Ua hoʻolaha ʻia nā hopena o ka hoʻokūkū Pwn2Own Toronto 2022 ʻehā lā. 63 i ʻike mua ʻole ʻia nā nāwaliwali o nā lā ʻole i nā polokalamu kelepona, nā mea paʻi, nā ʻōlelo akamai, nā ʻōnaehana mālama, a me nā mea ala. Ua hoʻohana nā mea hoʻouka i ka firmware hou loa a me nā ʻōnaehana hana me nā mea hou i loaʻa a me nā hoʻonohonoho paʻamau. ʻO ka huina kālā i uku ʻia he $934,750.
He kanakolukumamāono hui a me nā mea noiʻi palekana i komo i ka hoʻokūkū. ʻO ka hui lanakila loa, ʻo DEVCORE, ua loaʻa iā $142,000. Ua loaʻa i ka poʻe lanakila ma kahi ʻelua (Team Viettel) he $82,000, a ua loaʻa i ka poʻe lanakila kolu (hui NCC) he $78,000.
I ka wā o ka hoʻokūkū, hōʻike ʻia nā hoʻouka kaua i alakaʻi i ka hoʻokō code mamao ma nā polokalamu:
- Canon imageCLASS MF743Cdw paʻi (11 lanakila lanakila, $5000 a me $10000 makana).
- Lexmark MC3224i Printer (8 hoouka, $7500, $10000, a me $5000 bonus).
- HP Color LaserJet Pro M479fdw Printer (5 hoouka, $5000, $10000 a me $20000 mau makana).
- ʻO Sonos One Speaker (3 hoʻouka kaua, $22500 a me $60000 uku).
- Synology DiskStation DS920+ Network Attached Storage (ʻelua hoʻouka kaua, $40000 a me $20000 mau makana).
- WD My Cloud Pro PR4100 Network Storage (3 $20000 Awards a me 1 $40000 Award).
- ʻO Synology RT6600ax Router (5 WAN hoʻouka me $20000 bounties a me ʻelua LAN hoouka bounties o $5000 a me $1250).
- Cisco Integrated Service Router C921-4P ($37500).
- ʻO Mikrotik RouterBoard RB2011UiAS-IN router ($100,000 uku no ka hack multi-stage - ua hoʻouka mua ʻia ka mea hoʻokele Mikrotik, a laila ma hope o ka loaʻa ʻana i ka LAN - ka mea paʻi Canon).
- NETGEAR RAX30 AX2400 Router (7 hoouka, $1250, $2500, $5000, $7500, $8500 a me $10000 bonus).
- ʻO TP-Link AX1800/Archer AX21 router (ka hoʻouka kaua WAN, $ 20000 premium, a me ka hoʻouka kaua LAN, $ 5000 premium).
- Ubiquiti EdgeRouter X SFP Router ($50000).
- Samsung Galaxy S22 smartphone (4 hoouka, ekolu $25000 makana a me hookahi $50000 makana).
Ma waho aʻe o nā hoʻouka kaua kūleʻa i ʻōlelo ʻia ma luna, ua hāʻule nā hoʻāʻo he 11 e hoʻohana i nā nāwaliwali. Ua hoʻokomo pū ʻia ka hoʻokūkū me kahi luʻi e hack iā Apple. iPhone 13 a me Google Pixel 6, akā ʻaʻohe noi no nā hoʻouka kaua i loaʻa, ʻoiai ʻo ka uku kiʻekiʻe loa no ka hoʻomohala ʻana i kahi exploit e ʻae ai i ka hoʻokō ʻana o ke code kernel-level no kēia mau mea hana he $250,000. ʻAʻole hoʻi i koi ʻia nā hāʻawi e hack i nā ʻōnaehana automation home Amazon Echo Show 15, Meta Portal Go, a me Google Nest Hub Max, a me nā mea ʻōlelo akamai Apple HomePod Mini, Amazon Echo Studio, a me Google Nest Audio, nona ka uku o $60,000.
ʻAʻole i hōʻike ʻia nā ʻāpana kikoʻī i pili i ka pilikia. E like me nā ʻōlelo o ka hoʻokūkū, e paʻi ʻia ka ʻike kikoʻī e pili ana i nā nāwaliwali 0-lā i hōʻike ʻia ma hope o 120 mau lā, ʻo ia ka manawa e hoʻomākaukau ai nā mea kūʻai aku i nā mea hou e hoʻoponopono ai i nā nāwaliwali.
Source: opennet.ru
