We use cookies to provide you with a better experience. If you continue to use this site, we'll assume you're happy with this. Alternatively, click here to find out how to manage these cookies

hide cookie message
80,259 News Articles

Laptop with Vista attack code removed from eBay

Auction site takes hard line with hacked laptop

Shane Macaulay, one of the winners of CanSecWest's hacking contest, has failed in his attempt to sell his winning laptop, complete with Windows Vista attack code, on eBay.

The online auction site pulled the listing within hours of its appearance on Monday, saying that it could have harmed users. "You can't sell anything that would do harm," said a spokeswoman for eBay's public relations agency.

See: Hacked Vista laptop with attack code on eBay

The company removed the eBay employees noticed the post. "It was the wording of the listing that caught the attention of the trust and safety experts who monitor the site," the spokeswoman said.

Macaulay won last week's PWN 2 OWN hacking contest at the CanSecWest conference in Vancouver. He had offered the laptop he broke into for sale, claiming that his exploit code could probably still be extracted from the machine.

"This laptop is a good case study for any forensics group/company/individual that wants to prove how cool they are, and a live example, not canned of what a typical incident responce sitchiation [sic] would look like," his listing stated.

Although the laptop was listed on eBay just before April 1, a traditional day of internet pranks, Macaulay insisted it was legitimate.

Macaulay, a researcher with the Security Objectives consultancy, was one of two hackers to claim laptops and cash prizes for penetrating systems during last week's contest. Organisers offered Vista, Mac OS and Linux-based laptops for the taking, along with prizes that varied from $5,000 to $20,000, depending on the difficulty of the exploit. By Friday, however, only the Linux laptop remained unbreached.

Though the laptop he hacked runs Vista, Macaulay claimed that his Adobe Flash Player exploit will affect 90 percent of computers worldwide. He won a $5,000 cash prize, courtesy of 3Com's TippingPoint division, and the Fujitsu U810 laptop he had hacked into for his work.

Had Macaulay been able to sell his laptop before Adobe patched the issue, he would have violated his contract with TippingPoint, said Terri Forslof, the company's manager of security response. "We would have disqualified him from the programme," she said.

The laptop had not been hit with any other attack code during the course of the contest, she added. "He was the only person who tried," she said.


IDG UK Sites

5 reasons not to wait for the Apple Watch: Why you shouldn't buy the iWatch

IDG UK Sites

Why local multiplayer gaming is rapidly vanishing: we look at the demise of split-screen and LAN...

IDG UK Sites

How Emotional Debt is damaging digital design

IDG UK Sites

How to update your iPhone or iPad to iOS 8: including how to install iOS 8 if you don't have room