Mac hacked in 2 minutes


Recommended Posts

We a company called MSI in our hospital this week, doing security checks via DDOS attacks, etc on our network to see how secure we our, we run a strict MS network and so far they've managed to bring down 5 systems since Monday

Windows is scary.

Well i wasn?t saying that Windows is completely secure,by the other hand you say that only 5 systems has been compromised

Of how many?

In other instance the unknown is more scary,since OSX is unknown to security threats from the hacking and cracking community.Simply OSX isn?t designed for this payload.

Do you know why many hackers give propaganda to install linux or other non operating system?

Answer: Beacuse they know more possible vulnerabilites than Windows

You can take that for granted si:):)

We a company called MSI in our hospital this week, doing security checks via DDOS attacks, etc on our network to see how secure we our, we run a strict MS network and so far they've managed to bring down 5 systems since Monday

Windows is scary.

A DDOS will bring down anything.

Well i wasn?t saying that Windows is completely secure,by the other hand you say that only 5 systems has been compromised

Of how many?

In other instance the unknown is more scary,since OSX is unknown to security threats from the hacking and cracking community.Simply OSX isn?t designed for this payload.

Do you know why many hackers give propaganda to install linux or other non operating system?

Answer: Beacuse they know more possible vulnerabilites than Windows

You can take that for granted si:):)

If you could follow Bill gates around with a roll of toilet tissue you would huh?

agreed, but was meaning along the lines of they would have to be doing something other then just a DDOS to bypass the router/Gateway and hit the machine in question.

wouldnt a DDOS would bring the whole network down, not just an individual machine not touching the others ( when they said it brought down 5 systems since monday ) may be reading into his post to much though

Probably, so that would mean routers are scary, not Windows. :)
If you could follow Bill gates around with a roll of toilet tissue you would huh?

Nahh Microsoft has comitted various mistakes in my opinion

The only difference between you and me,is that i?m based on facts,given here in neowin in other threads.Obviously i prefer Windows because the broader range of applications that can be installed,this security topic is a plus given for my criteria.

If you want to talk about Microsoft and Apple zealots,who do you think has more ego,and kneels more in front of their desired system?

you asnwre is the Mac zealots,hated for that sole reason.

If you want to talk about Microsoft and Apple zealots,who do you think has more ego,and kneels more in front of their desired system?

you asnwre is the Mac zealots,hated for that sole reason.

id have to disagree and say Linux Zealots, lol, with Mac close behind, but Mac VS Windows, yea Mac

My sister wanted to get a Mac because she said she heard they were a hell of a lot more secure than windows. I set her straight...

What people do not realize is that Macs are not more secure that Windows. In fact, they can quit possibly be less secure. This article is proof of that. 2 minutes and the Mac was hacked. Hahaha...that is pathetic. And for all you Mac fanboys and people looking for flame bait, I said it is possible Macs can be less secure...not that they are.

People are getting in to a false sense of security with the Macs. Saying they dont need antivirus is a BIG mistake as there are viruses for Macs as well.

And it is all about the Market as well. If Macs control the majority of the market, they will be nailed left and right like a $2 hooker. Its that simple and its common sense. If Macs start to control more and more of the market, you can bet you will see them getting hacked.

*Edit* mistook the yellow Network cable as the older PPC Power cable

Here's a picture of Charlie (in the foreground) exploiting the MacBook Air from his own laptop, while Aaron from TippingPoint verifies the pwnage in real time.

charlie_miller.jpg

http://dvlabs.tippingpoint.com/blog/2008/0...er-with-picture

Edited by Hell-In-A-Handbasket
Macs are not more secure that Windows. In fact, they can quit possibly be less secure.

Wrong. Currently they are a lot more secure because there just aren't nowhere near as much real security threats circulating for Mac. Infact the number of those is close to ZERO.

Saying they dont need antivirus is a BIG mistake as there are viruses for Macs as well.

Have they ever spread very far or were able to do anything harmful?

And it is all about the Market as well. If Macs control the majority of the market, they will be nailed left and right like a $2 hooker. Its that simple and its common sense.

So if Vista will reach the marketshare XP has (won't happen :woot: ) it will be as unsecure as XP?

so those security updates on my Software Update are just bandwidth filler, i want my bandwidth back.

Wrong. Currently they are a lot more secure because there just aren't nowhere near as much real security threats circulating for Mac. Infact the number of those is close to ZERO.

I love my Mac dont get me wrong, but to say there are close to 0 threats is not true, there are threats, just notobody willing enough to put the effort to target a small user base,, heck this dude did it cause he wanted a new Macbook+10 Grand

because somewhere it said he did the iPhone jailbreak, he might have used the same exploit as iPhone/iPod ( im assuming the jailbreak is done by injecting code in the Safari TIFF exploit, last jailbreak i did was 1.1.1 iPod touch, but i had to Tiff crack it, then SSH the installer into it. dont know how its done now

Right :rolleyes: and Vista and UAC is bulletproof too.

UAC is bulletproof in the sense that it attempts to absolve Microsoft of any liability by giving them the out that THEY ASKED YOU if you wanted your computer hacked and you said yes, I think that is the only real function of UAC.

But yeah, Mac security sucks because Apple has never proactively tested it, they have no idea how, MS has been doing this for years out of necessity.

It was social engineering however so the cracking contest doesn't really count - this is no different than me putting up an iFrame vulnerability that exists in IE6/IE7 even today.

Anyone using MSN yesterday should be very aware how easy it's to blow up your IE because I kept getting messages from people asking me to click a certain link that opened an iframe and affects all IE6 and IE7 (Also Vista, because most of the people on the list who sent me the message were Vista users).

So you say you know a way to exploit a vulnerability in IE7 in such a way that UAC stops working and IE7 isn't in protected mode anymore? show me...

Now that's going to be fun to watch.

You see, one exploit in Safari has its good points. It provides discussion and fixes. Maybe not here on Neowin where this thread seems to have taken a turn towards the usual 'mine's bigger than yours' philosophy but good will come of this exploit and Mac users and probably any other OS user that uses Safari will benefit.

This is not a game of this is better than that, but one where every OS wins and long may these sort of competitions and events run. They will make our enjoyment of any OS and the internet a better experience in the long run.

would this work Buffer Overflow via Web Page lists FreeBSD as probably vunerable, because its via Nvidia Grafix driver, i dont think the Filesystem would make a diffrence as with the injected code you could have the OS do anything

there is also a proof of concept included

took me a 10 second search in google

*Edit* unknown if it will as its dated Oct 06, should have been fixed by now i would think

FreeBSD 8, ZFS. You have one day. :laugh:
Edited by Hell-In-A-Handbasket
This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Posts

    • I can't believe Starmer is still there...his party lost so big. He's a stubborn coot, but this is largely unenforceable, so I would imagine he'll be resigning soon. A key here is for parents to buy their kids phones sans Internet access--and set up the Internet at home, where mom and day can, you know, act like parents instead expecting the government to raise their kids.
    • EA launches in-game advertising platform for brands to "connect with audiences" by Pulasthi Ariyasinghe The gaming giant Electronic Arts is exploring more ways to inject real-life brands into its games. Announced today as EA Advertising, the new platform is attempting to make it easier for brands to reach out for deals with the company and put their products inside titles like EA Sports FC, Madden, NHL, Skate, or The Sims. EA revealed that its EA Sports side of the company brings in "hundreds of millions of players across console, PC, and mobile" every year. Fan engagement of these titles was also touted as being "extraordinary," with 23,000 NFL seasons worth of games being played in Madden NFL daily, while EA Sports FC sees over a billion matches a day. “Players come to EA’s games and live experiences every day to play, watch, create and connect,” said David Tinson, Chief Experiences Officer at Electronic Arts. “That gives brands a meaningful opportunity to show up in ways that add value and respect the player experience, while maintaining authenticity in the worlds our teams are building. With EA Advertising, we’re helping brands become part of those moments in ways that are relevant and built for players.” Using the new program EA Advertising, brands will be able to inject their products into games in real-time via dynamic placement. EA says partners will have access to everything from stadium signage in sports games and targeted adverts to in-game content custom-made for the brands. These are described as additions designed to "enhance, not disrupt" experiences. "In these interactive gameplay environments, brands become part of the game itself, reflecting how players engage with advertising in real-world contexts," adds the company "Brands can activate across live environments, tailoring placements to meet campaign objectives, and update campaigns with ongoing optimization informed by aggregated engagement insights." Current real-world brand partnerships EA has built into its games include Visa (EA Sports FC and College Football), Lowe's (EA Sports FC, Madden NFL, and College Football), Red Bull (EA SPORTS FC), Xfinity and Peacock (EA SPORTS FC), and Mountain Dew’s (College Football).
    • Will be surprised if there isn't a new ver of youtube just for labelled educational content
    • UK to ban under-16s from social media following a six-week trial with teenagers by Paul Hill Credit: Pexels A few months ago, Neowin reported that the UK was trialing a social media ban with 300 teenagers for six weeks, that testing has come to an end, and Prime Minister Keir Starmer has announced that the country will ban under-16s from social media. Starmer said that this technology is making children unhappy and making it easier for bullies to harass and abuse them. He continued to talk about the addictive nature of social media, saying that it uses an infinite scroll designed to lock users in for hours. He said this interferes with children doing their homework, reading, playing with friends outside, and going to bed on time. Tackling the idea that nothing can be done about social media, Starmer said: The government’s action won’t stop at social media either, the PM said. It plans to take action on gaming services and livestreaming platforms. Right now, he said, strangers can contact any child unchecked. He said this wouldn’t happen in real life, and the government is going to stop it from happening online, too. The Labour government has overseen the introduction of the Online Safety Act, a big change to the internet which includes age verification on adult websites. This has led to a fair bit of backlash, but overall, the government is pushing ahead with these changes.
    • Still using Hexchat every day but i would not consider it Retro 😛
  • Recent Achievements

    • Week One Done
      Jeroen Wilms earned a badge
      Week One Done
    • Week One Done
      rolfus earned a badge
      Week One Done
    • One Month Later
      Leroy Jethro Gibbs earned a badge
      One Month Later
    • Conversation Starter
      flexorcist earned a badge
      Conversation Starter
    • One Month Later
      AndreaB earned a badge
      One Month Later
  • Popular Contributors

    1. 1
      +primortal
      511
    2. 2
      +Edouard
      200
    3. 3
      PsYcHoKiLLa
      136
    4. 4
      ATLien_0
      89
    5. 5
      Steven P.
      83
  • Tell a friend

    Love Neowin? Tell a friend!