Good ideas spread like daring wildfire

Here's a section from MDJ 2006.08.30:

Given the secrecy, duplicity, and inconsistency that has marked Maynor and Ellch's presentation, starting with going to the press to take on that Mac user "aura of smugness" before Black Hat and continuing through the next month, there are only two easy ways for the pair's credibility to be restored. One would be for Apple to release a patch for the problem they found, describing it and fixing it so that everyone would be free to talk about it. That, of course, presumes the bug exists and affects Apple's hardware, not just third-party drivers.

The other way is trivial. Maynor or Ellch (or both) need to perform their demonstration attack not in front of people like Krebs who don't know the platform well, but in front of recognized Macintosh security and networking experts who do. We'd nominate Glenn Fleishman, but Alan Oppenheimer at Open Door Networks or Macworld Labs would be just fine, too.

The task is simple: Maynor or Ellch would bring whatever tools they wanted to use for their attack, but the target machine would be a stock, unmodified, black MacBook computer (though extra RAM might be allowable), with AirPort turned on and a valid network available if the researchers need it. They would then be free to do whatever they wanted to attack the MacBook except physically touch it.

If they can repeat the demo feat of logging into the MacBook, with or without root privileges, and create and delete files on the desktop, they are redeemed. If they can't do it in, say, two hours, then they withdraw their claims about MacBook vulnerabilities and apologize to everyone involved. The experts who monitor the test would have to agree not to divulge details about how the vulnerability works, of course, but that's a small thing - if the vulnerability is real, Mac experts won't want it in the wild any more than Maynor and Ellch would.

Less than two days later, John Gruber took this upon himself!

I’m issuing the following challenge to David Maynor and Jon Ellch:

If you can hijack a brand-new MacBook out of the box, it’s yours to keep.

Gruber's version of the challenge doesn't allow extra RAM in the MacBook, nor does it require a black MacBook as seen in the demo, or stipulate the presence of known Macintosh security experts like Fleishman, Oppenheimer, or the Macworld Labs folks. Still, if either Maynor or Ellch demanded these things, we suspect Gruber might acquiesce - and you have to admire him stepping up and putting his own money at risk for it.

Third-party monitors might make Maynor and Ellch feel like they're not being railroaded, but if Gruber wants to pay for the MacBook, we say he has the right to watch the attack succeed or fail - provided no one tries to snoop on the network packets as Maynor and Ellch have always said they feared.

But especially now, with a stock machine ready for the demonstration any time this week that they want, Maynor and Ellch either need to put up or shut up. Either they can compromise a MacBook's internal AirPort Extreme hardware with no additional user requirements, or they can't and have just enjoyed the attention from almost publicly claiming that they could. They need to do it and be revered, or note the end of their 15 minutes and go away.

If the duo will not demonstrate this attack under controlled conditions now, a full month after demoing it at Black Hat, no reasonable person should be expected to believe the vulnerability ever existed.

(MWJ subscribers: This issue of MDJ is now in your MWJ RSS feed per our previous policy of providing MDJ issues when MWJ is delayed - enjoy!)


# - Posted by MacJournals News on 9/3/06; 1:09:42 PM to MDJ, MWJ

Sick building syndrome

Ugh! Our publisher has been getting sicker and sicker, to the point of nuclear antibiotics and chest X-rays, all without any discernible reason. Despite that, he took some time on Friday to go to a nearby town - and after about 2 hours, felt noticeably better. Based on what he knew, that really didn't make any sense.

So, as usual, it set the gears in motion, and Friday night, we took another look at the production studio's standalone cooling, mentioned before here and here. In fact, that second instance had a rather revealing note:

(And trust us, you haven't lived until you have to interrupt a conference call to drain the results of massive dehumidifying from a heat pump with a turkey baster, and repeat it every 4 hours for several days.)

One reason the studio had been so hot was because the heat pump was not properly draining the water it extracted from the air as part of its air conditioning. When the thing got full, it couldn't dehumidify effectively, and it pumped humid, warmer air into the studio. So we've been draining it by hand where we could (the unit weighs about 200 pounds and can't easily be removed by one person, and calling it "easy" for two is a bit of a stretch).

On Friday night, we took the case off and looked at parts of it we normally don't mess with, and sure enough: mold! Right where we had noticed some water dripping when the thing needed to be drained. This, of course, was exceedingly disgusting. We wiped it all down with disinfectant cloths, sprayed every flat surface we could find (not the computers) with disinfectant, and left the studio alone for a while. Our publisher stayed away all day Saturday, too, and while he wasn't cured, his months-long condition did not worsen.

Today we came back into the studio and looked again, and found: mold! Not as much, but in the same places. This appears to be the explanation we've been seeking. The drainage problem is not just a cooling nuisance; it's causing mold to grow in the heat pump, which then puts it into the air in the studio. The more time you spend in the studio, the sicker you get. That's why our publisher, who usually spends at least 12 hours a day in the studio, has been sick to the point of getting emergency chest X-rays - but other staff members, who have been here this summer for a maximum of 40 hours per week, leave the studio and only feel like there's some kind of small allergy issue.

So with family and friends today, we got serious about it - we took the cursed appliance out of the studio and found enough crud inside it to make you think it hadn't been cleaned in a year - instead of four weeks ago, the last time we did it. (We would have posted pictures of this disgusting thing, but we remembered that we like you to much to make you look at them.)

The unit was new in 2001, replacing a 20-year-old model, and upon very close examination, it appears to have been designed for a slightly different carrier housing: unless it's tilted backward on at least a 20° angle, there's just no way water can drain from it. When the weather didn't make the air conditioner work so hard, it never came up. This summer, with it extracting gallons of water per day from the surrounding air, its collection tray became full and stayed that way - warm, wet, and dark. No wonder critters grew!

Last time we had it out for inspection (and the time before that, with the certified repair person here), we thought we just weren't seeing the holes in the bottom where the water should drain out. Today, we confirmed: there are no drainage holes. So we made some, right at the bottom, right where the water should be draining out anyway. In our test with clean water, they seemed to work fairly well. (No heat pump or A/C drains bone-dry, but neither should it have 3 gallons of standing water in it 24/7.)

We thoroughly cleaned every surface (including a previously-hidden filter), disinfected everything, and have reinstalled it in the studio. Meanwhile, since the temperature today in the Crossroads of America is a balmy 72°, we're taking the opportunity to air out the entire building, front to back and side to side. Since it rained most of yesterday, there's not a lot of crud in the air to replace the mold, so it's a good day for fumigation.

Our publisher is cautiously optimistic, especially since he thinks he was about two days away from hospitalization. We'll be checking carefully for drainage and recurrences of mold for the next few days, and he's constantly monitoring to see if he's feeling any better. But this theory, at least, fits all of the available facts as we know them. The only one that seemed odd was that a week in San Francisco didn't seem to help the publisher much, but he says that his hotel room kept sneaking in "luxurious down" pillows and comforters even after he asked them to be removed. When you have 15 pillows in a room, figuring out that one of them is making you sneeze is non-obvious. (He says, "15 pillows in a room is not luxury. It's just annoying.")

So, we may have our building fixed. Cross your fingers for us.


# - Posted by MacJournals News on 9/3/06; 12:55:23 PM to Administrivia

 

This Page was last updated: Wednesday, September 9, 2009 at 9:07:00 PM
Copyright 2009, GCSF, Incorporated. All rights reserved.