Skip to Content

Gadling's resident pilot explains what life in the cockpit is like
AOL Tech

Posts with tag exploit

MacBook Air Hacked In Under Two Minutes

MacBook Air Hacked in Under Two Minutes

If there's one thing Apple users love to taunt Windows users about, it's security. Mac owners giddily flaunt their lack of virus scanners and lack of worries in front of their PC comrades, whose machines look comparatively bloated with virus scanners, firewalls, and daily patch updates to fix the exploit du jour. Bad news for those Mac users, then, as a recent hacking competition showed that the new MacBook Air is able to be completely compromised in under two minutes.

The hacker in question, Charlie Miller, achieved this feat as part of a hacking competition called PWN 2 OWN. Miller hosted a malicious Web page privately, accessed it from the MacBook Air, and then, within two minutes, was able to take full control of the machine remotely and make it do his bidding.The culprit here is apparently an undiscovered flaw in the Mac Web browser Safari, which has shown to be somewhat lacking in the security department on both the iPhone and on Windows.

Charlie won $10,000 for his troubles, and he got to keep the laptop, but as part of the deal, he was also required to keep secret about the details of exploit, so hopefully there's little chance of it getting into the wild and taking over Macs around the world.

Still, we'd recommend steering clear of Safari -- and perhaps not being so smug.

From Engadget

Related Links:

Security Flaw Affects Sony MicroVault Drives

Security Flaw Affects Sony MicroVault DrivesIf you use one of those Sony MicroVault USB drives with a built-in fingerprint reader, the extra security measures you're taking to protect your files may be doing more harm than good -- this according to Sony itself.

A security flaw, which affects three models of the company's MicroVault USB sticks, has been discovered that works by allowing hackers to bury malicious code and files in the hidden directory created by the fingerprint-reading software, which then makes them invisible to many virus scanning and security programs.

Though a third-party company developed the software that runs on the sticks, Sony has had problems with bad security software in the past – most notably in 2005 when it hid anti-piracy software on its music CDs that opened up the computers of more than a million users to attacks from hackers.

What can you do? Obviously, don't buy this product. Despite a recall, some of the tainted MicroVaults can still be found on the sites of many online retailers. If you already own one, hold off on using it until mid-September when Sony says it will release a downloadable fix, which we expect will show up on the official MicroVault support site.

From BBC

Related Links:


    AOL Tech Network



    Latest Reviews from CNET.com

    CNET provides the latest tech news, unbiased reviews, videos, podcasts, software, and downloads, making tech products easy to find, understand and use.

    Top Product Reviews

    AOL News

    Other Weblogs Inc. Network blogs you might be interested in: