4 ms·

As the article notes, OS X is only vulnerable to this issue when the machine is unlocked as DMA access via FireWire is disabled while it is locked. If your mach

by bdash 14y ago

As the article notes, OS X is only vulnerable to this issue when the machine is unlocked as DMA access via FireWire is disabled while it is locked. If your machine is left unattended and unlocked then anyone with the ability to plug in a FireWire device could already cause you grief.

ajross 14y ago
A user with physical access to an unlocked machine probably doesn't need DMA to cause you grief anyway. Obviously this is a security issue in some contexts, and some people need to take it seriously. But physical access remains one of the hardest barriers to overcome. Real world security for people who aren't spies really doesn't worry about stuff like this.
- stcredzero 14y ago
  > But physical access remains one of the hardest barriers to overcome. Basically it's the same problem as DRM that actually works.
- dsl 14y ago
  You'd be surprised. It's not just the James Bond types that are being attacked by foreign intelligence anymore. By some estimates industrial espionage against technology companies by China is second only to domestic security in terms of funding and manpower. Companies are issuing disposable laptops, iPads, and cell phones to employees traveling to Asia. Consider why that might be.
  - finnh 14y ago
    By some estimates industrial espionage against technology companies by China is second only to domestic security in terms of funding and manpower. What estimates? That sounds frankly incredible. Given that China's total population is far larger than the total population of engineers in the entire world, having the manpower devoted to industrial espionage being anywhere even close to that dedicated to domestic security would imply that there are more "chinese spies per engineer in the world" than there are "chinese police per chinese person". If I do, in fact, have my own personal Chinese spy, I'd like to say "hi" and "i'm sorry I didn't get much coding done today."
- mitchty 14y ago
  Yep, physical access in general means game over. If its unlocked they can just clock you over the head and take the laptop and copy things. No need for fancy devices.

by bdash 14y ago

ajross 14y ago

A user with physical access to an unlocked machine probably doesn't need DMA to cause you grief anyway. Obviously this is a security issue in some contexts, and some people need to take it seriously. But physical access remains one of the hardest barriers to overcome. Real world security for people who aren't spies really doesn't worry about stuff like this.

stcredzero 14y ago
> But physical access remains one of the hardest barriers to overcome. Basically it's the same problem as DRM that actually works.
dsl 14y ago
You'd be surprised. It's not just the James Bond types that are being attacked by foreign intelligence anymore. By some estimates industrial espionage against technology companies by China is second only to domestic security in terms of funding and manpower. Companies are issuing disposable laptops, iPads, and cell phones to employees traveling to Asia. Consider why that might be.
- finnh 14y ago
  By some estimates industrial espionage against technology companies by China is second only to domestic security in terms of funding and manpower. What estimates? That sounds frankly incredible. Given that China's total population is far larger than the total population of engineers in the entire world, having the manpower devoted to industrial espionage being anywhere even close to that dedicated to domestic security would imply that there are more "chinese spies per engineer in the world" than there are "chinese police per chinese person". If I do, in fact, have my own personal Chinese spy, I'd like to say "hi" and "i'm sorry I didn't get much coding done today."
mitchty 14y ago
Yep, physical access in general means game over. If its unlocked they can just clock you over the head and take the laptop and copy things. No need for fancy devices.