#Display maid for os x how to#
#Display maid for os x update#
#Display maid for os x plus#

The APPLE-SA-4 OS X 10.10.2 and Security Update 2015-001 include in the change log:ДЄvailable for: OS X Yosemite v10.10 and v10.10.1,ДЇor: MacBook Pro Retina, MacBook Air (Mid 2013 and later), iMac (Late 2013 and later), Mac Pro (Late 2013) And the 'Dark Jedi Sleep' attack from 31C3 might be usable against all Macs.

However, while this does prevent the Thunderstrike proof of concept from being able to circumvent the signature process, the older MacBooks can be subjected to a downgrade attack to a vulnerable version. It is currently shipping for the iMac Retina and Mac Mini, and should be available soon for older systems.

They are preparing a fix for part of the vulnerability that will not load Option ROMs during a firmware update and is described in the mitigation section of the talk. We have filed several Radar bugs over the past two years related to EFI vulnerabilities and been in communication with them. You can think of it as the Ebola of computer threats: catching the disease carries devastating consequences, but the likelihood of becoming infected is relatively small. There is no room for doubt here: Thunderstrike, like all boot- and rootkits, is a nasty threat that can wrest control over everything you do on your computer. One of the best tl dr descriptions was by Brian Donohue at Kapersky in What You Should Know About the Thunderstrike Mac Bootkit: Rich Mogull's well written two part article lays it out nicely: Thunderstrike Proof-of-Concept Attack Serious, but Limited, pointed out how unlikely such an attack was against normal users, and Your Risk IsnвЂ™t My Risk, which describes how this sort of vulnerability could be used in a targeted attack. Probably not, unless you're a certain type of high-value target. To the best of our knowledge there are no Mac firmware bootkits in the wild and Thunderstrike is only a proof-of-concept that does not have any malicious payload. Thunderstrike EFI bootkit FAQ General Is Thunderstrike 'in the wild'? If your question isn't answered here, send email to preferably with PGP and I'll do my best to add an answer to your questions to the FAQ. Check that, and itвЂ™ll be added to the list of apps that open automatically.The Thunderstrike page has an overview of the vulnerability and there is also a much longer annotated version of my 31c3 presentation. If youвЂ™d like an app to startup in hidden mode, then check the Hide box next to the appвЂ™s name under the Login Items tab.ДЄnother way to open apps on startup is to right-click on the app in MacвЂ™s Dock and choose Options > Open at Login.ДЇinally, after you open some apps for the first time after installation, they show you the checkbox or ask your permission to open on startup. After that, highlight the app you wish to remove and click the minus (-) button. If youвЂ™d like to stop an app from automatically starting, follow steps 1 and 2. After Mac restarts, you will see that the apps you added launch automatically. Verify the presence of the apps that you just added to the list, and restart your Mac. You can select multiple items by holding down the command key while selecting each item.Д¤) Once your desired items are selected, click Add.

#Display maid for os x plus#

At the bottom left corner of the window, click on the lock icon and enter your admin password.ДЈ) Click the plus (+) sign > Applications and choose the app you wish to auto-start. To make an app launch automatically on your Mac, simply do the following:ДЎ) Click пЈї > System Preferences and click Users & Groups.Дў) Click Login Items.

#Display maid for os x how to#

How to set applications to automatically launch at boot up