Access member only content, take part in discussions with comments on blogs, news and reviews and receive all the latest security industry news directly to your inbox. Join now for free.
Processing registration... Please wait.
This process can take up to a minute to complete.
A confirmation email has been sent to your email address - SUPPLIED EMAIL HERE. Please click on the link in the email to verify your email address. You need to verify your email before you can start posting.
If you do not receive your confirmation email within the next few minutes, it may be because the email has been captured by a junk mail filter. Please ensure you add the domain @scmagazine.com.au to your white-listed senders.
It was Sony who stole the Black Hat pwnie awards, with all five pwnie nominations for ‘most epic fail' scooping awards.
A total of nine awards were due to be presented in categories including most innovative research, most epic fail and ‘lamest vendor response'.
The wins were for erasing PS3 jailbreak information after it was published online, failing to protect between 25 to 77 million user account details, LulzSec's ‘sownage' campaign, shutting down their PlayStation Network and laying off a significant number of its network security team.
The pwnie for epic 0wnage, given to the hackers responsible for delivering the ‘most damaging, widely publicised or hilarious 0wnage', went to Stuxnet. The pwnies said: “How many centrifuges did your rootkit destroy? How many national nuclear programs did your worm disrupt? How many zero-day exploits and rootkits for equipment, that no one you have ever heard of, have you written? Exactly.”
Among the bug gongs, the award for Best Privilege Escalation Bug went to Tarjei Mandt for ‘Windows kernel win32k user-mode callback vulnerabilities' (MS11-034) which Microsoft patched in April 2011.
The pwnies said: “In the span of a few months, Tarjei found more than 40 vulnerabilities in the Windows kernel. In his presentation at Infiltrate 2011, he described the details of these vulnerabilities and his kernel exploitation techniques.”
The pwnie award for ‘lamest vendor response' went to RSA for its SecurID token compromise, which the pwnies said the company had ‘basically passed it off as a non-event and advised customers that replacing the tokens is not necessary, until Lockheed-Martin got attacked because of them.”
This article originally appeared at scmagazineuk.com
To begin commenting right away, you can log in below or register an account if you don't yet have one. Please read our guidelines on commenting. Offending posts will be removed and your access may be suspended. Abusive or obscene language will not be tolerated. The comments below do not necessarily reflect the views or opinions of SC Magazine, Haymarket Media or its employees.
