Newsvine
  • Welcome
  • Help
  • Report Bug
  • Conversation Tracker
  • Your Column
  • Replies
  • Friends
Type Comments Since You Last CheckedArticle Source Last Checked Stop Tracking All Clear Tracking All
Advertise | AdChoices
Log In | Register
Close the Login Panel
Existing users log in below. New users please register for a free account.

New Users:

Existing Users:

E-Mail:
Password:
Forgot Password?
Please enter the e-mail address or domain name you registered with:
E-Mail/Domain:
Back to Login
Log Out
  • Top News
  • Local News
  • World
  • U.S.
  • Sports
  • Politics
  • Tech
  • Entertainment
  • Science
  • Business
  • Health
  • Odd News
  • More
    • Arts
    • Education
    • Environment
    • Fashion
    • History
    • Home & Garden
    • Not News
    • Religion
    • Travel
Visit Brian Ford's column >>

BRIAN FORD

Articles Posted: 277  Links Seeded: 441
Member Since: 11/2005  Last Seen: 5/20/2012

What is Newsvine?

Updated continuously by citizens like you, Newsvine is an instant reflection of what the world is talking about at any given moment.

Get a Free Account
Help
Fun Stuff
  • Your Clippings
  • Leaderboard
  • E-Mail Alerts
  • Top of the Vine
  • Newsvine Live
  • Newsvine Archives
  • The Greenhouse
  • Recommended Articles
  • Wall of Vineness
Put a Seed Newsvine link on your own site

Hijacking a Macbook in 60 Seconds or Less

Seeded on Thu Aug 3, 2006 9:04 AM EDT
Read ArticleArticle Source: The Washington Post
technology, security, apple, wireless, computer, mac, macbook, hacker
Seeded by Brian Ford
Advertise | AdChoices

I'm posting this merely so that I can make it clear that the exploit requires the user to plug in a -third party- wireless card to a computer that comes standard with an internal wireless card.

As someone on Slashdot mentioned:

What's next, writing the exploitable drivers themselves and claiming a vulnerability?

Daring Fireball also has a good summary of the BS that this is:

Two guys misrepresenting reality to make an exploit seem as though it's built into the system when it's not.

They apparently want to stab smug mac users in the eye -- but this isn't the way to do it.

UPDATE

Apparently the discoverers of the exploit (and the author of the articles) are now calling BS on those who call BS on their article.

John Gruber follows up on his original call-out with new accusations of shoddy reporting:

Read it here.

His points are pretty deadly, as always.

  • Enjoy this article? Help vote it up the 'Vine.

Published to:

  • Brian Ford's Column, All of Newsvine
  • Groups: none
  • Regions: none
  • Public Discussion (17)
Brian Ford

In fact, it's crap like this that feeds our smugness.

We take in hot air and questionable challenges for sustenance.

  • 4 votes
Reply#1 - Thu Aug 3, 2006 9:31 AM EDT
David Rutt

The article does seem to be written in such a way as to make it seem easy to do this, when it isn't. They do at least acknowledge that it also affects Windows.

However, one paragraph caught my eye:

But according to Maynor and others, Microsoft only recently began testing whether its approved or "signed" device drivers introduced unforeseen security weaknesses into the system. Microsoft is trying to rectify that problem with Windows Vista -- the next version of its operating system by only allowing the installation of device drivers that have met the company's security testing procedures.

So, disallowing third-party device driver software installation because it's not been tested by Microsoft? I can't see that being particularly popular with the smaller manufacturers.

  • 2 votes
Reply#2 - Thu Aug 3, 2006 9:54 AM EDT
Territan

Plus, consider the case where it turns out the Microsoft-approved driver has some vulnerability and some other third-party driver is clean. Want to install the clean driver? Tough.

Not that a Microsoft-reviewed product could ever have a vulnerability like that...

  • 1 vote
#2.1 - Thu Aug 3, 2006 10:46 AM EDT
Ilyanep

And a lot of older hardware won't have MS testing (my old computer's sound card, for example).

  • 1 vote
#2.2 - Thu Aug 3, 2006 1:22 PM EDT
Reply
Kevin Tamura

I guess we're just the people living in the "reality" based community that see the BS behind the hacking.

  • 1 vote
Reply#3 - Thu Aug 3, 2006 12:24 PM EDT
Ilyanep

Agreed. It's kind of like the proof-of-concept iChat AV virus that required a user to pretty much click yes on a dialog that said 'THIS IS A VIRUS, STUPID!!!!'

  • 1 vote
Reply#4 - Thu Aug 3, 2006 1:19 PM EDT
Joel Suplido

MacBook/Pro users: raise your hands if you're using a third party plugin wireless card.

I'm still smug.

  • 5 votes
Reply#5 - Thu Aug 3, 2006 4:37 PM EDT
David Rutt

They apparently want to stab smug mac users in the eye

Hope this helps ;¬p

    #5.1 - Thu Aug 3, 2006 4:47 PM EDT
    Shawn Gordon

    I don't use mac, and I find that tactic deplorable. I'm almost embarrassed to say I use the same OSes as they do....

    • 2 votes
    #5.2 - Fri Aug 4, 2006 3:10 AM EDT
    Reply
    Shawn Gordon

    A buddy of mine found what he thought was a a bug in Macs and Safari.

    We're able to download 170K from EasyNews on Windows and Firefox, but we noticed a serious slow down in Safari. We tried firefox for OSX... problem still occured. We then hardwired the Mac to the router and hte problem still occurred. We even switched routers, but the download speeds were still sluggish in comparison. "WTF?" we thought... lets swtich the modem. And there you go... We switched out the Moto. SurfBoard with an Aeris modem that we had for telephony and the problem disappeared. Both Windows and OSX had the same DL speeds.

    Upon furhter invstigation, we discovered it was not a Mac issue at all, but the Motorola Surfboard modem we were issued for broadband internet. Why this problem exists, we still do not know, only that it is not a Mac issue.

    Even though I'm not a huge proponent of Macs, I'm glad I'm not a total donkey and make @!$%# up to make them look bad when there wasn't a problem to begin with.

    • 3 votes
    Reply#6 - Fri Aug 4, 2006 3:08 AM EDT
    MatthewM

    they ultimately decided to run the demo against a Mac due to what Maynor called the "Mac user base aura of smugness on security."

    So apparently using something a secure computer is bad and makes you smug.

    I wont bother with my cars seatbelt then as that clearly makes me a smug seatbelt wearer - lording it over all those people who dont bother with one.

    • 1 vote
    Reply#7 - Fri Aug 4, 2006 3:35 PM EDT
    MatthewM

    "So apparently using a secure computer is bad and makes you smug."
    damn no edit!

    • 1 vote
    #7.1 - Fri Aug 4, 2006 3:35 PM EDT
    Reply
    MatthewM

    All a lie it seems

    • 1 vote
    Reply#8 - Fri Aug 18, 2006 8:04 PM EDT
    Joel Suplido

    "Turns out they actually hacked the drivers of a 3rd party wireless device driver, but apparently their desire to shatter that "Mac user base aura of smugness on security" got in the way of the truth."

    • 1 vote
    #8.1 - Mon Aug 21, 2006 5:01 PM EDT
    MatthewM

    More info at Daring Fireball.

    • 1 vote
    #8.2 - Tue Aug 22, 2006 7:22 AM EDT
    Reply
    Shawn Gordon

    I think if Apple REALLY wanted to prove how secure their "ish" is... put some in to he Pentagon. It'll be a doubly positive outcome - you guys will have amazing right to now be "smug", and our government data will be secure. If it gets lost or stolen, it was intentional and all the Mac addicts will bust their ass to prove the government is lying when they do...

      Reply#9 - Tue Aug 22, 2006 8:45 PM EDT
      MatthewM

      Some part of the US military (I forget which) did in fact switch to Macs a few years ago for just that reason.

      Having said that, I dont think APPLE can choose to put theyre stuff in the Pentagon, and I would hope theyre not on the open internet anyway.

      Its no more smug to be pleased about using a more secure system than it is to drive with a seatbelt.

      "Those smug selt belt using bastards! They think theyre so great!"

      • 1 vote
      #9.1 - Wed Aug 23, 2006 8:43 AM EDT
      Reply
      Leave a Comment:
      You're in Easy Mode. If you prefer, you can use XHTML Mode instead.
      You're in XHTML Mode. If you prefer, you can use Easy Mode instead.
      (XHTML tags allowed - a,b,blockquote,br,code,dd,dl,dt,del,em,h2,h3,h4,i,ins,li,ol,p,pre,q,strong,ul)
      Newsvine Privacy Statement
      As a new user, you may notice a few temporary content restrictions. Click here for more info.
      FUN STUFF:
      • Leaderboard |
      • E-Mail Alerts |
      • Top of the Vine |
      • Newsvine Live |
      • Newsvine Archives |
      • The Greenhouse |
      COMPANY STUFF:
      • Code of Honor |
      • Company Info |
      • Contact Us |
      • Jobs |
      • User Agreement |
      • Privacy Policy |
      • About our ads
      LEGAL STUFF:
      • © 2005-2012 Newsvine, Inc. |
      • Newsvine® is a registered trademark of Newsvine, Inc. |
      • Newsvine is a property of msnbc.com