Industry News

04 Aug 2011

FireWire can steal Mac passwords

Apple computers in sleep mode are vulnerable to hacks, password recovery company Passware Inc. recently announced.

The vulnerability is present in Macs running either the Snow Leopard or Lion operating systems that have the default "automatic login" setting enabled, Passware said. Once these machines enter sleep mode, login passwords stored in the computer's memory can be obtained by running a cable to its FireWire port, which connects directly to a computer's memory in order to facilitate fast data transfer.

Passwords can be obtained regardless of whether they are highly complex or encrypted through FireVault software, eWeek reports.

Users can turn off their computers instead of leaving them in sleep mode, or by disable the Automatic Login setting to protect themselves, according to Passware.

President of Passware, Dmitry Sutrin, said that while this vulnerability is relatively easy to mitigate, it should serve as a reminder that Apple computers, known for being safe, are not entirely secure.

Earlier this year, hackers sent fake warnings to Mac users warning them of computer infection - a phishing scheme that ultimately led users to malicious links.