Hacking Mac Book Pro

[hawki18]

Hijacking a Macbook in 60 Seconds or Less

http://blog.washingtonpost.com/secur...60_seco_1.html

Even OS X has it issues.

[Timotheos]

"We're not picking specifically on Macs here, but if you watch those 'Get a Mac' commercials enough, it eventually makes you want to stab one of those users in the eye with a lit cigarette or something," Maynor said.

That worries me the most...

[lurk]

Yeah, but when you watch what they really did it is not an issue. It looks like they are exploiting a bug in the driver for a third party USB wireless card they installed.

So the news flash is Cheap Third Party Drivers Can Have Bugs!
... Story at 11:00.

[billbaloney]

Did you get to the video somewhere? I haven't found it anywhere yet.

I think they are exploiting a bug in the wireless card that shipped in a MacBook, no? I think the problem is that *all* wireless cards are made by third parties. Kind of like the hard drives, the memory, and most everything else.

[Captain Code]

It's a 3rd party driver but it's the one Apple ships with since they don't write their own wireless drivers.

[fryke]

It's also a USB WiFi card from what I've read. Wow. This is all so unclear...? -> http://haligon.blogspot.com/2006/08/...fi-driver.html

[billbaloney]

Here's the follow-up, and the important quote:

During the course of our interview, it came out that Apple had leaned on Maynor and Ellch pretty hard not to make this an issue about the Mac drivers -- mainly because Apple had not fixed the problem yet. Maynor acknowledged that he used a third-party wireless card in the demo so as not to draw attention to the flaw resident in Macbook drivers. But he also admitted that the same flaws were resident in the default Macbook wireless device drivers, and that those drivers were identically exploitable. And that is what I reported.

[Satcomer]

Kids you are getting a man in the middle attack. What the real news is taking over a user's computer.

note: After thinking about the video what you don't see can be listed:

1. Man in the middle network hack that has been around forever. (the pretending to be an access point).

2. How do we know if he wasn't already the Administrator of that machine?

3. Did you notice the terminal window open on the MacBook already had some commands in it (freeze the video)

Two easy fixes any OS X computer can use. a) Always know the access point you are connecting to. b) Turn off (in the system Preferences->Network Pane->AirPort tab) "automatic" joining.