[lug] root password
Rob Nagler
nagler at bivio.biz
Thu Aug 3 14:08:44 MDT 2006
Rob Nagler writes:
> valuable data run less software. Laptops are more easily crackable
> than servers, because they are client machines, and run all sorts of
> highly vulnerable software, like Firefox, Word, etc.
Just out yesterday:
http://blog.washingtonpost.com/securityfix/2006/08/hijacking_a_macbook_in_60_seco_1.html
If you want to grab the attention of a roomful of hackers, one sure
fire way to do it is to show them a new method for remotely
circumventing the security of an Apple Macbook computer to seize total
control over the machine. That's exactly what hackers Jon "Johnny
Cache" Ellch and David Maynor plan to show today in their Black Hat
presentation on hacking the low-level computer code that powers many
internal and external wireless cards on the market today.
The video shows Ellch and Maynor targeting a specific security
flaw in the Macbook's wireless "device driver," the software that
allows the internal wireless card to communicate with the
underlying OS X operating system. While those device driver flaws
are particular to the Macbook -- and presently not publicly
disclosed -- Maynor said the two have found at least two similar
flaws in device drivers for wireless cards either designed for or
embedded in machines running the Windows OS. Still, the presenters
said they ultimately decided to run the demo against a Mac due to
what Maynor called the "Mac user base aura of smugness on
security."
s/Mac/Linux/g :-)
Rob
More information about the LUG
mailing list