Slashdot Mirror


Less Than a Minute to Hijack a MacBook's Wireless

Kadin2048 writes "As reported by Ars Technica and the Washington Post, two hackers have found an exploitable vulnerability in the wireless drivers used by Apple's MacBook. Machines are vulnerable if they have wireless enabled and are set to connect to any available wireless network, fairly close to their default state, and the exploit allows an attacker to gain "total access" -— apparently a remote root. Although the demo, performed via video at the BlackHat conference, takes aim at what one of the hackers calls the "Mac userbase aura of smugness on security," Windows users shouldn't get too smug themselves: according to the Post article, "the two have found at least two similar flaws in device drivers for wireless cards either designed for or embedded in machines running the Windows OS." Ultimately, it may be the attacks against embedded devices which are the most threatening, since those devices are the hardest to upgrade. Currently there have not been any reports of this vulnerability 'in the wild.'" According to this story at ITwire.com, they were able to exploit Linux and Windows machines, too. (Thanks to Josh Fink.)

5 of 390 comments (clear)

  1. Mac Users by Ramble · · Score: 5, Funny

    And in the background we hear 1000 Mac users screaming in horror...

    --
    "Oh boy"
    1. Re:Mac Users by cbiltcliffe · · Score: 5, Funny

      What, you mean all of them? Come on! I'm sure a few of them wouldn't have read this story!

      (For the humour challenged among you, this is a joke. I know there are a lot more than 1000 Mac users. Only stupid mods mod jokes as trolls and flamebait.)

      --
      "City hall" in German is "Rathaus" Kinda explains a few things......
  2. A Mac Exploit by KodeSlut · · Score: 5, Funny

    My reality has been shattered. Macintosh computers have been found to be less than perfect! Time to install WinXP.

    --
    - i'll get me coat! -
  3. Linux Wireless by hyfe · · Score: 5, Funny
    Does this exploit run on Linu......
    Nobody knows, they couldn't get wireless up and running on it.

    Requests for testing have been sent to the guy in California who were rumoured to have gotten it running though.

    --
    "" How about taking the safety labels off everything, and let the stupidity-problem solve itself? """
  4. Re:That's ridiculous by Mister+Whirly · · Score: 5, Funny

    "How do you know exactly? Viruses, trojans, and rootkits should be undetectable."

    With "undetectable rootkit detection software", duh....
    Unless the rootkit has an "undetectable rootkit detection software" detector and tries to disable it, then you need "undetectable rootkit detection software detector detector software" to disable the rootkit's detector - no big deal..

    --
    "But this one goes to 11!"