Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > comp.sys.mac.system > #52564
| From | billy@MIX.COM |
|---|---|
| Newsgroups | comp.sys.mac.system |
| Subject | Re: Security Scare ? |
| Date | 2013-11-23 22:19 +0000 |
| Organization | PANIX Public Access Internet and UNIX, NYC |
| Message-ID | <l6r9lh$em8$1@reader2.panix.com> (permalink) |
| References | <l6r8gg$u21$1@dont-email.me> |
Wes Groleau <Groleau+news@freeshell.org> writes:
> Three explanations:
>
> 1. The dude has SERIOUSLY lost his marbles.
> or
> 2. He has some perverted motivation for an incredibly involved hoax
> or
> 3. Big trouble is coming.
>
> A mere "April Fool's Joke" does not seem to be a viable explanation.
I'm going with choice #1 in your list, above. Heh.
> http://tinyurl.com/q3e4zgj
This came up in ba.internet - here are my articles from there, edited
a bit for easier reading.
>From: billy@MIX.COM
Newsgroups: ba.internet
Subject: Re: badBIOS -- the mysterious Mac and PC malware that jumps airgaps
Date: Fri, 1 Nov 2013 20:57:12 +0000 (UTC)
Message-ID: <l514j8$fot$1@reader2.panix.com>
Thad Floryan <thad@thadlabs.com> quotes ARS Technica:
> In the intervening three years, Ruiu said [...]
The speculation about propagation via ultrasonic audio using
the computers' loudspeakers and microphones is rather odd, in
that it'd take about three days max to rent and deploy test
instruments to actually observe anything like this.
Billy Y..
Date: Sun, 3 Nov 2013 01:44:21 +0000 (UTC)
Message-ID: <l549pl$de$1@reader1.panix.com>
Thad Floryan <thad@thadlabs.com> writes:
> It would appear you didn't read the "Comments" following the
> article:
I did read it, and I stand by what I've said. Yes, there
are many ways to screw with someone's computer (as with the
Russians and USB memory at the recent G20 conference), but
a) I rather doubt ultrasonic audio is involved here, and
b) it's trivially easy to take a look and discover it, if
it is.
Billy Y..
Date: Sun, 3 Nov 2013 02:19:39 +0000 (UTC)
Message-ID: <l54brr$d1r$1@reader1.panix.com>
Thad Floryan <thad@thadlabs.com> quotes Dan Goodin:
> Three years ago, security consultant Dragos Ruiu was in his lab when he
> noticed something highly unusual: his MacBook Air, on which he had just
> installed a fresh copy of OS X, spontaneously updated the firmware that
> helps it boot.
My understanding is (I don't own any newer Apple gear, so I can't confirm
from my own experience) starting with OS 10.6 Apple can install things that
need to be done as root without the user entering the admin password.
> Stranger still, when Ruiu then tried to boot the machine off a CD ROM,
> it refused.
That it did not work is no surprise to me, even if it did work with a
prior firmware version. What he was trying to boot isn't specified, but
OS X has not fit on a CD or three since before the days of Intel. So,
I'm guessing it was not OS X.
> He also found that the machine could delete data and undo configuration
> changes with no prompting.
Heh. He is hardly the only guy to whom this stuff happens. As but
one tiny example, I've had Apple Mail delete messages, including the
copy on my IAMP server, just from toggling through the program's open
windows. And undo config changes just from closing a window, as opposed
to quitting the program with the window open. I remember these because
it pissed me off - but they're a mere drop in Apple's bug bucket.
Billy Y..
--
sub #'9+1 ,r0 ; convert ascii byte
add #9.+1 ,r0 ; to an integer
bcc 20$ ; not a number
Back to comp.sys.mac.system | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread
Security Scare ? Wes Groleau <Groleau+news@FreeShell.org> - 2013-11-23 16:59 -0500
Re: Security Scare ? Wes Groleau <Groleau+news@FreeShell.org> - 2013-11-23 17:16 -0500
Re: Security Scare ? Paul Sture <nospam@sture.ch> - 2013-11-24 09:34 +0100
Re: Security Scare ? Michelle Steiner <foo@bar.com> - 2013-11-24 07:23 -0700
Re: Security Scare ? Paul Sture <nospam@sture.ch> - 2013-11-24 15:40 +0100
Re: Security Scare ? Michelle Steiner <foo@bar.com> - 2013-11-24 08:39 -0700
Re: Security Scare ? Jolly Roger <jollyroger@pobox.com> - 2013-11-24 16:56 +0000
Re: Security Scare ? billy@MIX.COM - 2013-11-23 22:19 +0000
Re: Security Scare ? JF Mezei <jfmezei.spamnot@vaxination.ca> - 2013-11-23 20:21 -0500
Re: Security Scare ? Lewis <g.kreme@gmail.com.dontsendmecopies> - 2013-11-24 04:38 +0000
Re: Security Scare ? Wes Groleau <Groleau+news@FreeShell.org> - 2013-11-24 00:52 -0500
Re: Security Scare ? JF Mezei <jfmezei.spamnot@vaxination.ca> - 2013-11-24 02:09 -0500
Re: Security Scare ? Jolly Roger <jollyroger@pobox.com> - 2013-11-24 16:47 +0000
Re: Security Scare ? Wes Groleau <Groleau+news@FreeShell.org> - 2013-11-24 12:32 -0500
Re: Security Scare ? Lewis <g.kreme@gmail.com.dontsendmecopies> - 2013-11-24 17:32 +0000
Re: Security Scare ? Wes Groleau <Groleau+news@FreeShell.org> - 2013-11-24 12:53 -0500
Re: Security Scare ? jamiekg@wizardling.geek.nz (Jamie Kahn Genet) - 2013-11-25 19:19 +1300
Re: Security Scare ? Alan Browne <alan.browne@FreelunchVideotron.ca> - 2013-11-24 11:56 -0500
Re: Security Scare ? Jolly Roger <jollyroger@pobox.com> - 2013-11-24 17:09 +0000
Re: Security Scare ? Wes Groleau <Groleau+news@FreeShell.org> - 2013-11-24 12:45 -0500
Re: Security Scare ? Jolly Roger <jollyroger@pobox.com> - 2013-11-24 18:26 +0000
Re: Security Scare ? Wes Groleau <Groleau+news@FreeShell.org> - 2013-11-24 13:40 -0500
Re: Security Scare ? Jolly Roger <jollyroger@pobox.com> - 2013-11-24 21:15 +0000
Re: Security Scare ? Wes Groleau <Groleau+news@FreeShell.org> - 2013-11-24 21:41 -0500
Re: Security Scare ? jamiekg@wizardling.geek.nz (Jamie Kahn Genet) - 2013-11-25 19:19 +1300
Re: Security Scare ? Lewis <g.kreme@gmail.com.dontsendmecopies> - 2013-11-25 09:02 +0000
Re: Security Scare ? jamiekg@wizardling.geek.nz (Jamie Kahn Genet) - 2013-11-25 23:10 +1300
Re: Security Scare ? Richard Kettlewell <rjk@greenend.org.uk> - 2013-11-25 10:24 +0000
Re: Security Scare ? jamiekg@wizardling.geek.nz (Jamie Kahn Genet) - 2013-11-26 07:39 +1300
Re: Security Scare ? Richard Kettlewell <rjk@greenend.org.uk> - 2013-11-25 20:48 +0000
Re: Security Scare ? Wes Groleau <Groleau+news@FreeShell.org> - 2013-11-25 21:01 -0500
Re: Security Scare ? Wes Groleau <Groleau+news@FreeShell.org> - 2013-11-25 20:26 -0500
Re: Security Scare ? Lewis <g.kreme@gmail.com.dontsendmecopies> - 2013-11-26 07:13 +0000
Re: Security Scare ? jamiekg@wizardling.geek.nz (Jamie Kahn Genet) - 2013-11-27 13:59 +1300
Re: Security Scare ? Wes Groleau <Groleau+news@FreeShell.org> - 2013-11-25 20:23 -0500
Re: Security Scare ? jamiekg@wizardling.geek.nz (Jamie Kahn Genet) - 2013-11-26 16:28 +1300
Re: Security Scare ? Paul Sture <nospam@sture.ch> - 2013-12-01 12:23 +0100
Re: Security Scare ? Alan Browne <alan.browne@FreelunchVideotron.ca> - 2013-11-24 13:00 -0500
Re: Security Scare ? Lewis <g.kreme@gmail.com.dontsendmecopies> - 2013-11-24 17:39 +0000
Re: Security Scare ? Wes Groleau <Groleau+news@FreeShell.org> - 2013-11-24 12:51 -0500
Re: Security Scare ? billy@MIX.COM - 2013-11-24 18:38 +0000
Re: Security Scare ? JF Mezei <jfmezei.spamnot@vaxination.ca> - 2013-11-24 17:10 -0500
Re: Security Scare ? Ted Lee <tmplee@mr.net> - 2013-11-24 16:24 -0600
Re: Security Scare ? Wes Groleau <Groleau+news@FreeShell.org> - 2013-11-24 21:46 -0500
Re: Security Scare ? jamiekg@wizardling.geek.nz (Jamie Kahn Genet) - 2013-11-25 20:26 +1300
Re: Security Scare ? Wes Groleau <Groleau+news@FreeShell.org> - 2013-11-25 21:04 -0500
Re: Security Scare ? jamiekg@wizardling.geek.nz (Jamie Kahn Genet) - 2013-11-26 16:28 +1300
Re: Security Scare ? Alan Browne <alan.browne@FreelunchVideotron.ca> - 2013-11-24 13:18 -0500
Re: Security Scare ? Lewis <g.kreme@gmail.com.dontsendmecopies> - 2013-11-25 01:15 +0000
Re: Security Scare ? nospam <nospam@nospam.invalid> - 2013-11-24 20:23 -0500
Re: Security Scare ? Wes Groleau <Groleau+news@FreeShell.org> - 2013-11-24 21:55 -0500
Re: Security Scare ? Wes Groleau <Groleau+news@FreeShell.org> - 2013-11-24 22:22 -0500
Re: Security Scare ? nospam <nospam@nospam.invalid> - 2013-11-24 23:34 -0500
Re: Security Scare ? Lewis <g.kreme@gmail.com.dontsendmecopies> - 2013-11-25 08:54 +0000
Re: Security Scare ? JF Mezei <jfmezei.spamnot@vaxination.ca> - 2013-11-25 12:19 -0500
Re: Security Scare ? Wes Groleau <Groleau+news@FreeShell.org> - 2013-11-25 21:07 -0500
Re: Security Scare ? JF Mezei <jfmezei.spamnot@vaxination.ca> - 2013-11-25 23:27 -0500
Re: Security Scare ? Lewis <g.kreme@gmail.com.dontsendmecopies> - 2013-11-26 07:10 +0000
Re: Security Scare ? JF Mezei <jfmezei.spamnot@vaxination.ca> - 2013-11-26 02:22 -0500
Re: Security Scare ? dempson@actrix.gen.nz (David Empson) - 2013-11-26 12:45 +1300
Re: Security Scare ? Alan Browne <alan.browne@FreelunchVideotron.ca> - 2013-11-27 20:17 -0500
Re: Security Scare ? Wes Groleau <Groleau+news@FreeShell.org> - 2013-12-10 01:25 -0500
Re: Security Scare ? Alan Browne <alan.browne@FreelunchVideotron.ca> - 2013-11-25 16:48 -0500
Re: Security Scare ? billy@MIX.COM - 2013-11-26 03:01 +0000
Re: Security Scare ? Alan Browne <alan.browne@FreelunchVideotron.ca> - 2013-11-27 19:36 -0500
Re: Security Scare ? JF Mezei <jfmezei.spamnot@vaxination.ca> - 2013-11-25 23:22 -0500
Re: Security Scare ? Wes Groleau <Groleau+news@FreeShell.org> - 2013-11-24 12:41 -0500
Re: Security Scare ? jamiekg@wizardling.geek.nz (Jamie Kahn Genet) - 2013-11-25 19:11 +1300
csiph-web