Posted on 06/01/2015 10:20:46 AM PDT by Swordmaker
A zero-day software vulnerability in the firmware of older Apple computers could be used to slip hard-to-remove malware onto a computer, according to a security researcher. Pedro Vilaca, who studies Mac security, wrote on his blog that the flaw he found builds on previous ones but this one could be far more dangerous. Apple officials could not be immediately reached for comment. Vilaca found it was possible to tamper with an Apple computer's UEFI (unified extensible firmware interface). UEFI is firmware designed to improve upon BIOS, which is low-level code that bridges a computer's hardware and operating system at startup. The UEFI code is typically sealed off from users.
But Vilaca wrote that he found the code is unlocked after a computer goes to sleep and reawakens, allowing it to be modified. Apple computers made before mid-2014 appear to be vulnerable. Vilaca wrote it is then possible to install a rootkit, a type of malware that is hard to remove and nearly undetectable by security products. The only defense is to not let the computer sleep and always shut it down, Vilaca wrote. t EFI firmware available.
Newer machines, however, were not vulnerable, which Vilaca wrote led him to suspect that Apple fixed the problem in later models but didn't patch older computers. It appears that Vilaca did not notify Apple before disclosing the bug, something that causes many technology companies to bristle. Most companies advocate that independent researchers notify them before going public so attackers cannot take advantage of software problems before a patch is ready. Vilaca wrote, however, that he has no beef with Apple. "My goal is to make OS X better and more secure," he wrote. Vilaca isn't the only researcher looking closely at Apple's firmware.
(Excerpt) Read more at computerworld.com ...
Sounds like a feature to me...
If you want on or off the Mac Ping List, Freepmail me.
I challenge the members of the Apple ping list to each donate at least $10 each to the latest Freepathon. I HAVE donated $100. Many members of the Apple Ping list are already rising to the challenge. Join them. Let's show the power of the Apple Ping list in supporting Freerepublic!
MacBooks last a long time, and even used ones are not cheap.
I’m still using an old G4 eMac (which an OS reinstall helped speed up — thanx Swordy!)
the 2009 mac pro can be upgraded with the 2010 firmware, and then the CPUs can be replaced with dual 6 core x5690 (for 12 cores at 3.46ghz, 24 threads) that have a geek bench score of 30,000 which is virtually equal to the power of the maxed out top of the line current model MacPro (aka: trash can). And you can use regular PCI-e video cards that outperform the built in cards of the new version.
So yes, people use old macs, not just because it saves money, (saves around $5000 between an upgraded 2009 and an equivalent new one) Macs hold their value far better and longer then PCs.
I already am. Windows NT 10.x is at build 10130—it goes gold on 29 July.
(Unlimited Internet plan F/T/W: The DVDs are ~3GB, updated every 8.2 days, and may accelerate as the release date gets closer)
So far, it’s quite good. Anyone using Windows 7 presently will not feel too far out of place in Windows 10.
I'll give it a few months for the bugs to get worked out, then upgrade. Sounds like the upgrade is free, so the price is right.
My current MacBook Pro (typing this response on it) is “Mid-2010”. Works great! Running Yosemite (actually - I’m in the pre-release program - so running “bleeding-edge” OS).
One of our other household computers still used regularly is a Dual G5 PowerMac... I bought it used not long before the PowerPC was dumped for Intel Inside... Other than a rapidly disappearing pool of current software, it still runs great - and is surprisingly nimble.
How will Apple address this (or WILL they?). This will definitely be another test case for Apple vs Consumers. I fear this will be another excuse used to just cut off ongoing support (including in the OS) for anything more than 3 years old?
Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.