Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.sys.mac.system > #68405

Re: Is this real

Show all headers | View raw

In article <mcmurtrie-A2DAE4.00104314012015@news.sonic.net>,
 Kevin McMurtrie <mcmurtrie@pixelmemory.us> wrote:

> In article <X_KdnRi6G6epuCnJnZ2dnUU7-RednZ2d@earthlink.com>,
>  Kurt Ullman <kurtullman@yahoo.com> wrote:
> 
> > Macs vulnerable to virtually undetectable virus that "can't be removed"
> > Summary:A security researcher has discovered a way to infect Macs with 
> > malware virtually undetectable, that 'can't be removed,' and which can 
> > be installed using a modified Apple gigabit Ethernet Thunderbolt adapter.
> > 
> > http://www.zdnet.com/article/macs-vulnerable-to-virtually-undetectable-vi
> > rus-that-cant-be-removed/
> > 
> >    As best I can tell, someone has to get hold of your Mac, open it up 
> > and do something to the thunderbolt adaptor, put everything back 
> > together and then do it to it. 
> >     Seems even to me, to be hardly worth the time or effort and 
> > definitely not going to do any damage for 99.999999999% of us.
> 
> Probably already in use for government espionage.  Hackers won't be far 
> behind.
> 
> According to mentioned article, the hack is as simple as plugging in a 
> modified Thunderbolt device and rebooting the computer.  The computer 
> runs ROM code on the Thunderbolt device while booting with no security 
> restrictions.  The Thunderbolt device, at that moment, is free to modify 
> firmware on your computer.  Another article has mentioned that the hack 
> can be extended to spread through other Thunderbolt devices that don't 
> protect their onboard firmware.

That's good to know. Lock your firmware!
/Applications/Utilities/Firmware\ Password\ Utility.app
-- 
teleportation kills

Back to comp.sys.mac.system | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Is this real Kurt Ullman <kurtullman@yahoo.com> - 2015-01-12 14:49 -0500
  Re: Is this real Barry Margolin <barmar@alum.mit.edu> - 2015-01-12 15:26 -0500
  Re: Is this real Jolly Roger <jollyroger@pobox.com> - 2015-01-12 20:27 +0000
    Re: Is this real Lloyd Parsons <lloydp21@live.com> - 2015-01-12 14:29 -0600
      Re: Is this real Alan Browne <alan.browne@FreelunchVideotron.ca> - 2015-01-12 16:52 -0500
        Re: Is this real John <Man@the.keyboard> - 2015-01-13 06:29 +0000
          Re: Is this real Alan Browne <alan.browne@FreelunchVideotron.ca> - 2015-01-15 15:11 -0500
      Re: Is this real John <Man@the.keyboard> - 2015-01-13 06:27 +0000
      Re: Is this real billy@MIX.COM - 2015-01-15 18:48 +0000
        Re: Is this real nospam <nospam@nospam.invalid> - 2015-01-15 14:04 -0500
          Re: Is this real JF Mezei <jfmezei.spamnot@vaxination.ca> - 2015-01-15 16:58 -0500
        Re: Is this real Jolly Roger <jollyroger@pobox.com> - 2015-01-15 19:22 +0000
        Re: Is this real Lloyd Parsons <lloydp21@live.com> - 2015-01-15 13:34 -0600
  Re: Is this real Alan Browne <alan.browne@FreelunchVideotron.ca> - 2015-01-12 16:39 -0500
    Re: Is this real John McWilliams <jpmcw@comcast.net> - 2015-01-15 20:21 -0800
      Re: Is this real Your Name <YourName@YourISP.com> - 2015-01-16 18:26 +1300
      Re: Is this real Alan Browne <alan.browne@FreelunchVideotron.ca> - 2015-01-16 09:19 -0500
  Re: Is this real Kevin McMurtrie <mcmurtrie@pixelmemory.us> - 2015-01-14 00:10 -0800
    Re: Is this real android <here@there.was> - 2015-01-14 11:09 +0100
      Re: Is this real dempson@actrix.gen.nz (David Empson) - 2015-01-15 00:54 +1300
    Re: Is this real Jolly Roger <jollyroger@pobox.com> - 2015-01-14 14:53 +0000
  Thunderstrike "malware" (was Re: Is this real) Your Name <YourName@YourISP.com> - 2015-01-15 18:33 +1300
  Re: Is this real Jolly Roger <jollyroger@pobox.com> - 2015-01-24 15:53 +0000

csiph-web