Linked by Thom Holwerda on Mon 6th Mar 2006 15:52 UTC, submitted by netpython
Mac OS X Gaining root access to a Mac is 'easy pickings', according to an individual who won an OS X hacking challenge last month by gaining root control of a machine using an unpublished security vulnerability. On February 22, a Sweden-based Mac enthusiast set his Mac Mini as a server and invited hackers to break through the computer's security and gain root control, which would allow the attacker to take charge of the computer and delete files and folders or install applications. Within hours of going live, the 'rm-my-mac' competition was over. The challenger posted this message on his Web site: "This sucks. Six hours later this poor little Mac was owned and this page got defaced".
Thread beginning with comment 101865
To view parent comment, click here.
To read all comments associated with this story, please click here.
RE: Classic FUD
by gonsalu on Mon 6th Mar 2006 19:14 UTC in reply to "Classic FUD"
gonsalu
Member since:
2006-02-21

If you had checked the after-being-hacked-posts on the rm-my-mac site, you would know that gwerdna created a file in /. I don't think you can do that with normal user permissions, but feel free to correct me.

Reply Parent Bookmark Score: 4

RE[2]: Classic FUD
by sanctus on Mon 6th Mar 2006 19:31 in reply to "RE: Classic FUD"
sanctus Member since:
2005-08-31

if the owner created his and/or the other user with admin rights. Yes it is possible. But it does not give you root access.

Reply Parent Bookmark Score: 2