News for hackers. Stuff that matters.

A comment on Hidden backdoor API to root privileges in Apple OS X. Parent comment

Re:Hidden backdoor API to root privileges in Apple OS X by taumhn on Thursday April 09, 2015 @11:27AM (#9348205)
If you're paranoid enough to think someone you don't trust can have physical access to your Mac, it is possible to prevent this by setting up firmware password though.

See https://support.apple.com/en-us/HT204455

[ Parent | on HN ]
Re:Hidden backdoor API to root privileges in Apple OS X by thudson on Thursday April 09, 2015 @12:01PM (#9348493)
Firmware passwords can be bypassed by a local user with a Thunderbolt Option ROM. The 10.10.2 fix for Thunderstrike left that hole open during normal boots: https://trmm.net/Thunderstrike_FAQ#Is_Thunderstrike_fixed_in...
[ Parent | on HN ]