Path: csiph.com!v102.xanadu-bbs.net!xanadu-bbs.net!feeder.erje.net!eu.feeder.erje.net!newsfeed.fsmpi.rwth-aachen.de!newsfeed.straub-nv.de!news-1.dfn.de!news.dfn.de!fu-berlin.de!uni-berlin.de!individual.net!not-for-mail From: android Newsgroups: comp.sys.mac.system Subject: Re: Is this real Date: Wed, 14 Jan 2015 11:09:15 +0100 Organization: the center Lines: 35 Message-ID: References: X-Trace: individual.net OfQUoHLCjO0aASOSPnaPwgUCCc35Ftg3XBRWj9iyaTIhjb9aK1 X-Orig-Path: here Cancel-Lock: sha1:/mzsBuTJG44Giug4gLIUGanw8o4= User-Agent: MT-NewsWatcher/3.5.2 (Intel Mac OS X) Xref: csiph.com comp.sys.mac.system:68405 In article , Kevin McMurtrie wrote: > In article , > Kurt Ullman wrote: > > > Macs vulnerable to virtually undetectable virus that "can't be removed" > > Summary:A security researcher has discovered a way to infect Macs with > > malware virtually undetectable, that 'can't be removed,' and which can > > be installed using a modified Apple gigabit Ethernet Thunderbolt adapter. > > > > http://www.zdnet.com/article/macs-vulnerable-to-virtually-undetectable-vi > > rus-that-cant-be-removed/ > > > > As best I can tell, someone has to get hold of your Mac, open it up > > and do something to the thunderbolt adaptor, put everything back > > together and then do it to it. > > Seems even to me, to be hardly worth the time or effort and > > definitely not going to do any damage for 99.999999999% of us. > > Probably already in use for government espionage. Hackers won't be far > behind. > > According to mentioned article, the hack is as simple as plugging in a > modified Thunderbolt device and rebooting the computer. The computer > runs ROM code on the Thunderbolt device while booting with no security > restrictions. The Thunderbolt device, at that moment, is free to modify > firmware on your computer. Another article has mentioned that the hack > can be extended to spread through other Thunderbolt devices that don't > protect their onboard firmware. That's good to know. Lock your firmware! /Applications/Utilities/Firmware\ Password\ Utility.app -- teleportation kills