A little info about the “Hacked mac in 30 minutes” thingi that went out to press in 30 seconds. Read more about it here
The ZDnet article, and almost all of the coverage of it, failed to mention a very critical point: anyone who wished it was given a local account on the machine (which could be accessed via ssh). Yes, there are local privilege escalation vulnerabilities; likely some that are “unpublished”. But this machine was not hacked from the outside just by being on the Internet. It was hacked from within, by someone who was allowed to have a local account on the box. That is a huge distinction.
My mac is still a safe place. :)
0 Responses to “Mac hacked - Not!”
Leave a Reply