Security → Mac OS X rootpipe patch

cross posted

»www.forbes.com/sites/tho ··· ootpipe/

I really get sick of hearing of these types of exploits and whether they are fixed or not; be it any operating system.
There are so many exploits out there that are only as good as the network perimeter.
Once inside they are worse than a 20 year old worm, infecting everything on the junction.

This is about more than the O/S owners; it's about the ramifications of the exploit.

I hear so many times about routers being a good block but once exploits are out there it means zip...

--
The only thing necessary for the triumph of evil is for good men to do nothing - Edmund Burke

Right on target ...... to many IGNORANCE or NAIVE people out there {{{ GRIN }}} !

Rootpipe backdoor still not patched -

»www.theregister.co.uk/20 ··· ackdoor/

How to fix rootpipe in Mavericks and call Apple’s bullshit bluff about rootpipe fixes

said by »reverse.put.as/2015/04/1 ··· e-fixes/ :

---

There is malware from 2014 that was already exploiting this vulnerability. Found by noar, the following sample contains the exploit code for both Mavericks and older versions. It uses the exploit to activate the Accessibility API. See, we don't even need to wait for new malware, it was already being exploited in the wild. The malware sample is described by FireEye, but they totally miss the zero day there. They just lightly describe the result but not the technique.

---