Mac OS X Lion Passwords Compromised by a Security Flaw

 Security, Technology  Add comments
Sep 272011
 

Do you really think Mac OS X is safe from viruses and hacks? Well, Patrick Dunstan, famous for his article back in 2009 “Cracking Mac OS X passwords“, has found a security flaw within your Mac OS X Lion that essentially allows non-root users to easily view and extract the SHA512 hash using Directory Services (dscl command).

After getting the SHA512 hash, you can basically use your regular brute-force techniques to discover the user password. I’ve tried it out personally, so I know it works.

Interesting? Indeed. Check out his full article - Cracking OS X Lion Passwords.

Related posts:

  1. iTwin now available for Mac OS X Lion and Snow Leopard too
  2. Parallels 6 new build compatible with Mac OS X Lion (Upgrade discount code)
  3. Getting Samsung Kies to install on Mac OS X Lion
  4. Summary of iLife’11, FaceTime for Mac, Mac OS X Lion, MacBook Air + Prices
  5. UOB Personal Internet Banking doesn’t work on Mac OS X Lion because of Java Applet + Workaround