Google is offering $2.7 million to security experts who can pwn its Chrome OS operating system at this year's "Pwnium 4" hacking contest. Participants at this year's hack contest can now choose between Intel- or ARM-powered laptops, unlike last year when they were limited to an Intel-powered Chromebook. "Security is a core tenet of Chromium, which is why we hold regular competitions to learn from security researchers. Contests like Pwnium help us make Chromium even more secure. This year Pwnium 4 will once again set sights on Chrome OS, and will be hosted in March at the CanSecWest security conference in Vancouver," security engineer Jorge Lucángeli Obes said in a blog post. He said Pwnium rewards for eligible Chrome OS exploits include: $110,000 for browser or system-level compromise in guest mode or as a logged-in user, delivered via a web page. $150,000 for compromise with device persistence: guest to guest with interim reboot, delivered via a web page. For this year, he said Google will consider "significant bonuses" for "impressive or surprising" exploits such as defeating kASLR, exploiting memory corruption in the 64-bit browser process or exploiting the kernel directly from a renderer process. Intel or AMD Obes said that while past Pwnium competitions focused on Intel-based Chrome OS devices, this year's competition allows the ARM-based Chromebook, the HP Chromebook 11 (WiFi), or the Acer C720 Chromebook (2GB WiFi) that is based on the Intel Haswell microarchitecture. "The attack must be demonstrated against one of these devices running the then-current stable version of Chrome OS," he said. Any software included with the default installation may be used as part of the attack, he added. Registration will close at 5:00 p.m. PST Monday, March 10. Only exploits demonstrated on time in this specifically-arranged window will be eligible for a reward, he added. —TJD, GMA News
0 comments:
Post a Comment