Comments on: Security glitch exposes OS X account passwords
A new OS X vulnerability, which Apple has not yet fixed, lets an attacker snatch the password from an account that's currently logged in.
Most Popular
15 sites that went kaput in 2009
Web sites launch all the time, but they also shut their doors. We highlight 15 that bit the dust this year.
Top 10 news stories of the decade
Let the debate begin: Was the iPhone more important than iTunes? Was anything bigger than Google finding a great business model? CNET offers its list of the 10 most important stories of the '00s.
About News Blog
Recent posts on technology, trends, and more.
Add this feed to your online news reader
can wreak havoc.
This is nothing new.
If someone had physical access to my machine, I have a LOT of
other issues to deal with.
Are you people crazy!
here you report on a serious security breach , describe how to do it and even show step by step pictures.
Anyone using proper brain cells
I expect they will quickly try to fix the issue, but while identifying the issue is one thing, fixing it in this case may be a bit more tricky.
I have to give kudos to CNET for this. They've gone after Linux, Windows and OS X for security issues before.
I wonder if this affects BSD and Linux as well? They use a very similar architecture for some of this. Perhaps Penguinisto can expand on that. I expect they aren't exposed, but I really don't know.
Penguinisto- any ideas if this issue with OSX would work with *nix flavors?
honestly grateful to CNet for publishing this information. I
certainly have never considered OS X to be impervious to attacks
(the steady release of security updates shows that there are flaws to
be exploited) but seeing exactly how it can be achieved lets you
know what the risks are in a realistic way.
http://citp.princeton.edu/memory
What are we going to do now?
is not older than that particular Mac, you can simply put the disk
in, force power down, restart booting from the install disk, from
the Utilities menu launch Reset Password Utility.
This allows you to change the password for any account on any
connected bootable volume as well as enable the Root account!
That's a hell of a lot easier than this ******** attack.
Apple's not stupid and this is no secret.
Jeeesshhh...!
you HAVE PHYSICAL ACCESS TO IT? Seriously, how obvious does
CNET have to be about being pro-M$ and anti-Apple? As if their
Digital Music Player ratings weren't enough...
Apple doesn't owe anyone protection if someone has physical access to your computer.
At least, not yet. The encrypted HD is next file system!
Many people do not encrypt their HD because of the performance hit. If your data is not critical, it is a waist to encrypt your hard drive. If your competitors would be willing to kill to get your data, it is a very good idea (at that point you should ask yourself if your data is more important than your life, and how long you can stand up to torture).
password. It stays locked even after I log in until it's needed. And
then when it is, it has to be done with a different password. I did
this because I realized someone could walk up to my computer,
and have access to Keychain.
Over all though, this is a pretty lame security risk...
- by floripondiocaster September 26, 2009 2:00 PM PDT
- since we are analyzing it, I would like to take the test in my house, if someone really explain the procedures, and as at the time of changing the ram, in order to extract the data, I have a macbook 2.4 and it seems quite interesting topic, or if some software is being employed to do so independently.,,
- Like this Reply to this comment
-
Showing 2 of 2 pages (88 Comments)