« Speech wreckognition? | Main | Telstra pulls the plug on FTTN »

August 04, 2006

More security "beat-ups"

We know we're going to infuriate a couple of readers who are convinced that there's nothing much to worry about with online financial transactions, and accuse us of trying to sensationalise the issue - you can follow the comments here - but over at Black Hat, there's been a succession of things that we silly old worry warts find less than comforting.

First they busted into an Apple MacBook with absurd ease (on video here) ... Apple owners might not be so complacent as a result of that.

Then they revealed the sort of mayhem hackers can achieve, using Javascript to get around hardware and software firewalls.

And Intel has just come out with some patches for some wi-fi security holes in Centrino chips.

Maybe these things aren't happening. Mayvbe we're just making these things up. Maybe we should all just ignore the growing potential for a systemic calamity.

Posted by cw at August 4, 2006 01:55 PM

Trackback Pings

TrackBack URL for this entry:
http://bleedingedge.com.au/cgi-bin/mt/mt-tb.cgi/993

Comments

I think a system wide calamity hasn't happened because nobody (with the right skills) has had the time / or couldn't be bothered to cause one....

Posted by: Sumit G [TypeKey Profile Page] at August 4, 2006 07:14 PM

Read your article and immediately dowloaded NO-SCRIPT for Firefox. Thanks.

Posted by: Tony at August 4, 2006 09:28 PM

Before all you PC weenies get excited, The Macbook Pro was 'busted into' using a thrid party wireless card.

More can be read at this site:

Regarding Brian Krebs’s Reporting on the Supposed MacBook Wi-Fi Exploit.

Posted by: Scott at August 5, 2006 10:59 AM

But, Scott, they claim that the stock release MacBook is equally vulnerable. As this story suggests, there's no need for immediate alarm, because device driver flaws are rare.

But the prudent user of Windows/Mac/Linux should not under-estimate the potential for attack. What is they say about the price of liberty being eternal vigilance?

Posted by: cw [TypeKey Profile Page] at August 5, 2006 12:21 PM

I whole heatedly agree with you Charles in respect to being vigilant, no matter what operating system you are running. And to that point I am prudent as should be your readers.

However, the article you linked is nothing but mischievous because the author implies a Macbook can be hacked. The author is merely attempting to gain a name for himself.

As a journalist I'm sure you check each article you read and/or link to for it's validity.

This article, "Don't take your guns to town", debunks the article you linked to and summarises:

...I don't think this is news, or newsworthy. Its "spin", and nothing more. As a none-too-subtle point, you're very very likely "safe" from this attack if your Mac only uses its Airport card, and you've located no other 802.11 cards in your Mac.

To that point, I believe native Apple hardware and software remains safe unless third party hardware is used. As you suggest though, you can never be too complacent.

Posted by: Scott at August 6, 2006 01:42 AM

anyone who is stupid enough to put 3rd party software in a mac deserves whats coming...
i'm not saying macs are uncrackable, but left as they are built they are safer and how many people 3rd party hardware in anyway?!

Posted by: beeso at August 8, 2006 05:20 PM