Apple: No Evidence Provided to Back Up Wireless Security Threat

“Further, SecureWorks has not shared or demonstrated any code in relation to the Black Hat-demonstrated exploit that is relevant to the hardware and software that we ship.”

As TMO reported on Aug. 3, SecureWorks researchers David Maynor and Jon “Johnny Cache” Ellch used the Black Hat 2006 conference in Las Vegas to release a video demonstrating a MacBook being compromised through a flaw that they said was common to the Mac and Windows operating systems. While Mr. Maynor claimed that the flaw existed in Mac OS X, he used a third-party wireless device and driver to demonstrate the exploit because Apple “had leaned on them” to not use the MacBookis built-in AirPort Extreme technology.

Macworld noted that the SecureWorks Web site has since been updated with this disclaimer: “Although an Apple MacBook was used as the demo platform, it was exploited through a third-party wireless device driver — not the original wireless device driver that ships with the MacBook. As part of a responsible disclosure policy, we are not disclosing the name of the third-party wireless device driver until a patch is available.”

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.