Dino Dai Zovi
More info
- Known for
- First Pwn2Own (2007), The Mac Hacker's Handbook (2009), "No More Free Bugs"
- Affiliation
- Square, Capsule8
Exploit writer who won the very first Pwn2Own by taking over a MacBook through the browser.
At CanSecWest 2007, two MacBooks sat on a table with the promise that whoever took one over could keep it. Dai Zovi wrote an exploit overnight for a QuickTime bug reachable through Safari, and his friend Shane Macaulay ran it on site. It punctured the notion that the Mac was too secure to worry about.
With Charlie Miller he wrote The Mac Hacker's Handbook (2009), and that same year he, Miller and Alex Sotirov pushed the "No More Free Bugs" campaign: researchers should stop handing vulnerabilities to billion-dollar companies for nothing. It was one of the reasons bug bounty programmes became industry standard.