(no subject)

[theweaselking]

MacLockPick: A USB-based piece of software that plugs in, reads every password on your Mac, your entire browser history, your entire IM history, all the devices your machine has connected to, your address book, and a full list of which folders you've opened and when.

Even on a sleeping machine.

Comments

[mazarinade.livejournal.com]

Physical access trumps all.

There was a similar sort of tool that let you take admin access on Netware machines if you had physical access, and I found it invaluable when taking over sysadmin duties from an idiot who'd left in disgrace.

[skola.livejournal.com]

I so want one of those.

[heraldofchaos.livejournal.com]

if you have physical acess to the machine its over.

doesnt matter what you put in the way, you can (for a reduculas cost) have the drive platters read by an electron microscope and decypered from there.

though why do i have a feeling even though its "FOR LAW ENFORCEMENT ONLY" that it will be easier to get than a gun...

come on, the term "licenced investigator" in the states is pretyy dubious.

[drjamez.livejournal.com]

YAY to Mac fans feeling some heat. It'll get worse before long.

That is all.

- James -

[kjn]

Yeah, and if you have the Apple-supplied OS CD and physical access, you can change the administrator password.

So what's new?

[elffin.livejournal.com]

Naturally, there is a way to defeat this "lockpick" - disable USB media automount, and/or close your keychain. Security-minded Macgeeks will have done either/or.

And, if they're law enforcement types, all they need is a warrant.

[elffin.livejournal.com]

Oh, damn. It also requires double-clicking on the application to run it. Damn.

Now all I need to do is get a MD5 or sha1 fingerprint of that application.

Again: A way to rip off law enforcement.

[sebkha.livejournal.com]

Huh. I didn't know I had to explicitly lock my keychain. O_o

*does so*