Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.sys.mac.system > #68336

Re: Is this real

Show all headers | View raw

On Mon, 12 Jan 2015 14:29:12 -0600, Lloyd Parsons <lloydp21@live.com>
wrote:

>On 12 Jan 2015 20:27:17 GMT, Jolly Roger wrote:
>> On 2015-01-12, Kurt Ullman <kurtullman@yahoo.com> wrote:
>>>
>>> Macs vulnerable to virtually undetectable virus that "can't be removed"
>>> Summary:A security researcher has discovered a way to infect Macs with
>>> malware virtually undetectable, that 'can't be removed,' and which can
>>> be installed using a modified Apple gigabit Ethernet Thunderbolt adapter.
>>>
>>> http://www.zdnet.com/article/macs-vulnerable-to-virtually-undetectable-vi
>>> rus-that-cant-be-removed/
>>>
>>>    As best I can tell, someone has to get hold of your Mac, open it up
>>> and do something to the thunderbolt adaptor, put everything back
>>> together and then do it to it.
>>>     Seems even to me, to be hardly worth the time or effort and
>>> definitely not going to do any damage for 99.999999999% of us.
>>
>> Sure, it's real. It's also not Mac-specific. The researcher chose Macs
>> for the publicity. To be compromised, you have to allow a stranger to
>> plug a malicious Thunderbolt device into a Thunderbolt port on your
>> computer. This is similarly to the way you can be compromised if you
>> allow someone to plug a malicious USB device into the USB port on your
>> computer. And that's been known for many years now. The same smart
>> computing principle applies: Don't leave your computer where strangers
>> can have unsupervised physical access to it, and don't plug strange
>> USB/Thunderbolt things into your computer. ; )
>>
>IOW, another of those 'proof of concept' thingies with no real impact
>on anyone other than the very stupid.
>
>My guess, it'll never see the light outside the 'lab' he did it in.

 And SF and spy movies, or "Die Hard 27.0.1" where plugging in the USB
device is all the explanation one ever needs for how the bad guys, or
the goodguy hacker can suddenly circumvent all your security with a
singe random keystroke.
 Even if you happen to be an alien mothership whose OS is written in
Alien.
              J. 

Back to comp.sys.mac.system | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Is this real Kurt Ullman <kurtullman@yahoo.com> - 2015-01-12 14:49 -0500
  Re: Is this real Barry Margolin <barmar@alum.mit.edu> - 2015-01-12 15:26 -0500
  Re: Is this real Jolly Roger <jollyroger@pobox.com> - 2015-01-12 20:27 +0000
    Re: Is this real Lloyd Parsons <lloydp21@live.com> - 2015-01-12 14:29 -0600
      Re: Is this real Alan Browne <alan.browne@FreelunchVideotron.ca> - 2015-01-12 16:52 -0500
        Re: Is this real John <Man@the.keyboard> - 2015-01-13 06:29 +0000
          Re: Is this real Alan Browne <alan.browne@FreelunchVideotron.ca> - 2015-01-15 15:11 -0500
      Re: Is this real John <Man@the.keyboard> - 2015-01-13 06:27 +0000
      Re: Is this real billy@MIX.COM - 2015-01-15 18:48 +0000
        Re: Is this real nospam <nospam@nospam.invalid> - 2015-01-15 14:04 -0500
          Re: Is this real JF Mezei <jfmezei.spamnot@vaxination.ca> - 2015-01-15 16:58 -0500
        Re: Is this real Jolly Roger <jollyroger@pobox.com> - 2015-01-15 19:22 +0000
        Re: Is this real Lloyd Parsons <lloydp21@live.com> - 2015-01-15 13:34 -0600
  Re: Is this real Alan Browne <alan.browne@FreelunchVideotron.ca> - 2015-01-12 16:39 -0500
    Re: Is this real John McWilliams <jpmcw@comcast.net> - 2015-01-15 20:21 -0800
      Re: Is this real Your Name <YourName@YourISP.com> - 2015-01-16 18:26 +1300
      Re: Is this real Alan Browne <alan.browne@FreelunchVideotron.ca> - 2015-01-16 09:19 -0500
  Re: Is this real Kevin McMurtrie <mcmurtrie@pixelmemory.us> - 2015-01-14 00:10 -0800
    Re: Is this real android <here@there.was> - 2015-01-14 11:09 +0100
      Re: Is this real dempson@actrix.gen.nz (David Empson) - 2015-01-15 00:54 +1300
    Re: Is this real Jolly Roger <jollyroger@pobox.com> - 2015-01-14 14:53 +0000
  Thunderstrike "malware" (was Re: Is this real) Your Name <YourName@YourISP.com> - 2015-01-15 18:33 +1300
  Re: Is this real Jolly Roger <jollyroger@pobox.com> - 2015-01-24 15:53 +0000

csiph-web