29 ms·
Good hack, good on Apple for getting fixes out. But what worries me somewhat is that the tools for mitigation for these families of attacks include a lot of te
by KirinDave 10y ago
Good hack, good on Apple for getting fixes out.
But what worries me somewhat is that the tools for mitigation for these families of attacks include a lot of technologies that are traditionally opposed by the community here on the grounds that it "takes away control from the user.
I'm not sure how we balance out those tensions, but attacks like this sure as heck concern me about my homebuilt machine. I do my best not to keep any important keys there.
- artursapek 10y agoYou have a homebuilt mac? Like a hackintosh? If so, I'm pretty sure Apple doesn't owe you any kind of security assurances.
- djrogers 10y agoDMA attacks are potentially possible on more than just macs
- kennell 10y agoWhat encryption are you using? I was under the impression that FV2 (or any other full disk encryption solution) does not work on a Hackintosh
- renaudg 10y agoIt unfortunately doesn't work on the boot volume of a Hackintosh, but pretty sure it does on other volumes.
- RainCloud 10y agoActually, there have been recent development on this.[1] I'm not brave enough to try it though. [1] http://www.insanelymac.com/forum/topic/317290-filevault-2/ http://www.insanelymac.com/forum/topic/317290-filevault-2/
- kennell 10y agoSweet, thanks for the link, will give it a try after i got everything backed up :)
- KirinDave 10y agoWhy would FV2 protect me from DMA attacks on machines that are essentially self built off the shelf parts? Hint: it probably won't.