Hidden backdoor API to root privileges in Apple OS X

Re:Hidden backdoor API to root privileges in Apple OS X by nothrabannosir on Thursday April 09, 2015 @11:35AM (#9348284)

full disk encryption only protects you from passive snooping. If someone has physical access between two of your subsequent uses, no amount of any type of encryption will save you. Except maybe some entangled quantum bit collapsing mechanism. Maybe.

Think hardware keyloggers, fake MBRs, &c.

OP's trick won't work, but that's an "implementation detail;" there are plenty others that will.

EDIT: to clarify; that's not what you said, it's just a common enough misconception that it's worth being explicit about, here.

[ Parent | on HN ]

Re:Hidden backdoor API to root privileges in Apple OS X by KuchenKerze on Thursday April 09, 2015 @11:44AM (#9348350)

Of course keyloggers etc. are a problem. But that is a different story. A bug which can be exploited just by grabbing any device might have a larger impact on the vendors reputation. A keylogger, fake smc, whatsoever ist much more dangerous for a single person, because the attacker knows what he wants on the specific device.

[ Parent | on HN ]

Re:Hidden backdoor API to root privileges in Apple OS X by sneak on Friday April 10, 2015 @04:46AM (#9353135)

There's have to be a hardware mod if a firmware password is enabled. It prevents booting from any other media or partition without a password.

[ Parent | on HN ]