and win $10k prize. Even though, Apple always announced how secure is their computer, but eventually, it is not true. Just because Mac is a small market, seldom hackers want to just create a small impact to public.

Dino Di Zovie, who lives in New York, sent along a URL that exposed the hole. Because the contest was only open to attendees in Vancouver, he sent it to a friend who was at the conference and forwarded it on. The URL opened a blank page but exposed a vulnerability in input handling in Safari which allowed an attacker to use the vulnerability in a number of ways, but Di Zovie used it to open a back door that gave him access to anything on the computer. The vulnerability won’t be published. 3Com’s TippingPoint division will handle disclosing it to Apple. The prize for the contest was originally one of the Macs but on Thursday evening, TippingPoint put up the cash award, which may have spurred a wider interest in the contest.

Technorati : apple safari