SecurityFocus

Re: Hijacking a Macbook in 60 Seconds or Less Aug 10 2006 11:50AM
Radoslav Dejanoviæ (radoslav dejanovic opsus hr) (1 replies)

Re: Hijacking a Macbook in 60 Seconds or Less Aug 10 2006 03:11PM
Howard Oakley (h oakley btconnect com) (4 replies)

Re: Hijacking a Macbook in 60 Seconds or Less Aug 11 2006 12:23PM
Radoslav Dejanoviæ (radoslav dejanovic opsus hr) (1 replies)

Re: Hijacking a Macbook in 60 Seconds or Less Aug 11 2006 03:22PM
Roy Atkinson (roy atkinson jax org) (2 replies)

Re: Hijacking a Macbook in 60 Seconds or Less Aug 11 2006 06:51PM
Chris Pepper (pepper reppep com) (1 replies)

RE: Hijacking a Macbook in 60 Seconds or Less Aug 11 2006 08:10PM
Todd Woodward (todd_woodward symantec com) (1 replies)

Re: Hijacking a Macbook in 60 Seconds or Less Aug 11 2006 09:31PM
Sam Pierson (samuel pierson gmail com) (2 replies)

Re: Hijacking a Macbook in 60 Seconds or Less Aug 11 2006 10:05PM
Howard Oakley (h oakley btconnect com)

On 11/8/06 22:31, Sam Pierson wrote:

> I wouldn't trust any source claiming to mitigate this threat without
> knowing that they've tested it against the original proof of
> concept... everything else is just theoretical.

Bombproof avoidance of threat: remove all wireless networking hardware,
which also gets around the biggest element that we discussed earlier, the
human.

Close second (if you can trust the human!): as per several security docs for
Macs (including Apple's, recently cited here), disable wireless networking
altogether in the Network pane of System Preferences. This also has the
advantage of being much less prone to error than the MacFixit
recommendation.

And whilst I am about it...
On 11/8/06 21:33, Roy Atkinson wrote:

> The ultimate truth is that _any_ network is vulnerable with applied
> effort.

Sure, but vulnerability is not a binary/binomial property, unlike ultimate
truth!

Howard.

Dr Howard Oakley
The Works columnist for MacUser magazine (UK)
http://www.macuser.co.uk/
http://www.howardoakley.com/

[ reply ]

RE: Hijacking a Macbook in 60 Seconds or Less Aug 11 2006 09:50PM
Todd Woodward (todd_woodward symantec com) (1 replies)

Re: Hijacking a Macbook in 60 Seconds or Less Aug 12 2006 09:12PM
Bill Weiss houdini+focus-apple (at) clanspum (dot) net [email concealed] (houdini+focus-apple clanspum net) (1 replies)

Re: Hijacking a Macbook in 60 Seconds or Less Aug 14 2006 07:04AM
fwa266m mac com (1 replies)

Re: Hijacking a Macbook in 60 Seconds or Less Aug 14 2006 01:36PM
David Maynor (dmaynor gmail com) (1 replies)

Re: Hijacking a Macbook in 60 Seconds or Less Aug 14 2006 01:59PM
Massimo Marino (fwa266m mac com) (1 replies)

Re: Hijacking a Macbook in 60 Seconds or Less Aug 14 2006 03:08PM
David Maynor (dmaynor gmail com) (1 replies)

Re: Hijacking a Macbook in 60 Seconds or Less Aug 15 2006 08:51AM
Nicolas RUFF (nicolas ruff gmail com) (1 replies)

Re: Hijacking a Macbook in 60 Seconds or Less Aug 15 2006 01:01PM
David Maynor (dmaynor gmail com) (1 replies)

Re: Hijacking a Macbook in 60 Seconds or Less Aug 20 2006 07:21AM
Nicolas RUFF (nicolas ruff gmail com)

Re: Hijacking a Macbook in 60 Seconds or Less Aug 11 2006 05:36PM
Sam Pierson (samuel pierson gmail com)

Re: Hijacking a Macbook in 60 Seconds or Less Aug 10 2006 06:42PM
Paul Schmehl (pauls utdallas edu)

Re: Hijacking a Macbook in 60 Seconds or Less Aug 10 2006 05:38PM
Michael Edwards (medwards digital-legal com) (1 replies)

How to persuade someone to switch off wireless Aug 11 2006 12:11PM
Radoslav Dejanoviæ (radoslav dejanovic opsus hr)

Re: Hijacking a Macbook in 60 Seconds or Less Aug 10 2006 04:42PM
mfossi securityfocus com (1 replies)

Re: Hijacking a Macbook in 60 Seconds or Less Aug 10 2006 05:55PM
Howard Oakley (h oakley btconnect com)