Slashdot Mirror
Mac Worm Author Gets Death Threats
StonyandCher write(s) to spread news about the strange story of the reported Apple OS X worm, which is growing stranger by the day. The blog of the researcher who claimed to have created the malware reportedly received death threats. The blog was then hijacked, according to the researcher, who calls him/herself InfoSec Sellout. InfoSec blamed David Maynor for hacking the blog. For his part, Maynor apparently unmasked himself as "LMH" and InfoSec as Jon Ramsey. The post to the Fuzzing mailing list has not been independently confirmed.
Update: 07/19 13:48 GMT by KD : David Maynor wrote in and denies that he is LMH.
Update: 07/19 13:48 GMT by KD : David Maynor wrote in and denies that he is LMH.
Don't cross a mac fanboy....
"Action without philosophy is a lethal weapon; philosophy without action is worthless."
It's been far too long since we had a nice bit of hacker drama! Now, where did I put my popcorn and my MOD vs LOD t-shirt...
Slashdot Burying Stories About Slashdot Media Owned
Artsy types get violent when they get mad.
He would have been better off picking a weaker target such Islam. You don't want to mess with those Mac zealots.
Now we know the real reason there is less malware for the Macintosh.
Well, that's one way to keep an OS safe, I guess. Just think how secure Windows would be if Bill Gates focused his vast resources on killing every malware author. Ballmer would probably do the dirty work cheap ... just for the thrill of it all.
Why, Bill might even have a few million bucks left over at the end of the day.
Wasn't there some stories about religious zealots threating professors who taught evolution recently? It all begins to make sense now...
If nothing else works, a total pig-headed unwillingness to look facts in the face will see us through.
There WERE in fact Mac viruses written... but Jobs had death threats sent to the authors and they backed off on deploying them... Well, better MO than anti-viruses and firewalls :)) Good to know you have a mafia behind you if you have a Mac... but question is if they ever require you to do 'favors' for them?
Cheers!
Atheist: Buddhist in a Prius
More likely it is another publicity stunt, to make their work to look more "legitimate", to get more people to side with them (the "I may not agree with what you say, but would defend to death your right to say it" crowd), to generalize even more the feeling that Mac users are dangerous fanboys disconnected with the reality, etc.
The only thing easier than to make threats to people on the Internet is to fake threats to oneself on the Internet. We got plenty of these drama queens in the nineties, hopefully this is not a trend that will come back.
It is as if the fanatics actually believed their OS was so secure it had no security holes.
Bearded Dragon
[fuzzing] The truth Lance M. Havok:
>br> "Since the cover is becoming more difficult to maintain, I've decided to stop this. It simply can't stand anymore and I can't let this harm my company and its customers.
I am David Maynor. I made up the LMH identity for bashing Apple and appearing on the media while I was preparing for launching Errata Security with Robert. Since my credibility was severely damaged after the wireless driver exploit, I needed a sock puppet. The idea of LMH and the Month of Apple Bugs came a while after I resigned from SecureWorks."
Hi
I'm ____, I wrote that worm that messed up your computer costing you tons of time an agravation. Here's my email if you want to thank me.
--------------
although in this case it more like "I may have written a worm the exploits a now patched problem".
Threats are inappropriate but seriously, what did he think would happen?
own blog from being hacked? Remind me to talk a couple of large grains of salt with whatever he says in the future. I'm not saying he is totally discredited, but it seems to me that doing something as simple as securing a blog shouldn't be that hard for an expert security researcher.....
Monstar L
I really hate people sometimes. How can anyone be so stuck on themselves that they issue death threats because someone creates a virus for the operating system they use? In doing so, they are saying, "I'd rather you be dead than deal with the possibility that what you created would endanger my computing platform."
If you don't think that is sick, I'm not sure what is. This sort of fanaticism is extremely dangerous, and essentially a curse upon the Apple community.
The Spanish Inquisition?
1. Do something stupid
2. *
3. Profit!
He thought he had found the magic step, or possibly he was looking for hot grits!
to the old Apple blog "As the Apple Turns"
he probably thought it would be like windows, where the company doesn't give a flying ----, until they can send a patch out on the first tuesday. or like Linux and people fix it themselves.
You're assuming he hosts his own blog and you know what they say about assuming. Beyond that, why is his message less credible? if he can prove the worm works, the message is still the same, even if his blog is hacked. Perhaps the person responsible for hacking his blog is simply a much better hacker? There are so many variables to consider that your comment seems ridiculous when you even begin to look at even a tiny fraction of them.
They just implied not to release the worm or he would be dealt with using their iphones like they did at duke
Wait, so someone who claims, without providing proof, that they found/created a vulnerability in an operating system is now claiming to have received death threats and claiming that their blog was hacked? Again, without providing any real proof?
Uh, yeah. Count me skeptical.
Can anyone say "attention whore."
So it might not have been the Mac Fanboys issuing the death threats ...
Most likely hackers were already using that hole, and who don't want it patched are quite irritated that they will have to find something else to attack, which takes time and effort.
Yeah... and, considering that the worm in question can spread only on the local network, we know it's a person close to the virus writer.
Good chances for actually carrying out the threat, a small number of people to investigate... can be interesting. Grab some popcorn for me too?
The creatures outside looked from Alt-Right to Antifa; but already it was impossible to say which was which.
Wow, those Apple zealots sure get surly when you take away their illusions of having a secure OS.
Good thing that guy never saw SecurityTracker.com... if he sent a death threat for every bug and exploit in OSX, he would be busy for the rest of his life and still never finish.
Cognitive dissonance is truly a funny thing. It's fascinating the lengths the human brain will go to in order to protect its version of reality.
What you just said is the equivalent to "Their web site sucks, so I'll dismiss their work because it must suck too!"
/. could such an ad hominem attack get a +5 insightful.
He may not give a flying fuck about the security of his blog. He may be busy researching other, more important security issues!
Only on
PC: Hi, I'm a PC.
Mac: And I'm a Mac. PC, who are all those people smacking you in the head and rifling your pockets?
PC: [Sigh] Those are viruses and worms. Even though I scream "DENY! DENY!" as loudly as I can, they keep smacking me in the head and rifling my pockets. You know how it is.
Mac: Actually, I don't. You see, with a Mac...
[One of the worms moves sinisterly toward the Mac. A man in a black suit appears suddenly from the right and collars the worm, shaking it roughly.]
Man In Black Suit: Listen, woim. If you takes one more step taword da Mac kid, I'm gonna whack you and yer whole family, see?
Worm: Uh... uh... I'm just a proof of concept.
MIBS: Concept shmoncept. Not only will I whack you and yer family, I'm going to hack yer blog so bad it'll look like AintItCool.com.
Worm: [panics, runs away, screaming]
MIBS: [Claps hands as though rubbing dirt off. As he leaves to the right, Mac slips him a small paper sack.] Tanks, kid.
Mac: As I was saying, with a Mac, there are no viruses.
Rich And Stupid is not so bad as Working For Rich And Stupid.
His blog was on blogspot so it's not exactly like he had much control of it's security.
Sheesh.
... and recipes and utilities for disabling both have been around for years.
Now we have unverified claims of death threats to add credibility to unverified claims of worms attacking a deep flaw in mDNSresponder... a flaw so subtle that Apple wouldn't be able to fix it without the help of said anonymous researcher who's allegedly received death threats over it.
Now this could all be true, but then SCO could really have thousands of lines of Linux code copied from UNIX they're still hiding so they can bring it out in a dramatic eleventh-hour release and snatch victory from the jaws of defeat.
I don't doubt that there's flaws in mDNSresponder. I don't doubt that you could write a worm to exploit them. I don't doubt that Apple is capable of fixing one symptom of a flaw rather than the cause... they've done it before. But there's nothing new here... schemes like Rendozvous/Bonjour/Zeroconf and the superficially similar "Universal Plug and Play" in Windows are a compelling target for potential attacks and have been criticized in the past. They're not needed for the normal operation of the system, and should be disabled unless you actually know you need them and are on a known secure LAN
But there is no way that any legitimate security professional would proceed in the manner that the people alleged to be involved in have been behaving over the past several months. The whole presentation of this affair seems almost designed to discredit the security community in the public eye.
Notify Apple, then release the details. There's no other ethical course of action.
In your world do all CCIEs know how to manage web servers because a cisco device can have a web interface? Who hosts it, who owns the server, who wrote the code, and please tell me you aren't part of the crowd that believes anyone in the field of security somehow should be expected to know everything about all possible aspects of it? There is simply too much to know, and typically researcher types are going to be even more specialized than the generic "Hi, I R here to sekure ure network!" Security Analyst or whatever.
The only change I can believe in is what I find in my couch cushions.
This whole thing is getting a lot of coverage for what basically amounts to "random dude claims OSX vulnerability, produces no evidence to substantiate claim".
The responses are entertaining to read though. Hoards of morons attacking the Mac platform and users without any evidence that there is anything actually wrong. Lots of straw man arguments (nobody with half a brain ever said OSX was impervious to security issues), lots of hate... so much hate.
Like a bunch of catty middle school girls...
Whats worse.
biting an Apple and finding a worm in it
OR
biting an Apple and finding a half a worm in it?
I would kill the SOB myself.
Yours Truly
Mac FanBoy #1
"Drawing closer to world domination, keystroke by keystroke."
David Maynor just posted this to Full Disclosure; the post claiming to be from him and asserting that he's LMH was spoofed. Who'd a-thunk it, mail spoofing on a security list... DUH!
Everything I needed to know about life, I learnt from Blake's Seven
I think its a pretty good idea to idenify virus and spyware makers. Hell post their pictures and addresses too so that we can all show them how much we love their kind :)
... to terminate the processes of worm, virus and malware authors as well as any other pestilent replicant that attacks the safety and security of OS X.
Check this out: the first like 10 posts in this article are +5 Funny.
Slashdot: the place where death threats are funny!
You love your computer so much you will kill for it. Of course I'm the same way with hot dogs. Don't mess with my Hebrew Nationals!
As far as death threats go, that's believable, though the guy making the claims is probably just some attention whoring drama queen. You know the type, new illness every week, back trouble, relationship trouble, no one likes me, nobody wants to play with me, Timmy stole my fire engine, Bobby is teasing me.
This is the perfect antivirus strategy. You write a virus, we go to your house and shoot you in the face. No need for security patches any longer.
I would like to be there to help out during the lynching.
---- Booth was a patriot ----
Let me see if I have this straight:
-A guy anonymously says he found an exploitable hole in mDNSResponder (isn't this open source?) under MacOS X.
-He says he's still working on it and refuses to disclose himself or his findings
-A few idiot trolls post about busting a cap in his head or some such and now he's in hiding.
Jeez. You'd think he posted a pro-Microsoft or anti-Linux article on Slashdot or something.
I think it would be funny if he had the exloit on his website and all the Apple fanbois who posted from Safari were infected. I think he would have the last laugh.
Uh....I'd better check my box...
I might know what I'm talkin' about, but then again, this is Slashdot...
Are you kidding? These are Mac users we're talking about. Haven't you seen Independence Day?
Apple betters Microsoft once more.
Dispatch Tuesday is so much cooler than Patch Tuesday.
From the dictionary
Dispatch == To put to death summarily.
I find it hard to get concerned about a person who makes unsupported claims of authoring a Mac worm followed up by unsupported claims of death threats that I expect are meant to support his unsupported claims of authoring a Mac worm.
See where I'm going with this?
Please. I'd curb stomp any Apple fanboi who'd even dare to look at to me. I'd beat their boyfriend Steve Jobs right in front of them just to make them cry.
Lars T.
To the guy who modded me down from perfect to terrible Karma - Apple haters still suck
Everyone assumes the vast majority of their ostensible knowledge. First, we assume a lot when we take our inductive observations and make rules out of them, and we assume those rules apply when we use them as preconditions when reasoning, not to mention the original assumption that our observations were accurate to begin with.
I don't know where you rabid fanboys originated. As a mac user, I tend to think of myself and fellow Apple aficionados as pretty lay back and easy going. We haven't given up our chances of having sex just to install and use Linux nor are we as well used as the Microsofties are after being bent over again and again. We are happy bunch, but, I suppose a few lunatics got a little defensive when it appear that someone was actively looking to rain on our sunny world. Lunatics. You have nothing to fear. The worm is for a vulnerability that has probably been patched. Second, it is a local worm and not internet worm. Third, test worms like this give both Apple and us greater insight on how vulernabilities can be exploited. It gets us thinking about security which in my case is something that I have been laxed on lately. Please stop all this nonsense and take your meds.
You don't have to be smart to use a Mac, you just have to be smart enough to buy one
Don't blame apple fans. Look, if Windows had 95% of the market share you'd be reading about this kind of thing all the ti...
oh damn.
Lars T.
To the guy who modded me down from perfect to terrible Karma - Apple haters still suck
Lars T.
To the guy who modded me down from perfect to terrible Karma - Apple haters still suck
"[Regarding the 'cloud,'] ownership was what made America different than Russia." -- Woz
hmmm if that works maybe we should start death threatening MS so they deliver a true OS experience...
Nom de dieu de putain de bordel de merde de saloperie de connard d encule de ta mere.
Or he may simply be assuming that his hosting company would maintain the security on their own servers. I know, big assumption.
"But this one goes to 11!"
Look in the mirror, religion-bashing lemming.
Scientologists are the Jews of the 21st century.
Vi vs Emacs? Feh.
ROSCOE - Remote On SCreen Online Editor on IBM mainframes.
Now that's an editor.
Hum... capcha = atheism
It amazes me how childish "some" Mac users are, and how many of you still cling to the illusion that your OS is incapable of being hacked or infected in some way. Time to grow up.
This guy looks like he couldn't reproduce unless test tubes were involved. Then there is this guy. Wolf!!! Then, look at these studmuffins here. Which one do you want has your wingman? I am not saying sex is impossible with any of these chaps (except maybe the second one) but it will take a lot of work. They have to put down the Linux sometime. In your case, Ubuntu is basically giving up on the whole hardcore linux crap for a social life. Just ask this playa.
The faces of Microsoft aren't much to look at. But hey, they are rich and can buy all the tail they need!
If this guy can sell these. He shouldn't have any trouble smooth talking a lady. This guy doesn't seem to have a problem. I say Mac users are a happy bunch.
I would be remiss if I didn't mention the BSD folks. Their OS is "infirmed" but they got heart. Just look at their mascot. These guys are classy.
You don't have to be smart to use a Mac, you just have to be smart enough to buy one
If Microsoft employed these tactics, there wouldn't be nearly as many Windows viruses :)
Cancel or Allow?
I report that iPhone.com gets acquired by Apple... not news, but virus writer gets death threats, and random rumors and hackery... that's news. Interesting. Don't submit to Slashdot. Got it.
Leave Artie MacStrawman alone. He's an idiot, and we all know it.
And as a side note: if you can only make your point by referring to Artie's behavior, please do the world a favor and just shut up. You won't be saying anything worth hearing.
that's really weird, for his good work he is getting worse. I m with yo my fren...
Best Regards, Eliena Andrews
So a security researcher specializing in various deep windows stuff should know the ins and outs of every product on the market that has a web interface and whether or not it is secure? There are plenty of products that have reasonably secure web interfaces, Cisco unfortunately has not had the greatest track record. A generic "he should know to disable the web interface" would also translate into shutting down every interactive website, so it would be a matter of knowing which devices have safe interfaces, and once again you are demanding a bit much. I wouldn't trust a cardiologist to work on my joints just because they have both been to medical school. Maybe my problem is that I associate researcher with deep specialization and skills, not "I R knowing sekurity" of the security hobbyist or analyst).
The only change I can believe in is what I find in my couch cushions.
So what does one qualify as being a security expert? Being a dick?
Lars T.
To the guy who modded me down from perfect to terrible Karma - Apple haters still suck
Exactly whose devnull did you crawl out of? Do you think you are making a point by insulting known overachievers and geekland icons? What are you looking for a whooping or just ranting under the stealthy cover of Mac userdom?
I could counterpost you by dissing Steve Jobs, but really, would that be a mature argument to have? I think not. Arguing by insulting a third party's phenotype is just...despicable and lowly.
Someone PLEASE have mercy and mod this guy (-1, Flamebait). Noone should have to read such rubbish. Thank you.
Serpentegena
===
Edit: Enrique links the photo of Justin Long("-I am a Mac") as a demonstration of the Mac userbase's phenotypic superiority -...he's a frackin' actor, you frackin' imbecile. (Pardon my language)
Were you pictured in one of the first 3? I am not the type of guy to put a man down and not help him back up. Here is some advice to bring balance back to your life. First, switch to this. It is a compromise (and not my first choice) but it will give you time to implement my other advice. Second, buy and start using this and these. Third, stop eating these and talk to these people. It is not everything but it is a start. Just imagine yourself as cool as this guy. Read the DISCLAIMER
You don't have to be smart to use a Mac, you just have to be smart enough to buy one
Let's focus on the fact that there are only two black-hat hackers for Mac that have (claimed) to have received death threats for their troubles. David Maynor and the "creator" of the rapeOSX worm. Since death threats are fairly juvenile (and often only exist in the paranoid minds of those that receive them), who does this worm creator remind you of?
:-)
IMO, the "voice" behind the worm threat sounds exactly the same as that behind the infamous WiFi exploit/hoax to me. The same juvenile phrasing, the same outrageous claims, poor logic and blindness to the facts. The same sense of humor and the same death-threats.
There is also a psychological truism about hoaxes that's often the cause of their downfall. The hoaxer usually finds it almost irresistible not to associate their name or their identity with the hoax in some way, even if it's obscure or disguised in some way.
What is the very last statement from the "creator" of rapeosx before he signed off for good?
"I am not David Maynor."
Add to this, the fact that this slashdot thread is unusually full of "humorous" one-line anti-Apple jokes made by innumerable slash-dotters that never seem to post on other threads and are primarily new accounts, and I think you have a picture of an egomaniac stirring his own pot and trying to grab at yet another 15 minutes of fame.
Gee... who is it that fits this profile of a juvenile, paranoid, dishonest, black-hat hacker with a certain amount of skill, but not very smart, hates Apple with an unreasoning passion, has a history of outrageous claims that turn out to be untrue, and often tries to manipulate the media and online communities to their ends?
Hmmm....
That's a puzzler for sure.
Look, this bloke admits to being a crook: he claims he's expecting to be *paid* for finding vulnerabilities, whether by Apple or by some unknown sponsor. He's made exceptional claims about he nature of the flaw he's unearthed, implying that there's a deep flaw in mDNSresponder that Apple will not fix, but he refuses to notify Apple until some payment he's expecting is completed.
Either he's a crook *and* he's undermining his sponsor, or it's a hoax. Even if the alleged death threats aren't part of the hoax, there's no reason to assume they're not from the the guy he claims paid for the research and farm of 1500 Macs to test it on.
Because it was the highly amusing end to a heated thread..
For anybody writing viruses, the punishment should be just enough torture each day to keep them in a life of constant and excruciating pain for the rest of their natural life :-/
Especially if they're trying to bring the whole, bullshit, windows-rampant virus/antivirus economy to my beloved platform :-( That just totally sucks.
"I hope you like Guinness, Sir. I find it a refreshing substitute for, er... food." Col. Jack O'Neil, SG-1
I guess people cant get it through their head that there is no software or OS that is 100% secure and bug free.
This is worth at least 57 "lols."