Path: csiph.com!v102.xanadu-bbs.net!xanadu-bbs.net!feeder.erje.net!eu.feeder.erje.net!fu-berlin.de!uni-berlin.de!individual.net!not-for-mail From: Jolly Roger Newsgroups: comp.sys.mac.system Subject: Re: Is this real Date: 14 Jan 2015 14:53:41 GMT Organization: People for the Ethical Treatment of Pirates Lines: 36 Message-ID: References: X-Trace: individual.net 5uMAJ9FlGqGqn2ackd5rJAKTDNTnqBEsSzBTpeLQqjVWzKap+X Cancel-Lock: sha1:96ejl/xusRe1i+D7TMjYJaQ+Uac= X-Face: _.g>n!a$f3/H3jA]>9pN55*5<`}Tud57>1Y%b|b-Y~()~\t,LZ3e up1/bO{=-) User-Agent: slrn/1.0.1 (Darwin) Xref: csiph.com comp.sys.mac.system:68411 On 2015-01-14, Kevin McMurtrie wrote: > In article , > Kurt Ullman wrote: > >> Macs vulnerable to virtually undetectable virus that "can't be removed" >> Summary:A security researcher has discovered a way to infect Macs with >> malware virtually undetectable, that 'can't be removed,' and which can >> be installed using a modified Apple gigabit Ethernet Thunderbolt adapter. >> >> http://www.zdnet.com/article/macs-vulnerable-to-virtually-undetectable-vi >> rus-that-cant-be-removed/ >> >> As best I can tell, someone has to get hold of your Mac, open it up >> and do something to the thunderbolt adaptor, put everything back >> together and then do it to it. >> Seems even to me, to be hardly worth the time or effort and >> definitely not going to do any damage for 99.999999999% of us. > > Probably already in use for government espionage. Hackers won't be far > behind. > > According to mentioned article, the hack is as simple as plugging in a > modified Thunderbolt device and rebooting the computer. The computer > runs ROM code on the Thunderbolt device while booting with no security > restrictions. The Thunderbolt device, at that moment, is free to modify > firmware on your computer. Another article has mentioned that the hack > can be extended to spread through other Thunderbolt devices that don't > protect their onboard firmware. My gosh!! Next they'll do the same for USB devices! Oh, wait... -- E-mail sent to this address may be devoured by my ravenous SPAM filter. I often ignore posts from Google. Use a real news client instead. JR