News for hackers. Stuff that matters.

A comment on CVE-2024-54471: Leaking Passwords (and More!) on macOS. Parent comment

Re:CVE-2024-54471: Leaking Passwords (and More!) on macOS by TylerE on Thursday March 20, 2025 @03:39PM (#43427923)
I mean, you should really just assume that physical access = owned.
[ Parent | on HN ]
Re:CVE-2024-54471: Leaking Passwords (and More!) on macOS by nmgycombinator on Thursday March 20, 2025 @03:51PM (#43428063)
> grep any user's FileVault password from the page file

I'm not sure if this necessitates physical access.

[ Parent | on HN ]
Re:CVE-2024-54471: Leaking Passwords (and More!) on macOS by gruez on Thursday March 20, 2025 @04:38PM (#43428652)
A filevault password is useless unless you have root/physical access. If it's mounted by the system, then filesystem ACLs will still be in effect. Otherwise you need root to read raw block devices.
[ Parent | on HN ]