Results 1 to 8 of 8

Thread: News - Apple OS X Lion update dumps FileVault passwords to plain text

  1. #1
    HEXUS.admin
    Join Date
    Apr 2005
    Posts
    31,709
    Thanks
    0
    Thanked
    2,073 times in 719 posts

    News - Apple OS X Lion update dumps FileVault passwords to plain text

    Users of FileVault prior to 10.7.3 affected.
    Read more.

  2. #2
    Super Nerd
    Join Date
    Jul 2008
    Location
    Cambridge
    Posts
    1,785
    Thanks
    22
    Thanked
    105 times in 72 posts

    Re: News - Apple OS X Lion update dumps FileVault passwords to plain text

    Wow that's a pretty big flaw to let slip wild, lets see how long it takes for a fix - if indeed its even possible to fix given that old backups need purging of the offending file.

  3. #3
    Senior Member
    Join Date
    Aug 2008
    Posts
    1,894
    Thanks
    92
    Thanked
    84 times in 64 posts
    • miniyazz's system
      • CPU:
      • Acer Aspire 8920G
      • Operating System:
      • Windows 7 Pro
      • Monitor(s):
      • Optoma HD700X projector @ c. 90"
      • Internet:
      • Really, really ****

    Re: News - Apple OS X Lion update dumps FileVault passwords to plain text

    Fail.

  4. #4
    Registered+
    Join Date
    May 2012
    Posts
    20
    Thanks
    0
    Thanked
    2 times in 2 posts

    Re: News - Apple OS X Lion update dumps FileVault passwords to plain text

    Quote Originally Posted by kingpotnoodle View Post
    Wow that's a pretty big flaw to let slip wild, lets see how long it takes for a fix - if indeed its even possible to fix given that old backups need purging of the offending file.
    It is a tad of a fail, can they not just release a hotfix to change the debug setting that was causing it !

  5. #5
    F.A.S.T. Butuz's Avatar
    Join Date
    Jul 2003
    Location
    Wales
    Posts
    4,708
    Thanks
    51
    Thanked
    72 times in 59 posts
    • Butuz's system
      • Motherboard:
      • MSI Z77 MPOWER
      • CPU:
      • I7 3770K @ 4.6
      • Memory:
      • 16GB Corsair XMS 1866
      • Storage:
      • Sandisk SSDs
      • Graphics card(s):
      • 3xR9 290
      • PSU:
      • be quiet! Dark Power Pro 10
      • Case:
      • Inwin H Frame
      • Operating System:
      • Windows 7

    Re: News - Apple OS X Lion update dumps FileVault passwords to plain text

    Masterclass in why not to use password vault software.

    Butuz

  6. #6
    Account closed at user request
    Join Date
    Aug 2003
    Location
    Elephant watch camp
    Posts
    2,150
    Thanks
    56
    Thanked
    115 times in 103 posts
    • wasabi's system
      • Motherboard:
      • MSI B85M-G43
      • CPU:
      • i3-4130
      • Memory:
      • 8 gig DDR3 Crucial Rendition 1333 - cheap!
      • Storage:
      • 128 gig Agility 3, 240GB Corsair Force 3
      • Graphics card(s):
      • Zotac GTX 750Ti
      • PSU:
      • Silver Power SP-S460FL
      • Case:
      • Lian Li T60 testbanch
      • Operating System:
      • Win7 64bit
      • Monitor(s):
      • First F301GD Live
      • Internet:
      • Virgin cable 100 meg

    Re: News - Apple OS X Lion update dumps FileVault passwords to plain text

    Quote Originally Posted by Butuz View Post
    Masterclass in why not to use password vault software.

    Butuz
    Is Apple's Filevault a password vault though?. I thought it was more like a proprietary Truecrypt?

  7. #7
    <<== UT3 Player spoon_'s Avatar
    Join Date
    Nov 2008
    Location
    London
    Posts
    2,071
    Thanks
    113
    Thanked
    139 times in 131 posts

    Re: News - Apple OS X Lion update dumps FileVault passwords to plain text

    According to this link:

    http://docs.info.apple.com/article.h...en/mh1877.html

    its encryption on your home folder.

  8. #8
    Am*
    Am* is offline
    Registered+
    Join Date
    May 2012
    Posts
    35
    Thanks
    4
    Thanked
    0 times in 0 posts
    • Am*'s system
      • Motherboard:
      • P67A-D3-B3 /\ D2500HN
      • CPU:
      • Intel 2500K 4GHz /\ Atom D2500
      • Memory:
      • 8GB Ripjaw 8-8-8-24 1600MHz/\ 2GB 1066MHz CL7
      • Storage:
      • 64GB Samsung 830 + 7TB of Samsung HDDs /\ 6TB
      • Graphics card(s):
      • GTX 460 768MB /\ Intel GMA 3600
      • PSU:
      • 600W Be Quiet 80Plus Silver /\ 300W SFX 80Plus
      • Case:
      • FD Define R3 /\ FD Array R2
      • Operating System:
      • Windows 7 Pro 64bit

    Re: News - Apple OS X Lion update dumps FileVault passwords to plain text

    So much for Apple's great security feat. Looks like hackers have their work cut out for them.

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •