No one understands why Apple did this major security flaw – ITavisen.no

Make it possible to take complete control of a Mac.

Tuesday, 2 June 2015 – 6:18 p.m.

According to the renowned OS X security researcher Pedro Vilaca, every Mac is older than one year exposed a dangerous mistake.

Vilaca is the same man who warned that 1500 iOS apps were subjected to a serious security flaw.

Control from startup
flaw allows hackers to overwrite firmware boot up your computer, making it possible to take complete control over everything that happens on your computer.

Vilaca attack method involves attacking UEFI security right after a Mac takes restart after sleep mode.

The error should be corrected in Mac is launched in summer 2014 and later. Firmware update for older machines are currently not supported.

Strange Apple error
Normally, the safety mechanism christened ‘FLOCKDN “only give read access to the user’s apps, but for reasons that Vilaca not know, does not happen by sleep.

This allows applications rewrite the firmware and hackers install software that gives them control.

What makes this hack so much worse than last year’s “Thunder Strike» Hand-Hack is that the hacker does not need physical access to the machine, but can attack over the net.

Source:
ArsTechnica