A zero-day vulnerability in Safari, the default browser for Apple’s Macintosh operating system, allowed two MacBooks to crumble before the onslaught of a CanSecWest security conference attendee’s hacking, aided as he was by a New York buddy with years of experience hacking Macs.

Shane Macaulay, a developer of binary security analysis tools, is going home with a 17-inch MacBook and sending $10,000 in prize money to his friend, Dino Dai Zovi. Dai Zovi told eWEEK in an interview from his apartment in New York that he was up since 10 p.m. on Thursday, following a phone call from Macaulay asking if he could help him in the CanSecWest Pwn-2-Own contest. By 7 a.m. he had the exploit in hand.

continued @ SecurityWatch