An Ex-NSA Hacker Who Has Organized the First-Ever Mac Security Conference (vice.com)

Motherboard's Lorenzo Franceschi-Bicchierai spoke with Patrick Wardle, the ex-NSA hacker who's organizing a security conference exclusively dedicated to Macs. Despite what Apple has famously promoted in the mid 2000s that Macs don't get "PC viruses," Mac computers do in fact have bugs, vulnerabilities, and even malware targeted at them. From the report: "People are peeking behind the curtain and realizing that the facade of Mac security is not always what it's cracked to be," Wardle told Motherboard in a phone interview. "Any company that designs software is going to have issues -- but Apple has perfected the art of a flawless public facade that masks many security issues." Wardle would know. After hacking primarily Windows computers at Fort Meade, for the last few years Wardle been finding several issues in MacOS, so many that he considers himself a "thorn" on Apple's side. But his conference is not an exercise in shaming or finger pointing, Wardle said he hopes to educate and teach people about Mac security, especially now that so many companies are using Macs as their corporate computers.

The conference is called Objective By the Sea, a wordplay on Objective-See, the name of Wardle's suite of free Mac security products (which is itself a wordplay on Apple's main programming language called Objective-C.) It will be held in Maui, Hawaii on November 3 and 4. The conference will be free for residents of Hawaii, and for patrons of Objective-See. That's why Wardle said he can't afford to pay for all speakers to attend, but he had no trouble finding people who wanted to participate. One group that doesn't want to come to Maui, at least for now, is Apple. Wardle said he reached out to the company, essentially offering it carte blanche to talk about whatever it wanted. But the company, so far, has not responded, according to him.

Comments

Re:Yes of course, Macs use Intel processors..

[JBMcB]

...and you can basically use the same "god mode" hack as with any other "Pc".

Any other VIA C3 based PC, you mean. This hack was possible because the C3 has an embedded low power RISC core, probably for some kind of sleep state managed mode or something. With a "hidden," or possibly malformed instruction, you can wake it up and access protected memory by sending it instructions.

The ostensible analog on the Mac side is the Intel MME. Only issue with that is the MME isn't really used on the Mac platform. It's included, but the Mac platform doesn't enable any of it's features (vPro management, mainly.)