On Sun, 09 Mar 2008 04:40:32 +0000, Roy Schestowitz wrote:
> Windows Hacked in Seconds via Firewire
>
> ,----[ Quote ]
>| "Yes, it's a feature, not a bug," Boileau stated. "Microsoft knows this. The
>| OHCI-1394 spec knows this. People with Firewire ports generally don't."
>|
>| Microsoft was not immediately available for comment. In the past the company
>| has downplayed security problems that require physical access.
> `----
>
> http://www.pcworld.com/article/id,143236-c,hackers/article.html
>
> Later on, Microsoft raves about how comparatively insecure Windows' rivals are.
> The company lost the ability to feel ashamed of itself or to feel responsible
> for its 'customer's' security.
Strange that you seemed to miss this:
"Researcher Maximillian Dornseif demonstrated a similar exploit on Linux
and Mac OS X systems at the CanSec conference in 2005, connecting to those
systems via a malicious iPod and Firewire."
The problem is inherent in the firewire chip itself, and there's nothing
the OS can do about it except disable firewire.
So please don't pretend this is a flaw in Windows, or that it is Microsoft
"hiding" a flaw. If that's the case, so are Linux companies and Apple.
|
|
