Google Pixel defenses blown wide open at hacking competition

Google Pixel defenses blown wide open at hacking competition
The Google Pixel fell victim to the efforts of competitive Chinese hackers at Seoul's PwnFest competition. White-hat hackers from Qihoo 360 used an undisclosed vulnerability in Chrome to gain remote code execution privileges and win a $120,000 cash prize. This is the second time the Google Pixel was hacked in two weeks. The first exploit was discovered by Keen Team at a previous event in Japan.

Thankfully, Google has already patched the latest exploit and the changes have already been implemented into the browser's stable version. However, the initial zero-day exploit remains unpatched. It allows hackers to compromise all aspects of the smartphone, including access to contacts, photos, messages, and phone calls.

It is better to crack smartphones at white-hacking events like this than to have exploits reported to Google from out in the wild. This way, the company is in the know from the get-go and is able to implement fixes swiftly. The hackers essentially trade their work for a cash prize, which sounds fair.

source: The Register via Digital Trends

FEATURED VIDEO

10 Comments

1. MDCHO

Posts: 769; Member since: Jul 28, 2016

"Apple's updated Safari browser running on MacOS Sierra also fell. Respected Chinese hacker outfit Pangu Team renowned for releasing million-dollar persistent modern iOS jailbreaks for free, along with hacker JH, blasted Cupertino's web browser with a root privilege escalation zero day that took 20 seconds to run, earning the team $80,000." Why nobody talk about this? It's from same source article "The Register". http://www.theregister.co.uk/2016/11/11/google_pixel_pwned_in_60_seconds/

2. trojan_horse

Posts: 5868; Member since: May 06, 2016

Good catch, @MDCHO! Plus +100 for that link!

9. Jango

Posts: 376; Member since: Oct 24, 2014

One word: IPA

3. FlySheikh

Posts: 444; Member since: Oct 02, 2015

Lol...

4. miketer

Posts: 527; Member since: Apr 02, 2015

Kudos! Such blatant support for ios. Wrong approach for a tech news website

6. maple_mak

Posts: 953; Member since: Dec 18, 2013

Shamed on iBiasArena.

7. iushnt

Posts: 3122; Member since: Feb 06, 2013

I am waiting for this PA.

8. sissy246

Posts: 7124; Member since: Mar 04, 2015

Really just one word "iphonearena"

10. joey_sfb

Posts: 6794; Member since: Mar 29, 2012

Glad that Google is putting money into this so as to improve Android and Chrome security.

5. Scott93274

Posts: 6040; Member since: Aug 06, 2013

These are amazing competitions. Hackers get compensation for their efforts, and they make our mobile life safer in the process.

Latest Stories

This copy is for your personal, non-commercial use only. You can order presentation-ready copies for distribution to your colleagues, clients or customers at https://www.parsintl.com/phonearena or use the Reprints & Permissions tool that appears at the bottom of each web page. Visit https://www.parsintl.com/ for samples and additional information.