home bbs files messages ]

Just a sample of the Echomail archive

Cooperative anarchy at its finest, still active today. Darkrealms is the Zone 1 Hub.

   CYBER-DANGER      Internet security and threats      46 messages   

[   << oldest   |   < older   |   list   |   newer >   |   newest >>   ]

   Message 11 of 46   
   August Abolins to All   
   Apple battery malware   
   08 Aug 11 09:27:34   
   
   http://www.eweek.com/c/a/Mobile-and-Wireless/Apple-Laptop-Hack-D   
   sables-Batteries-Researcher-to-Show-How-at-Black-Hat-452759/   
      
   [...]   
   Miller examined MacBooks, MacBook Pros and MacBook Airs, and found that many   
   of the batteries on those units had a 4-byte default password hard-coded on   
   the microchips inside and a second password to give full access to the   
   hardware firmware. With the two default passwords in hand, the perpetrator   
   could rewrite the chips' firmware. Miller discovered the passwords after   
   analyzing a software update from 2009 from Apple that addressed an issue with   
   MacBook batteries. He was able to reverse-engineer the chip's firmware and   
   modify the power information it sent to the operating system. He was also able   
   to rewrite the firmware.   
      
   The ability to access and send instructions to the chip could be used by other   
   attackers for malicious purposes, such as preloading malware on to the chip,   
   according to Miller. Once the attacker figures out a way to go from the   
   battery to the operating system, battery-based malware could be used to infect   
   the computer and steal data, take control of the laptop or cause it to crash   
   whenever it was in operation, Miller said.   
      
   When faced with this kind of malware, IT administrators and users will wipe   
   the hard drive, reinstall software and reinstall the BIOS firmware, but not   
   think to check the battery's firmware, according to Miller. "Every time it   
   would reattack and screw you over," Miller said, noting the only way to   
   eradicate or detect it would be by removing the battery.   
      
   "These batteries just aren't designed with the idea that people will mess with   
   them," Miller said.   
   [...]   
      
   --- Thunderbird 2.0.0.24 (Windows/20100228)   
    * Origin: Fidonet Via Newsreader - http://www.easternstar.info (1:123/789)   

[   << oldest   |   < older   |   list   |   newer >   |   newest >>   ]


(c) 1994,  bbs@darkrealms.ca