Banner

Account Login

MANDATORY: Former NeverWinPoker users, please click HERE to reset your password



Micon's Hot Tweets

BryanMicon: @PrahladFriedman + @jeffmadsen got a hit on your hands boys --> "Corn On The Cob" Def. DonkDown Radio intro --->>> http://bit.ly/ahTkPl
BryanMicon: RT AsianSpa @bryanmicon I unfollowed u so don't try and DM me.. {{{{ Looks like some1 is getting scared! U know I'm getting close! }}}}
BryanMicon: Street Sweeper Social Club: 1 part Rage Against The Machine, 1 part KRS-ONE have a taste: http://mysp.ac/9Lh3Dy baby cousin turned me on
BryanMicon: just listed some HORSEaments and @pokerstars WCOOP #3 on @chipmeup. Kudos to 'Stars for making the premier online MTT series so awesome!


Search for:
Jump to:  


Post new topic Reply to topic  [ 4 posts ] 
Mac Security 
Author Message
DD Fish
User avatar

Profile
Degen Index: 0
Joined: 04 Jul 2008
Posts: 191
Sonatine....

Mac security Vs. windows based PC. GO!

Can a hacker infect a mac? (not just the Steve Blow-Jobs answer please)

Can someone install a keylogger without my password?

Can they control my webcam?

Is Internet poker safer when playing on a mac?

Does sharig a wireless connection with an unprotective PC user endanger me in any form or lower my safely level?

Give me the 411 please


Wed Jan 27, 2010 12:02 am
DD InfoSec Oyabun
User avatar

Profile
Degen Index: 18
Joined: 04 Feb 2007
Posts: 5113
3cents wrote:
Sonatine....

Mac security Vs. windows based PC. GO!

Can a hacker infect a mac? (not just the Steve Blow-Jobs answer please)

Can someone install a keylogger without my password?

Can they control my webcam?

Is Internet poker safer when playing on a mac?

Does sharig a wireless connection with an unprotective PC user endanger me in any form or lower my safely level?

Give me the 411 please



OK lets see here:

Overview. A Mac is no more secure than a PC, in fact right now the argument can be made that a Mac is less secure than a PC because there is such a long term focus on Windows security that many of the solutions implemented have yet to be ported to Macs..

PCs do have certain intrinsic weaknesses that tie into the role Explorer has with regards to interfacing with the operating system, and those weaknesses are legion mind you, but again its kind of an oranges v apples thing. Macs are softer (imo) but there is less knowledge floating around regarding how to take advantage of their weaknesses, so PCs can be considered the lower hanging fruit.

Now. If Mac actually comes through with a PC-buster, eg a laptop or desktop for half the current price with twice the hardware value, then I think what we will see is an inversion of sorts, where browser-based OSX exploits become far more serious/pervasive... but even now, major zero day browser based exploits will often determine what browser / operating system youre running and then direct you to an appropriate malicious payload. Thats kinda new. It used to be that people would just make their hostile malware PC specific and say fuck it re: the 5% of apple boxes that it doesnt affect. That 5% (or whatever it currently is) is no longer being ignored.


So:


Can a hacker infect a mac? (not just the Steve Blow-Jobs answer please)

Yes, 100%. OSX is a BSD based UNIX variant that can be subverted. Fairly easily in truth, once the equivilent of "administrator" access is attained (root, we call it). And there are a lot of ways to get root on OSX if you understand how to audit code/binaries and are so inclined.

Can someone install a keylogger without my password?

Yes, 100%. Once you have root access to an OSX computer, you have the literal keys to the kingdom. Your keystrokes can be logged, screen captured, webcam enabled. If it can be done on a PC it can be done on a Mac, basically. But again; for every 1 person who knows how to actually do this to a Mac there are probably 10,000 who know how to do it to a PC.



Can they control my webcam?

See above.


Is Internet poker safer when playing on a mac?

Its safer, sure. But you have to look at it like this; someone pops your PC while putting together a botnet for spam and DDoS and sees you are a regular 2/4 NL player, for example. Cool, its showtime, because they earn something like $80 US a month on the average and now they can take a years salary off you in one session.

Now lets imagine they get access to your Mac. Again, same villains. They are roaming around putting together a botnet, and they get into your Mac. Again, same thing, they see you playing 2/4 NL holdem.

Im going to put myself in their shoes; I can find someone in a few hours through networking who can put together a OSX rootkit, throw them a months wages for their efforts, and then grift you for 3 hours for a small fortune.

Why wouldnt I do that?

So you see, there is a hurdle presented by running a non-standard OS but at the end of the day, the grey market has a contingency plan for that hurdle, and most others as well.

Does sharig a wireless connection with an unprotective PC user endanger me in any form or lower my safely level?

Good question.. if you were a government employee or working with highly sensitive data (financial, medical, so on), then the answer is unequivocally yes.

If you want to play on FTP or Stars while your roomates girlfriend installs 50,000 trojaned freeware games on his PC, youre safe. FTP, Stars, pretty much all the big sites encrypt traffic between their servers and the client application.

Those data streams are secure. To compromise the integrity of the encryption or otherwise hijack the data would require aa quantity of talent and effort that would almost certainly be better spent elsewhere, so you would likely be a poor candidate for a random assault based off a rogue PC on the same network.

Caveat: if you are running a poker client that does not encrypt traffic (FYI I dont know of one) then you may have a problem, and if your Mac is running applications that can be easily exploited by the PC, you may also have issues if the PC-hijacker cares enough to go for it.

You have to remember; 99.99999% of all infected computers are automated attacks. Botnets today contain literally hundreds of thousands of nodes. You dont get that many computers by scanning and trying to penetrate computers one at a time. So really when discussing pragmatic security, you have to differentiate between the average threat (automated scans) and exotic threat (people aggressively trying to compromise your computer).

One of the reasons Im glad this forum exists is because I think the latter becomes far more realistic for internet poker players, as the sums of money at risk are extremely tempting and can justify large amounts of effort.

_________________
whys the sky blue? whys water wet? why did judas rat to romans while jesus slept?


"Clothes don't maketh the man - but damn if they don't make you feel better about your place in the universe."


Mon Feb 01, 2010 1:16 pm
DD Mushroom Stamping Mod
User avatar

Profile
Degen Index: 8
Joined: 23 Feb 2005
Posts: 11944
http://www.f-secure.com/weblog/archives/00001896.html

The two time reigning Pwn2Own internet security challenge winner agrees.


Mon Mar 08, 2010 12:20 am
Site Admin
User avatar

Profile
Degen Index: 5
Joined: 10 May 2005
Posts: 3012
The short answer is that right now this second, you are 10000x less likely to become infected with a mac. As sonatine said, this will change drastically as Apple gains more market exposure... which will happen. Right now though, if you are concerned... buy a mac.

Another thing that I would highly advise is to segregate the machine that your poker is played on with the one that your IM, Web, Email is accessed from. You can do this on the same computer via virtual machines, which is what I do. I believe my setup is one of the most secure setups you can have in 2010. I run Mac OSX as my primary OS (which by the way I feel is a better OS unless you have specific windows only apps to access), and run a virtual machine via Parallels for my poker clients. This completely separates poker from everything else you do that could be compromised.

I have actually set this up for several high limit poker players that were unaware of how close they were to losing hundreds of thousands of dollars in unsecured poker accounts.


Mon Mar 08, 2010 5:14 am
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 4 posts ] 


Users browsing this topic: No registered users and 1 guest


Similar Topics

 Topics  Forum  Author  Replies
Major Security Breach in iPhone/iPad Shooting Off hongkonger
Wed Aug 04, 2010 2:32 pm
6
Surprise!! uLOLtimatebet Security Certificate invalid! Shooting Off Crowe Diddly
Sun Jul 18, 2010 10:40 am
0
DRUFF>>>>> Cereus Security issue Shooting Off zekday0
Fri May 07, 2010 6:46 pm
1
National Security Adviser tells greedy Jew joke in speech Shooting Off hongkonger
Mon Apr 26, 2010 7:30 am
0
Need to increase agricultural security Shooting Off barcode
Sun Apr 25, 2010 11:26 am
5

Search for:
Jump to:  

Contact Us | Sitemap
Copyright © 2009-2010 Donkdown.com