I am not sure how I missed this one but Gregg @CIO.com pointed out that this years Pwn2Own contest is only a month away. Pwn2Own is a yearly contest at the CanSecWest security conference where hackers try to break into both desktop browser and mobile targets. It is happening on March 24th in Vancouver in case you are interested.
Last year hackers were not able to break into any mobile OS which is pretty impressive. Still putting a $15,000 bounty on being able to exploit a BlackBerry Bold 9700, iPhone 3GS, or an unspecified Symbian S60 device might shake things up. You even get to keep the phone if you exploit it.
Should be interesting to see how things go down this year!
Full details on the mobile contest after the jump:
Target: Mobile Phones
$60,000 of the total $100,000 cash prize pool is allotted to the mobile phone portion of the contest, each target is worth $15,000. A successful hack on these targets must result in code execution with little to no user-interaction. Expect updates on the rules as the contest approaches. The current target list is as follows:
- Apple iPhone 3GS
- RIM Blackberry Bold 9700
- A Nokia device running Symbian S60 (likely the E62)
- A Motorola phone running Android (likely the Droid)
In addition to the mobile device and $15,000 USD cash prize, successful competitors will receive 20,000 ZDI bonus points which immediately qualifies them for Silver standing. Benefits of ZDI Silver standing include a one-time $5,000 USD cash payment, 15% monetary bonus on all ZDI submissions in 2011, 25% reward point bonus on all ZDI submissions in 2011 and paid travel and registration to attend the DEFCON Conference in Las Vegas.
Any non remote code execution entries accepted by the judges reduces the point giveaway to 9,999 ZDI bonus points which puts the competitor just one ZDI submission away from Bronze standing for the year 😉