Hackers Could Make a MacBook's Battery Explode

[Preston]

Wow, now this is crazy...



Apple security expert and hacker Charlie Miller has exposed a very frightening security flaw that potentially affects all models of MacBooks, including the Pro and Air lines.

Miller found that MacBooks share a common password that's required to gain access to the controller chip that's responsible for the battery. A hacker could hijack the firmware to render a lithium-ion battery useless so it no longer holds a charge – or even worse, turn off the temperature management to make it potentially explode.

MacBook batteries, and nearly all other laptop batteries, usually have a failsafe feature in them to prevent overheating, but anything is possible as we've seen in past reports of battery explosions.

Another scary possibility is that the battery firmware could become home to malware that would persist even with full hardware wipes or replacements. Battery removal isn't a common way to troubleshoot malware.

“You could put a whole hard drive in, reinstall the software, flash the BIOS, and every time it would reattack and screw you over. There would be no way to eradicate or detect it other than removing the battery,” Miller told Forbes.

In order to gain access to the battery firmware, however, a hacker would first need to infiltrate Mac OS X to gain access.

Miller will detail his findings and MacBook battery experiments (he's already bricked seven batteries in his tests) at the Black Hat conference in August. There he'll also release a tool he made, called Caulkgun, that will randomize the password for the battery controller. Of course, the changing of password will also lock out Apple's future updates to the firmware – so really, the best case scenario would be for Apple to come up with a better solution.

“These batteries just aren’t designed with the idea that people will mess with them,” Miller says. “What I’m showing is that it’s possible to use them to do something really bad.”

Hackers Could Make a MacBook's Battery Explode

[Nuclear Krusader]

I'm sure Apple will provide a fix for this in a soon-to-come update.

[Blaster3]

wow, alarmingly interesting... has there ever been a 'fix' for this for i have not heard of anything in the news (would have thought this made headline news. but then again i don't watch tv nor read newspapers as most if not all cater to entertainment type news rather than 'real' life importance)... i digress but am still ignorantly curious

[Nuclear Krusader]

None that I know of. I haven't heard of any fixes either for the issue with HP printers that can make them start a fire either.

[mknabster]

That's interesting about the failsafe, and i'm surprised my computer has blown up yet with how hot that thing gets when i'm using it with the battery; you can roast eggs on the bottom of that!

[David M]

I'm sure if it was effective we would have heard about a rash of Apple product battery fires or meltdowns.