Technology news and Jobs arrow Information Technology News arrow Mac OS X easy to crack, says researcher
Mac OS X easy to crack, says researcher E-mail
by Stephen Withers   
Friday, 13 March 2009
A well-regarded security consultant has shown just how easy it can be to take illicit control of Mac OS X.

Security consultant Dino Dai Zovi has given a demonstration to the SOURCE security, business and technology conference in Boston in which he broke into a Mac and took photos with its iSight camera.

Dai Zovi explained that Mac OS X's heap memory is poorly protected, and that it is relatively easy to find the location of various libraries.

Various flaws have been found in applications and system components that allow the contents of heap memory to be modified. It is practically certain that not all of these flaws have been fixed, and that there are more waiting to be found.

For example, if a routine doesn't check the length of a string properly, it can be written to an area of memory that's too short to hold it, resulting in other values being overwritten.

If an attacker can cause the contents of that string to include values that correspond to a useful set of machine code instructions and have that deposited at a location that will be executed, it is possible to gain control of the system.

Dai Zovi said that as few as 12 bytes of code are needed for this purpose.

What's the future for Mac OS X security? Please read on.



 
< Next story in category   Previous story in the category >
iTWire user statistics Visitors last 30 days
694,279
Subscribers 15,210
#1 independent technology news advertise here
  •   *  
  • Search
  • AdvSeach
  • Login
  • Events
  • FreeStuff

- Advertisement -

Featured Whitepapers

Follow iTWire on Twitter

About iTWire

iTWire is all about technology news, information, jobs and community for the IT and telecommunications industry professional. Subscribe to our free ICT daily newsletter