Amaya Toman Masu fashin baki na White Hat sun gano wasu kurakuran tsaro guda biyu a cikin mashigin Safari a wani taron tsaro a Vancouver. Ɗaya daga cikinsu yana iya yin tweak da izininsa har zuwa ɗaukar cikakken iko da Mac ɗin ku. Na farko daga cikin kurakuran da aka gano sun sami damar barin akwatin yashi - ma'aunin tsaro na kama-da-wane wanda ke ba da damar aikace-aikacen su isa ga nasu kawai da bayanan tsarin.
Kungiyar Fluoroacetate ce ta fara gasar, wadanda mambobinta su ne Amat Cama da Richard Zhu. Tawagar ta yi niyya ta musamman ga mai binciken gidan yanar gizon Safari, inda ta yi nasarar kai masa hari sannan ta bar akwatin yashi. Gabaɗayan aikin ya ɗauki kusan iyakar lokacin da aka ware wa ƙungiyar. Lambar ta yi nasara ne kawai a karo na biyu, kuma nuna kwaro ta sami Team Fluoroacetate $ 55K da maki 5 zuwa taken Jagora na Pwn.
Bug na biyu ya bayyana damar tushen tushen da kwaya akan Mac. Kungiyar phoenhex & qwerty ta nuna kwaro. Yayin binciken gidan yanar gizon nasu, membobin ƙungiyar sun sami nasarar kunna kwaro na JIT tare da jerin ayyuka da ke haifar da cikakken harin tsarin. Apple ya san game da ɗaya daga cikin kwari, amma nuna kwari ya sami mahalarta $ 45 da maki 4 zuwa taken Jagora na Pwn.
Wanda ya shirya taron shine Trend Micro a ƙarƙashin tutar Zero Day initiative (ZDI). An kirkiri wannan shiri ne domin karfafa gwiwar masu satar bayanan sirri da su rika kai rahoton raunin kai tsaye ga kamfanoni a maimakon sayar da su ga mutanen da ba su dace ba. Kyautar kuɗi, yarda da lakabi ya kamata su zama abin motsa jiki ga masu fashin kwamfuta.
Masu sha'awar suna aika mahimman bayanai kai tsaye zuwa ZDI, wanda ke tattara bayanan da suka dace game da mai bayarwa. Masu binciken da wannan yunƙurin suka yi aiki kai tsaye za su bincika abubuwan ƙarfafawa a cikin dakunan gwaje-gwaje na gwaji na musamman sannan su ba mai binciken tuƙi. Ana biya nan da nan bayan amincewarsa. A ranar farko, ZDI ta biya sama da dala 240 ga masana.
Safari wuri ne na gama-gari don masu kutse. A taron na bara, alal misali, an yi amfani da mashigar yanar gizo don ɗaukar ikon Touch Bar akan MacBook Pro, kuma a wannan rana, masu halarta a taron sun nuna wasu hare-hare na tushen burauza.
Source: Farashin ZDI
