Getting Pwned Just Got REALLY Easy

If you want to break into a Mac or a PC, the easiest way to do so is to get the username and password it uses. Up until now, you had to be really good at social engineering or have some really amazing piece of malware to pull that off. But that changed this week. Rob Fuller, a principal security engineer at R5 Industries has demonstrated a hack that can steal the login credentials of any Mac or PC using $50 – $155 of hardware. Specifically, the  Hak5 Turtle ($50) and USB Armory ($155) which are USB based PCs that run Linux. To illustrate this, here’s a video of the hack in action:

If you want the technical details behind this hack, his blog post can help you with that. Now if this scares you, and it should, you can take a look at this mitigation technique. Here’s hoping that Microsoft and Apple build in mitigations for this into their respective OSes. I’m pretty sure Mr. Fuller can help them with that.

Leave a Reply