TheGuySwann on nostr

Open in Damus

@TheGuySwann 1730048031

Scenario:
#Hacking #Bitcoin #Cypherpunks

Say you had 10 minutes (minus finding it and setting up) with someone’s MacBook, and you wanted to “infect” or pull as much information from it as possible without ANY logs showing that you’ve done anything to it, or plugged in any devices.

The MacBook is closed, asleep, and locked with the basic password.

What could you do, and could you ensure that there was no indication at all (no logs whatever) that suggested you had tampered with it?

If yes, what would you need to pull it off?

#asknostr

546❤️6🤙3👀2♥️1💜1

oadissin · 87w

Take out the hard drive and replace it with a new hard drive perfectly set to make the pc work. How would you do it?

⚡Lightning Goats⚡ · 87w

You need a keyboard combo, an install disk to boot to, and a payload. Interestingly enough, if I recall, you could at one time do an internet recovery on your Mac. If this is still the case. Boot into recovery set a root password, and set up ssh to accept connections. From there you can de...

⚡Lightning Goats⚡ · 87w

You need a keyboard combo, an install disk to boot to, and a payload. Interestingly enough, if I recall, you could at one time do an internet recovery on your Mac. If this is still the case. Boot into recovery set a root password, and set up ssh to accept connections. From there you can de...

SuiGenerisJohn · 87w

Now that I've thought about this a little bit, it would probably be easier to throw a few little cameras into the room and a device to listen for key strokes, but if they rummaged and left a signal they were in there I doubt that's what happened.

If the MacBook has not been restarted. So I still was on the same standby. I would think you are good. For the future: But best is to have it off when not in direct possession. I always power it off. There are additional features like a firmware password you can set.

Theory of Everything · 87w

I think it would be easier to go after someone’s Apple ID. If you can log into the Apple ID, And their data is backed up on the cloud, You have access to pretty much everything. It’s just the stuff downloaded onto the hard drive that you would not see. Otherwise removing and backing up the hard ...

Just a usb and about 60 seconds. Logs would still show up though so they would need to have some persistent way to log in remotely and delete logs.

Diacone Frost · 87w

I think you actually get the most data from the exterior. serial numbers (potentially figure out when and where they bought it) company inventory numbers (if it's for work), where they work, etc. stickers (are you into bitcoin, games, ...) steal it and return it, gain trust and start phishing...

The scenario as proposed is not possible. Not in only 10 minutes, and not without leaving ANY logs.

Machu Pikacchu · 87w

You must’ve found Christine Lagarde’s laptop 🤭

SuiGenerisJohn · 87w

Find any comfort after this scenario? Hope so, good luck brother.