Laptop, complete with Vista attack code, listed on eBay

[OhioChick]

Pre-hacked machine a violation of PWN to OWN rules? Ebay's? April 1's?

April 1, 2008 (IDG News Service) The winner of a recent hacking contest is offering the computer he broke into for sale on eBay, possibly with the Microsoft Vista attack code he used intact.

In a Monday listing, Shane Macaulay is selling the Fujitsu U810 laptop he won last Friday during the CanSecWest PWN 2 OWN contest. His listing claims that exploit code could probably still be extracted from the machine. Although he make no guarantees, he wrote, "My successfull exploitation of Vista SP1 remotely, is most likely still present."

"This laptop is a good case study for any forensics group/company/individual that wants to prove how cool they are, and a live example, not canned of what a typical incident responce sitchiation would look like."

Starting bid? $0.01.

Macaulay, a researcher with the Security Objectives consultancy, claims that his Adobe Flash exploit will affect 90 percent of computers worldwide.

http://www.computerworld.com/action/article.do?command=viewArticleBasic&articleId=9073859&intsrc=hm_list

[tpsbmam]

1. eBay has removed the listing. n/t

[Lennon]

2. It took three days to hack

Into the Vista laptop, and only two minutes to hack Into the Macbook Air.

http://www.democraticunderground.com/discuss/duboard.php?az=view_all&address=389x3077182

[Mika]

4. Sorta. But not really.

From the OP article posted in the thread you linked to..

Contest participants had their choice of trying to hack an Apple MacBook Air running OS X 10.5.2, a Sony Vaio VGN-TZ37CN running Ubuntu 7.10, or a Fujitsu U810 running Vista Ultimate SP1. During the first day, when attacks were limited to network attacks on the operating system, no one managed to compromise any of the systems.

A security hole in Safari running specifically on the Mac Air was used.

[trotsky]

3. He exploited a vulnerability in Adobe Flash, not Vista itself.

http://dvlabs.tippingpoint.com/blog/2008/03/28/pwn-to-own-final-day-and-wrap-up