Re:OS X Lion’s Internet Recovery tool is one more nail in th...
by sp332 on Thursday July 21, 2011 @09:10AM
(#2789331)
"Recovery partition" is misleading. This feature works even with a fresh hard disk. I assume it's some kind of netboot built into the EFI bios, but I'm just wondering how long it will be before someone hacks it to load other software, or even hijack it for malware.
"newly-released Mac starting with the Mac mini and MacBook Air."
The low-level "Internet Recovery" is custom firmware. And the malware could happen, but it would be like chopping off somebody's head, then re-growing the brainstem into a hijacked mind. Unlikely.
It's much, much easier to hijack an existing install, than to exploit the install, corrupt the hard drive, force a complete re-install of a custom OS built with a malware kernel from somebody else's servers.
Re:OS X Lion’s Internet Recovery tool is one more nail in th...
by forgotusername on Thursday July 21, 2011 @12:09PM
(#2790064)
I think you're overestimating how hard this is, modulo how they implement firmware updates.
EFI is an almost completely open spec, and it's easy to write code that runs within the EFI environment. Combine that with something like the approach taken in Stoned Bootkit and you have a viable option for persisting malware across reinstalls.
In traditional PCs, BIOS reflash does not require any special signing key, or suchlike, and its trivial in a very small amount of code to splice an option ROM (code that executes automatically during power-on) into the BIOS of the running machine, and reflash it (slightly harder to do reliably). As far as I know current generation Macbooks don't perform any kind of signature check either.
Unlike with traditional PCs, Apple has a relatively small number of hardware revisions, making this kind of attack even easier to implement.
Re:OS X Lion’s Internet Recovery tool is one more nail in th...
by LordBodak on Thursday July 21, 2011 @09:34AM
(#2789402)
This works great until 10 years down the road you pick up an old Mac at a thrift store and discover that the internet recovery for Lion has been ended and the newer OS's aren't supported by the hardware.
Re:OS X Lion’s Internet Recovery tool is one more nail in th...
by gst on Thursday July 21, 2011 @06:41AM
(#2789043)
The time when I bought a computer with a CD or DVD drive was more than 10 years ago. During the last years I've mostly used X-Series Thinkpads.
Most Linux distributions have been installable via USB stick or Internet for a long time now and the only time when I was missing the drive so far were the scientific conferences where the proceedings were distributed on a CD.
Good to see that also mainstream operating systems don't require this antique method of data transfer anymore.
Re:OS X Lion’s Internet Recovery tool is one more nail in th...
by daimyoyo on Thursday July 21, 2011 @01:59PM
(#2790509)
Does this mean you'd have to reload the entire 4GB file? Because given the quality of my home internet connection, that's about a 20 hour download. That's the reason I'm waiting for the USB drive. As an aside, I wonder if Apple has any plans to release a special Thunderbolt drive for Lion? I'd happily pay extra for that option.
Re:OS X Lion’s Internet Recovery tool is one more nail in th...
by ams6110 on Thursday July 21, 2011 @10:22AM
(#2789583)
I for one wish they had never been invented. The WORST consumer data storage medium ever was the CD/DVD. It had capacity, but was ridiculously fragile for a consumer product.
Re:OS X Lion’s Internet Recovery tool is one more nail in th...
by mentat on Thursday July 21, 2011 @12:52PM
(#2790221)
Surely you're not serious? The innovation that CDs and DVDs made possible is mind boggling. Digital music, video, gaming, none of these were possible with the existant storage densities and prices. They're clearly not the final solution to data storage but they bridged an important gap in bootstrapping widespread computer usage.
Re:OS X Lion’s Internet Recovery tool is one more nail in th...
by pbhjpbhj on Thursday July 21, 2011 @11:55AM
(#2790003)
Personally I've never damaged a disc. I've a few that have the foil flaked off (they're about 10 years old but have been kept out of sunlight and were brand name ones too).
However a certain child damaged one of my GameCube Zelda discs recently ... scratched to hell in 15s. It's not like I can run cdparanoia on it either ...
Re:OS X Lion’s Internet Recovery tool is one more nail in th...
by quanticle on Thursday July 21, 2011 @10:17AM
(#2789567)
As stated elsewhere, its not a hard drive partition. The download software is built into the EFI firmware, so it'll work even with a completely blank hard drive.
Re:OS X Lion’s Internet Recovery tool is one more nail in th...
by franze on Thursday July 21, 2011 @06:23AM
(#2789018)
DVD’s coffin? well, there never was a coffin, the DVD is long dead and rotted into nothingness a long time ago. but there never was a coffin, it just died by the wayside and nobody to bothered.
"newly-released Mac starting with the Mac mini and MacBook Air."
The low-level "Internet Recovery" is custom firmware. And the malware could happen, but it would be like chopping off somebody's head, then re-growing the brainstem into a hijacked mind. Unlikely.
It's much, much easier to hijack an existing install, than to exploit the install, corrupt the hard drive, force a complete re-install of a custom OS built with a malware kernel from somebody else's servers.
EFI is an almost completely open spec, and it's easy to write code that runs within the EFI environment. Combine that with something like the approach taken in Stoned Bootkit and you have a viable option for persisting malware across reinstalls.
In traditional PCs, BIOS reflash does not require any special signing key, or suchlike, and its trivial in a very small amount of code to splice an option ROM (code that executes automatically during power-on) into the BIOS of the running machine, and reflash it (slightly harder to do reliably). As far as I know current generation Macbooks don't perform any kind of signature check either.
Unlike with traditional PCs, Apple has a relatively small number of hardware revisions, making this kind of attack even easier to implement.
Most Linux distributions have been installable via USB stick or Internet for a long time now and the only time when I was missing the drive so far were the scientific conferences where the proceedings were distributed on a CD.
Good to see that also mainstream operating systems don't require this antique method of data transfer anymore.
However a certain child damaged one of my GameCube Zelda discs recently ... scratched to hell in 15s. It's not like I can run cdparanoia on it either ...