↓ Skip to main content

“The solution proved to be simple: we "borrowed" the USB vendor and product ID sent by an Apple-made keyboard taken from a coworker’s desk.”

lcamtuflcamtuf.coredump.cx ↗

Five plasma globes from eBay, each with a hidden chip that posed as a keyboard and typed a payload in about 100 ms. Keyboards need no drivers and in 2012 no security tool watched them. The Mac’s new-keyboard wizard was defeated by copying an Apple keyboard’s ID. Your machine trusts anything that says it has keys.