University of Wisconsin's contest has ended... with no victor. "There were no successful access attempts of any kind, including during the 38 hour duration of the test period, nor have their been any claims of success. The host is still the same host and configuration used for the test."
Here's the update from the contest site:
- The response has been very strong, and the test has illustrated its point.
- Traffic to the host spiked at over 30 Mbps.
- Most of the traffic, aside from casual web visitors, was web exploit scripts, ssh dictionary attacks, and scanning tools such as Nessus.
- The machine was under intermittent DoS attack. During the two brief periods of denial of service, the host remained up.
- The test machine was a Mac mini (PowerPC) running Mac OS X 10.4.5 with Security Update 2006-001, had two local accounts, and had ssh and http open with their default configurations.
- There were no successful access attempts of any kind, including during the 38 hour duration of the test period, nor have their been any claims of success. The host is still the same host and configuration used for the test.Some snippets from 7 March 2006:
- The site received almost a half a million requests via the web.
- There were over 4000 login attempts via ssh.
- The ipfw log grew at 40MB/hour and contains 6 million events logged.
- Several social engineering attempts were received, including one purporting to be from the government of Sweden, which apparently uses GMail. ;-)
- More test results and information will be published here at a future date.
University of Wisconsin started a contest in response to a misleading article Mac OS X hacked in 30 minutes.