Like I said, this is trivial and stupid... but I spent a few minutes and made a different version of this trojan. Check it out below, it "looks" like a jPG file (if you have "always show file extensions" off), but is really an application with an embedded JPG file which it open after printing some benign messages to the console.
It is.app package so it would be kind of hard to distribute it via a P2P mechanism or something, since it needs to be.zipped (or whatever) to transfer it as a single file.
Most people don't show file extensions anyway, so it would probably just as effective to name it "myFakeTrojan.app" with a JPG icon, etc. It would appear as "myFakeTrojan" with a JPG icon.
This is nothing new... people have been doing this for years on Windows. OS X lets you hide file extensions too, so MyMusic.mp3.app can show up as MyMusic.mp3. The article seems a little misleading at first -- the ID3 tag isn't executed, its a full fledged application that contains an MP3 file.
It would take me about 15 minutes to write my own "trojan horse" of this nature... Don't make a big fuss over nothing.
From the MacNN article: The company says that Mac OS X displays the icon of the MP3 file, with an.mp3 extension, rather than showing the file as an application, leading users to believe that they can double-click the file to listen to it. But double clicking the file launches the hidden code, which can damage or delete files on computers running Mac OS X, then iTunes to play the music contained in the file, to make users think that it is really an MP3 file . While the first versions of this Trojan horse that Intego has isolated are benign, this technique opens the door to more serious risks.
Actually had the shoe bomb gone off in the bathroom it probably wouldn't have punctured the hull of the plane... it would have just made a mess of him and the bathroom. The shoe bomber may not have been a genius, but he did have the right idea by trying to set it off in a window seat.
I don't remember anymore, but i also think that his seat was positioned nicely in a weaker section of the plane, too (eg: not over the wings).
RTCW? Yes, I play regularly. Halo? Yes, about a month behind the PC version Sim City 4? Yes Civ 3? Yes
Granted anyone who just wants to play games for cheap has no need for a Macintosh. But you could also argue that they don't need a PC either (get a console).
I agree that there is a lot to be said for compatability: it gotten a lot better in the past few years.
Set it to "open in current window" with tabs switched on and you're set. This makes using any of those search-helper apps (ie: Searchling or iSeek;) much nicer. It took me a couple days to actually try this before I realized how it worked.
Yes, defintely. I even thought up various far-fetched ways to fix the obvious problems with it. Like cutting of people's feet if they walked through. Or lasering down trees, etc.
Part of the problem with doing that is that most of the airplane's fuel will be spent by the time they reach their destination. On 9/11 the terrorists picked the flights they did because they were all loaded with fuel, ready to goto the west coast. When they hit the WTC this fuel burned extremely hot and eventually caused the collapse due to heat damage.
Not that a crashing airplane with only a little fuel wouldn't be a problem, though...
Slashdot Mirror
Like I said, this is trivial and stupid... but I spent a few minutes and made a different version of this trojan. Check it out below, it "looks" like a jPG file (if you have "always show file extensions" off), but is really an application with an embedded JPG file which it open after printing some benign messages to the console.
.app package so it would be kind of hard to distribute it via a P2P mechanism or something, since it needs to be .zipped (or whatever) to transfer it as a single file.
It is
Anyway, check it out:
fakeJPGTrojan.zip
Yes, but TextEdit.mp3 copy.app will work great.
Most people don't show file extensions anyway, so it would probably just as effective to name it "myFakeTrojan.app" with a JPG icon, etc. It would appear as "myFakeTrojan" with a JPG icon.
Hmm, I'm an iPod-wearing, dual-CPU-owning, Mac cabal... and yet my MP3s far outweight my AACs. Maybe I've lost touch with my inner Apple-zealot.
This is nothing new... people have been doing this for years on Windows. OS X lets you hide file extensions too, so MyMusic.mp3.app can show up as MyMusic.mp3. The article seems a little misleading at first -- the ID3 tag isn't executed, its a full fledged application that contains an MP3 file.
.mp3 extension, rather than showing the file as an application, leading users to believe that they can double-click the file to listen to it. But double clicking the file launches the hidden code, which can damage or delete files on computers running Mac OS X, then iTunes to play the music contained in the file, to make users think that it is really an MP3 file . While the first versions of this Trojan horse that Intego has isolated are benign, this technique opens the door to more serious risks.
It would take me about 15 minutes to write my own "trojan horse" of this nature... Don't make a big fuss over nothing.
From the MacNN article:
The company says that Mac OS X displays the icon of the MP3 file, with an
Actually had the shoe bomb gone off in the bathroom it probably wouldn't have punctured the hull of the plane... it would have just made a mess of him and the bathroom. The shoe bomber may not have been a genius, but he did have the right idea by trying to set it off in a window seat.
I don't remember anymore, but i also think that his seat was positioned nicely in a weaker section of the plane, too (eg: not over the wings).
RTCW? Yes, I play regularly.
Halo? Yes, about a month behind the PC version
Sim City 4? Yes
Civ 3? Yes
Granted anyone who just wants to play games for cheap has no need for a Macintosh. But you could also argue that they don't need a PC either (get a console).
I agree that there is a lot to be said for compatability: it gotten a lot better in the past few years.
You've not listened to 128 kbps AAC, have you?
This is exactly what Safari does!
;) much nicer. It took me a couple days to actually try this before I realized how it worked.
Set it to "open in current window" with tabs switched on and you're set. This makes using any of those search-helper apps (ie: Searchling or iSeek
Yes, defintely. I even thought up various far-fetched ways to fix the obvious problems with it. Like cutting of people's feet if they walked through. Or lasering down trees, etc.
Part of the problem with doing that is that most of the airplane's fuel will be spent by the time they reach their destination. On 9/11 the terrorists picked the flights they did because they were all loaded with fuel, ready to goto the west coast. When they hit the WTC this fuel burned extremely hot and eventually caused the collapse due to heat damage.
Not that a crashing airplane with only a little fuel wouldn't be a problem, though...