Munguva pfupi yapfuura mhedzisiro ye mazuva matatu emakwikwi Pwn2Own 2021, inoitwa gore rega rega sechikamu chemusangano weCanSecWest.
Semugore rakapfuura, makwikwi akaitwa angangoita uye kurwiswa kwakaratidzwa online. Pane izvo zvinangwa makumi maviri nematatu, hunyanzvi hwekushandisa kushandisa hurema hwaimbozivikanwa hwave kuratidzirwa Ubuntu, Windows 23, Chrome, Safari, Parallels Desktop, Microsoft Exchange, Microsoft Teams, uye Zoom.
Muzviitiko zvese, shanduro dzekupedzisira dzesoftware dzakaedzwa, kusanganisira zvese zviripo. Huwandu hwese hwekubhadhara hwaive miriyoni imwe nemazana maviri ezviuru zvemadhora ekuUS.
Mumakwikwi, kuyedza katatu kwakaitwa kushandisa kusagadzikana muUbuntu iyo yekutanga uye yechipiri kuyedza kwakaverengerwa uye varwisi vakakwanisa kuratidzira kuwedzera kweropafadzo dzemuno kuburikidza nekushandiswa kwekusagadzikana kusati kwazivikanwa kwakanangana nekufashukira kwakawanda uye kusunungura ndangariro zvakapetwa (mune izvo zvinhu zvechinetso zvisati zvataurwa uye vanogadzira vanopihwa mazuva makumi mapfumbamwe ekugadzirisa mabugs kusvikira data raziviswa).
Pakati pezvirema izvi zvakaratidzwa kuUbuntu, mabhonasi e $ 30,000 akabhadharwa.
Kuedza kwechitatu, kunoitwa nerimwe timu muchikwata chekushungurudzwa kwenzvimbo dzemuno, yaingove yakabudirira zvishoma: kushandisa kwakashanda uye kubvumidzwa kuwana midzi yekuwana, asi kurwisa kwacho hakuna kuzadzikiswa, kubvira bhagi rakabatana nekushupika rakange ratotarwa kare uye yaizivikanwa neUbuntu vanogadzira uye kugadzirisa pamwe nekugadziriswa kwaive kuchigadzirwa.
Uyewo kurwisa kwakabudirira kwakaratidzirwa kune mabhurawuza ane Chromium tekinoroji: Google Chrome neMicrosoft Edge, yeiyi bhonasi yemadhora zviuru zana yakabhadharwa kugadzira chinzvimbo chinotendera kodhi kuitiswa iwe paunovhura peji rakagadzirwa muChannel neEdge (kushandiswa kwepasirese kwakagadzirwa kune ese mabhurawuza).
Panyaya yekukuvadzwa uku, zvinonzi kururamisa kwacho kunotarisirwa kuburitswa mumaawa mashoma anotevera, nepo zvichingozivikanwa kuti kusagadzikana kuripo mukuita kuri kuita kugadzirisa zvirimo muwebhu (renderer).
Kune rimwe divi, zviuru mazana maviri zvemadhora zvakabhadharwa muZoom uye zvakaratidzwa kuti Zoom app inogona kubvarurwa nekuita imwe kodhi kutumira meseji kune mumwe mushandisi, hapana chikonzero chechero chiito neanogamuchira. Kurwiswa kwakashandisa kushomeka katatu muZoom uye imwe muWindows operating system.
Bhonasi ye $ 40,000 yakapihwawo matatu akabudirira Windows 10 mashandiro umo kushushikana kwakanangana nekufashukira kwakazara, kupinda mundangariro kwakasunungurwa, uye nhangemutange mamiriro akabvumidza kuwana mukana weSYSTEM wakaratidzirwa).
Imwe kuyedza iyo yakaratidzwa, asi mune ino kesi isina kubudirira yaive yeVirtualBox, iyo yakaramba iri mukati memubairo pamwe neFirefox, VMware ESXi, Hyper-V mutengi, MS Office 365, MS SharePoint, MS RDP uye Adobe Reader izvo zvakaramba zvisina kudanwa.
Pakange pasinawo vanhu vaida kuratidza kubiridzira kweTesla mota ruzivo system, kunyangwe iyo $ 600 mubairo pamwe neTesla Model 3 mota.
Yedzimwe mibairo izvo zvakapihwa:
- $ 200 yekubvisa Microsoft Exchange (kudarika kuvimbisa uye kukwira kwerunyararo kweseva kuti uwane kodzero dzevatungamiriri). Rimwe timu rakaratidzwa kumwe kubudirira kushandisa, asi mubairo wechipiri hauna kubhadharwa sezvo timu yekutanga yakato shandisa mabhureki akafanana.
- 200 zviuru zvemadhora mukubiridzira Microsoft michina (kodhi kuitisa pane server).
- $ 100 yeApple Safari mashandiro (kuwanda kwakazara muSafari uye buffer kufashukira mune macOS kernel kudzivirira sandboxing nekuita kernel-level kodhi).
- 140,000 yekubiridzira Kufananidza Desktop (kutema kunze kwemuchina chaiwo uye kumhanyisa kodhi pane huru system) Kurwiswa uku kwakaitwa nekushandisa zvisungo zvitatu zvakasiyana: uninitialized memory leak, stack kufashukira, uye kuwanda kuzere.
- Makumi maviri emadhora makumi mana emubairo weParlellels Desktop hacks (logic kukanganisa uye buffer kufashukira iyo yaibvumidza kodhi kumhanya pane yekunze mashandiro system kuburikidza nezviito mukati meiyo chaiyo muchina).