Gone in 2 minutes: Mac gets hacked first in contest
It may be the quickest $10,000 Charlie Miller ever earned. — He took the first of three laptop computers — and a $10,000 cash prize — Thursday after breaking into a MacBook Air at the CanSecWest security conference's PWN 2 OWN hacking contest.
Context & Ripple Effects
Charlie Miller's two-minute MacBook Air compromise at CanSecWest's PWN 2 OWN contest extends a pattern already established a year earlier, when a hacker publicly demonstrated a Mac break-in and punctured the 'Macs don't get hacked' assumption. The contest format — cash prizes for live exploitation of fully patched machines — was still young in 2008, and this result gave it its first headline-grabbing proof of speed.
First-order effects
- Apple's security reputation takes an immediate hit: a default MacBook Air fell to a researcher in minutes at a public contest, earning Miller $10,000 and demonstrating that the platform's perceived invulnerability did not match its actual attack surface.
Second-order effects
- The result pressures Apple to treat third-party researchers and public exploit contests as a serious feedback channel rather than fringe activity, and raises the stakes for subsequent Pwn2Own events — where Safari and MacBooks kept falling first, as they did again in the 2011 edition.
Third-order effects
- If the pattern holds, platform security becomes a contest-driven arms race: vendors that once relied on obscurity must fund bug bounties and patch cycles, and the market's pricing of 'secure by default' shifts toward whoever survives these public trials — a dynamic visible years later when Pwn2Own payouts had grown to six figures, as in the 2019 Vancouver contest.
The trend: Live hacking contests are evolving from novelty stunts into the de facto benchmark by which consumer platforms' real-world security is measured — and priced.