Kua pānuitia ngā hua o te whakataetae Pwn2Own 2021 e toru ngā rā te roa, e tū ana i ia tau hei wāhanga o te huihuinga CanSecWest. Pērā i te tau o mua, i tū te whakataetae mariko, ā, i whakaaturia ngā whakaekenga mariko i runga ipurangi. I whakaaturia ngā tikanga mahi mō te whakamahi i ngā ngoikoretanga kāore i te mōhiotia i mua mō ngā whāinga kua tohua e 23. Ubuntu Papamahi, Windows 10, Chrome, Safari, Parallels Desktop, Microsoft Exchange, Microsoft Teams, me Zoom. I ngā wā katoa, i whakamatautauria ngā putanga hou o ngā kaupapa, tae atu ki ngā whakahōutanga katoa e wātea ana. Ko te tapeke o te utu he kotahi miriona e rua rau mano tāra US (ko te tapeke o te puna taonga he kotahi me te hawhe miriona tāra).
E toru ngā nganatanga ki te whakamahi i ngā ngoikoretanga i te wā o te whakataetae. Ubuntu Papamahi. I angitu ngā nganatanga tuatahi me te tuarua, ā, i whakaatu ngā kaiwhakaeke i te pikinga o te mana ā-rohe mā te whakamahi i ngā ngoikoretanga kāore i te mōhiotia i mua e pā ana ki ngā waipuke parepare me ngā kore-rua (kāore anō kia whakaaturia ngā wāhanga motuhake i pāngia e ngā take; e 90 ngā rā e wātea ana ki ngā kaiwhakawhanake ki te whakatika i ngā pepeke i mua i te whakaaturanga i ngā taipitopito). I utua he utu $30 mō ēnei ngoikoretanga.
Ko te tuatoru o ngā nganatanga a tētahi atu tīma i roto i te wāhanga whakanui mana ā-rohe i angitu noa iho i te wāhanga iti—i mahi te mahi tinihanga, ā, i taea ai te uru pakiaka, engari kāore i tino whakamanahia te whakaekenga nā te mea kua mōhiotia kētia te pepeke e pā ana ki te ngoikoretanga e ngā kaiwhakawhanake. Ubuntu ā, i te wā e whakaritea ana he whakahōutanga me tētahi whakatikatika.
I whakaatuhia ano he whakaeke angitu mo nga kaitirotiro i runga i te miihini Chromium - Google Chrome me Microsoft Edge. Mo te hanga i tetahi mahi ka taea e koe te mahi i to waehere i te wa e whakatuwhera ana i tetahi wharangi i hangaia i Chrome me Edge (kotahi te whakamahi i te ao mo nga kaitirotiro e rua), ka utua he utu 100 mano taara. Ko te whakatika kua whakamaheretia kia whakaputaina i roto i nga haora e heke mai nei, ko nga mea katoa e mohiotia ana ko te whakaraerae kei roto i te tukanga e haangai ana ki te tukatuka i nga ihirangi paetukutuku (kaiwhakahaere).
Ko etahi atu whakaeke angitu:
- $200 mō te taumanutia o te taupānga Zoom (i taea e te kaiwhakaeke te whakahaere i tā rātou waehere mā te tuku karere ki tētahi atu kaiwhakamahi, me te kore e hiahiatia te kaiwhiwhi kia mahi i tētahi mahi). I whakamahia e te whakaeke ngā ngoikoretanga e toru i roto i te Zoom me tētahi i roto i te pūnaha whakahaere. Windows.
- $200 mō te taumanutia o Microsoft Exchange (te karo i te manatoko me te whakanui ake i te mana ā-rohe i runga i te tūmau (kia whiwhi mana kaiwhakahaere). I whakaatu tētahi atu tīma i tētahi atu mahi tinihanga angitu, engari kāore i utua te taonga tuarua nā te mea kua whakamahia kētia ngā pepeke e te tīma tuatahi.
- $200 mō te taumanutia o Microsoft Teams (te whakahaere waehere i runga i tūmau).
- $100 mō te whakamahi i a Apple Safari (te taupū tau i roto i a Safari me te taupū pūrua kernel) macOS hei karo i te pouaka onepu me te whakahaere i te waehere i te taumata kernel).
- $140 mano mo te hacking Parallels Desktop (whakaputa i te miihini mariko me te mahi waehere i runga i te punaha matua). I mahia te whakaeke na roto i te whakamahi i nga whakaraeraetanga rereke e toru - te riihi mahara kaore i te maarama, te puhake o te puranga me te puhake tauoti.
- E rua nga tohu o te 40 mano taara mo ia mo te hacking Parallels Desktop (he hapa arorau me te putunga putunga i taea ai te mahi waehere i roto i te OS o waho ma nga mahi i roto i te miihini mariko).
- E toru ngā taonga o te 40 mano tāra mō ngā mahi angitu e toru Windows 10 (te puhaketanga o te tauoti, te urunga ki te mahara kua wātea, me te tikanga whakataetae e āhei ai te whiwhi mana PŪNAHA).
I ngana, engari kaore i angitu, ki te hack Oracle VirtualBox. Ko nga whakaingoatanga mo te hacking Firefox, VMware ESXi, Kiritaki Hyper-V, MS Office 365, MS SharePoint, MS RDP me Adobe Reader i noho kore kereme. Kaore hoki tetahi i pai ki te whakaatu i te hacking o te punaha korero o te motuka Tesla, ahakoa te utu o te 600 mano taara me te motuka Tesla Model 3.
Source: opennet.ru
