More of my sites

WinInfo Daily News
SuperSite for Windows
Windows IT Pro Magazine
Connected Home
Thurrott Dot Com
Windows Weekly at TWIT

About this site

For six years, the Internet Nexus served as my technology blog, but I've since started blogging at the SuperSite Blog instead. If you're looking for the blog, please head there. --Paul

Thursday, July 08, 2004

New Mac OS X security vulnerability found

According to NTBugTraq, there's a new OS X security vulnerability in the wild, and Apple is thus far ignoring it. "Obviously this is only of interest if an attacker has root (or physical) access to a machine, however it does make FileVault or Keychain encryption fairly useless. It appears that the swapfiles are removed on shutdown or startup, though not wiped - pulling the power from a sleeping machine, and/or booting from CD, would quite easily retrieve the password(s). Reported to Apple on 21 June, I haven't had any response. It'd be nice if they at least said 'we're taking a look if it's an issue'."

[ Posted at 12:12 PM | Permalink ]