Geohot Wins $150,000 for Finding ChromeOS Exploits

Geohot, the famed jailbreak hacker, has demonstrated his skills once again winning a $150,000 bounty from Google for exposing a persistent code execution vulnerability in ChromeOS.

Google recently held its Pwnium competition in which hackers are awarded for finding original and unreported exploits relying on security bugs in Chrome OS including Chrome coupled with Flash / Chrome OS kernel and firmware / default apps on Chrome OS.

Congratulations to geohot for an epic Pwnium competition win. Pinkie Pie provided a fascinating set of vulnerabilities that will be rewarded through the Chrome VRP program. Moreover, one of the bugs exploited by VUPEN on Pwn2Own affected Chrome OS.

We’re delighted at the success of Pwnium and the ability to study full exploits. We anticipate landing additional changes and hardening measures for these vulnerabilities in the near future. We also believe that both Pwnium submissions are works of art and deserve wider sharing and recognition. We plan to do technical reports on these submissions in the future.

Google has already updated ChromeOS with the necessary security fixes for Pwnium.

More details at the link below...

Read More