News for hackers. Stuff that matters.

A comment on iOS Privacy: Easily get a user's Apple ID password, just by asking. Parent comment

Re:iOS Privacy: Easily get a user's Apple ID password, just ... by jaclaz on Tuesday October 10, 2017 @10:50AM (#15442243)
>Something like "ctrl-alt-delete" for Windows (I'm not sure if it's un-catchable, but you got an idea) or even better some unused key like pause/break.

I think that even that is catchable (if needed), at least on old Windows XP Embedded, if you used minlogon (which happened very often) you lost ctrl+alt+del access to Task Manager, but there was a third-party service to restore the "hook":

http://www.mp3car.com/forum/mp3car-technical-software/softwa...

[ Parent | on HN ]
Re:iOS Privacy: Easily get a user's Apple ID password, just ... by gruez on Tuesday October 10, 2017 @01:50PM (#15443827)
but does it suppress the real thing? otherwise the user is going to see the (real) windows security dialog, followed by your fake one after they exited the real one.
[ Parent | on HN ]
Re:iOS Privacy: Easily get a user's Apple ID password, just ... by jaclaz on Wednesday October 11, 2017 @05:51AM (#15448487)
Really cannot remember how the mentioned little program worked with the "real" Winlogon, i.e. if it managed to hook "before" it the key sequence.

Anyway there are other ways, here is one:

http://www.oblita.com/interception.html

about midpage there is a sample to "intercept and block" the sequence.

[ Parent | on HN ]
Re:iOS Privacy: Easily get a user's Apple ID password, just ... by gruez on Wednesday October 11, 2017 @02:12PM (#15451865)
but that requires a kernel mode component, and if you have kernel access all bets are off. for instance, you can directly patch out the login screen (which is in userspace) to steal the password for you.
[ Parent | on HN ]
Re:iOS Privacy: Easily get a user's Apple ID password, just ... by jaclaz on Wednesday October 11, 2017 @03:10PM (#15452451)
Sure, but I bet that some clever folks may well "disguise" such a kernel component into (say) an update or a new install in such a way that the user is tricked as well to allow it.

No idea anyway (since the topic is on iOS) how that OS would behave and what could be the equivalent of a Ctrl+Alt+Del key sequence on a keyboardless device such as a iPhone or iPad.

[ Parent | on HN ]
Re:iOS Privacy: Easily get a user's Apple ID password, just ... by a_t48 on Wednesday October 11, 2017 @05:58PM (#15453883)
If you've got a kernel level hack already, just use a keylogger.
[ Parent | on HN ]