>Or are they only told the application they need to hack on the day - that is truly impressive if so! No, the applications that are available to attack are kno

>Or are they only told the application they need to hack on the day - that is truly impressive if so! No, the applications that are available to attack are known in advance - the exploits tend to involve months of work by talented researchers. Source: I was around at MWR (purely as an uninvolved but interested spectator) when mobile & regular pwn2own 2017/2018 were taking place.