« Scare-Spammer Rapleaf Finds Kindred Spirit In New Partner | Main | Amidst Dubious Claims, Push to Extend Surevillance Is On »
September 18, 2007
David Maynor Releases the "Howto" of Last Year's Apple Wi-Fi Kerfuffle
Remember the great Macbook Wi-Fi 'Sploit Kerfuffle? And how it drove all the Mac, er, "colleagues" appears to be the preferred term, nuts and they all swore up and down it was a damnable lie?
Maybe not, seeing as how long-awaited documentation from the researcher who first claimed to find the vulnerability, then said Apple and his own company hushed him up when pressed for proof, has finally arrived.
Most sensible thing said so far about the release? That'd be the nothing from Daring Fireball's John Gruber, who knows better.
Close second? Glenn Fleishman of Wi-Fi Networking News, who says what Gruber's thinking: "The report is extremely technically detailed and beyond my ability to confirm. Perhaps someone can load up an appropriate computer with 10.4.7 and follow his instructions to duplicate what he achieved?"
I'm guessing that's happened at least a few dozen times since the report hit the 'net.
Update: Looks like Metasploit will soon include a module:
Meanwhile, the Metasploit Project is releasing a new module for the exploit that runs on the popular penetration test tool, so researchers can test-run it themselves.
"[Maynor's] paper is a great example of turning a WiFi driver vulnerability into a working remote exploit and serves as an excellent resource for exploitation kernel-land vulnerabilities in OS X -- with Metasploit," says HD Moore, creator of Metasploit and director of security research for BreakingPoint Systems.
Posted by mhall at 9:02 PM | Add Comment
Leave a comment