What you need to know about the Thunderstrike 2 worm

TidBITS:

Wired has reported on new research being presented at this week’s Black Hat security conference on a proof-of-concept Mac worm that could spread through the Mac’s firmware, rather than software. While Wired’s piece makes this sound like a super worm capable of leaping through air gaps and infecting the world’s Macs, the reality is more mundane. The research itself is excellent and fascinating work from Trammell Hudson and Xeno Kovah, and as always we hope Apple patches all the flaws quickly, but this isn’t something most Apple users need to lose any sleep over.

Here are the answers to your most pertinent questions about this vulnerability.

As always, Rich Mogull is the guy I trust the most for any Mac security issues. Rich’s level headed expertise is why I know the vast majority of the Tech Media’s reporting on these issues is always blown completely out of proportion to the threat. I’d encourage all of you to follow Rich on Twitter so that the next time this happens (and, because it’s the Tech Media, it will happen again), you’ll be able to confidently ignore the Chicken Little’s.