Hacking Mac OSX - BMW Luxury Touring Community
 
LinkBack Thread Tools Display Modes
post #1 of 3 Old Mar 11th, 2006, 11:27 pm Thread Starter
 
Join Date: Jun 2002
Posts: 3,413
Hacking Mac OSX

"Easy pickings" (lest we become complacent).
beemerlt is offline  
Sponsored Links
Advertisement
 
post #2 of 3 Old Mar 11th, 2006, 11:45 pm Thread Starter
 
Join Date: Jun 2002
Posts: 3,413
But an alternative view:
The ZDnet article, and almost all of the coverage of it, failed to mention a very critical point: anyone who wished it was given a local account on the machine (which could be accessed via ssh). Yes, there are local privilege escalation vulnerabilities; likely some that are "unpublished". But this machine was not hacked from the outside just by being on the Internet. It was hacked from within, by someone who was allowed to have a local account on the box. That is a huge distinction.
beemerlt is offline  
post #3 of 3 Old Mar 12th, 2006, 12:44 am
IBR# 366
 
meese's Avatar
 
Join Date: Apr 2002
Location: West Linn, OR
Posts: 16,417
Garage
Yep, they only got in after being allowed access to a local account. They did manage root access, but that test doesn't really apply to most Macs, whether connected to the internet or not.

I recently read another article about a similar OSX hacking competition, where they weren't allowed a local account. After 38 hours, no one had gotten in and so they terminated the test. I'll see if I can find the original link again.

And I agree that we can't just remain complacent, but we can enjoy the relative security that we have now (for as long as it lasts, that is).

Ken
Pacific NorthWet
'13 Dark Graphite Metallic K16GTLD, 24K miles
'09 Magnesium Beige Metallic K13GT, 63K miles
'03 Anthracite Metallic K12LTC, 66K miles
'02 Mauve Metallic K12LTC, 106K miles and sold
BMWLT#143, IBA# 366, MOA# 111996, SCMA# 24032


To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.

To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.


Some people see the gas tank as half empty. Some see it as half full. All I care is that I know where the next tankful is coming from...
To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
meese is offline  
Reply

Quick Reply
Message:
Options

Register Now



In order to be able to post messages on the BMW Luxury Touring Community forums, you must first register.
Please enter your desired user name, your email address and other required details in the form below.

User Name:
Password
Please enter a password for your user account. Note that passwords are case-sensitive.

Password:


Confirm Password:
Email Address
Please enter a valid email address for yourself.

Email Address:
OR

Log-in











Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools
Show Printable Version Show Printable Version
Email this Page Email this Page
Display Modes
Linear Mode Linear Mode



Posting Rules  
You may post new threads
You may post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is On
Trackbacks are On
Pingbacks are On
Refbacks are On

 
For the best viewing experience please update your browser to Google Chrome