Apple is working on a fix for Rootpipe, but here's why most of us aren't at risk anyway<div class="field field-name-body field-type-text-with-summary field-label-hidden"><div class="field-items"><div class="field-item even" property="content:encoded"><p><a href='
http://www.imore.com/apple-working-fix-rootpipe-heres-why-most-us-arent-risk-anyway' title="Apple is working on a fix for Rootpipe, but here's why most of us aren't at risk anyway"><img src='
http://www.imore.com/sites/imore.com/files/styles/large_wm_brw/public/field/image/2014/11/retina_5k_imac_back_angle_hero_0.jpg?itok=SjrFEkgJ' />[/url]</p> <p>Apple has confirmed to iMore that they're working on a fix for Rootpipe, an OS X exploit that's gotten a lot of attention recently. Rootpipe doesn't seem much different than other security bugs that are routinely discovered, disclosed, and dealt with during the normal course of Mac updates. So, what's going on?</p> <p>A privilege escalation bug, Rootpipe can allow someone to gain 'root' access to your Mac. In other words,
almost unlimited power over everything and anything on the computer.</p> <p>The catch is, the Rootpipe exploit has to be executed on your Mac using an account with administrator (admin) privileges. An admin account is common enough — many people only have a single account on their Mac and do run as admin. Being able to execute the exploit is more challenging — an attacker would either have to have physical access to your Mac, or have previously gained remote access through some other method, such as malicious user-installed software, or a remotely exploitable vulnerability. And, with or without Rootpipe, if an attacker has gained remote access to your Mac, you already have problems.</p> <p>Rootpipe is a legitimate security vulnerability and Apple is already working to fix it. That said, we have yet to see an exploit in the wild or any other indication that average users have any reason to worry. While the media may have worked themselves into a frenzy over Rootpipe — and
WireLurker — it's important to remember the current hype once again seems highly disproportionate to the actual danger posed to Mac users at this time.</p> <p>
Nick Arnott contributed to this article.</p> </div></div></div><div id="comment-wrapper-nid-28211"></div><img width='1' height='1' src='
http://tipb.com.feedsportal.com/c/33998/f/616881/s/403c450e/sc/4/mf.gif' border='0'/><br clear='all'/>
<a href="
http://da.feedsportal.com/r/211597316434/u/49/f/616881/c/33998/s/403c450e/sc/4/rc/1/rc.htm" rel="nofollow"><img src="
http://da.feedsportal.com/r/211597316434/u/49/f/616881/c/33998/s/403c450e/sc/4/rc/1/rc.img" border="0"/>[/url]
<a href="
http://da.feedsportal.com/r/211597316434/u/49/f/616881/c/33998/s/403c450e/sc/4/rc/2/rc.htm" rel="nofollow"><img src="
http://da.feedsportal.com/r/211597316434/u/49/f/616881/c/33998/s/403c450e/sc/4/rc/2/rc.img" border="0"/>[/url]
<a href="
http://da.feedsportal.com/r/211597316434/u/49/f/616881/c/33998/s/403c450e/sc/4/rc/3/rc.htm" rel="nofollow"><img src="
http://da.feedsportal.com/r/211597316434/u/49/f/616881/c/33998/s/403c450e/sc/4/rc/3/rc.img" border="0"/>[/url]
<img src="[url]http://da.feedsportal.com/r/211597316434/u/49/f/616881/c/33998/s/403c450e/sc/4/a2.img" border="0"/>[/url]<img width="1" height="1" src="
http://pi.feedsportal.com/r/211597316434/u/49/f/616881/c/33998/s/403c450e/sc/4/a2t.img" border="0"/><img src="
http://feeds.feedburner.com/~r/TheIphoneBlog/~4/csAqWVqXd3s" height="1" width="1"/>
Source:
Apple is working on a fix for Rootpipe, but here's why most of us aren't at risk anyway
