Mac Hack Part IV: Ellch's ToorCon Rant
Filed in archive Wi-Fi by jeff goldman on October 01, 2006

The Washington Post's Brian Krebs reports on the latest developments in the Mac Hack saga -- at the ToorCon conference this weekend, SecureWorks researcher David Maynor failed to show up at a promised public demo of an attack used to compromise a MacBook over Wi-Fi. Maynor was apparently stopped from doing so via an agreement between SecureWorks and Apple.
Maynor's co-presenter, Jon "Johnny Cache" Ellch, did show up, though, and gave a five-minute speech defending their efforts.
"We give a talk saying that device drivers have lots of bugs," Ellch recalled. "We demo one bug in Apple. A few days later, when Apple starts flaking on a patch, we tell them we are going to do a live demo of it at ToorCon, so it would be a good idea to get it patched before that. Apple says that it doesn't exist, and [that] we didn't talk to them about it. A few weeks later (one week before ToorCon) they patch it, and say we had nothing to do with it. One day before the talk, SecureWorks and Apple get together and manage to stop Dave from coming."
Ryan Naraine of eWeek calls this "one of the most bizarre disclosure episodes in recent memory," noting that some had hoped that Maynor would resign from SecureWorks in order to freely disclose more information on the MacBook vulnerability.
"The story is bound to be continued," says CNET's Joris Evers. "While some in the Mac community see the cancellation of Saturday's talk as proof that Maynor and Ellch are frauds, some at ToorCon suggest the danger of Wi-Fi driver flaws might be bigger than previously thought."
Permalink: Mac Hack Part IV: Ellch's ToorCon Rant
Tags:
Mac WiFi ToorCon SecureWorks WiFi vulnerability hack Ellch Maynor Apple driver security demo bug wir
Trackback: http://www.creative-weblogging.com/cgi-bin/mt-tb.pl/37951











