Security Update 2004-06-07

[Fat Tony]

I hope THIS one fixes recent problems.

[MacRumors]

Now available in Software Update:

Security Update 2004-06-07 delivers a number of security enhancements and is recommended for all Macintosh users. This update includes the following components:

DiskImages
LaunchServices
Safari
Terminal

Mac OS X will now present an approval alert when an application is to be run for the first time either by opening a document or clicking on a URL related to the application.

For detailed information on this Update, please visit this website: http://www.info.apple.com/kbnum/n61798

[Savage Henry]

It's only 900k, so I'm going in .....

[RazzTheFrog]

Wohoo! Another Update!

Ahh man...

At least when Apple see's a problem that don't wait forever like windows... and are still continuing to re-invent the way computing is done.

[Laslo Panaflex]

Mac OS X will now present an approval alert when an application is to be run for the first time either by opening a document or clicking on a URL related to the application.


That's pretty neat, does that mean that you have to do it everytime you restart an app, or just the first time ever?

[yoman]

Well let's hope this fixes everything up.

[Mudbug]

I think this will effectively remove the need to use Paranoid Android.

[ipacmm]

installing it on all of my macs right now.

[mactastic]

Nice, this is shaping up to be a hell of a week... :D

Come on new iTunes!

[doutee]

What Next?

[wdlove]

Thank you Steve for updating an already great product. I look forward to an even better Safari.

[~Shard~]

Apple sure is being thorough - kudos to them! Looks like I'll have this update along with iTunes 4.6 to download this week! :cool:

[gandalf55]

I lost ability to connect to the internet with the new Security Update & Paranoid Android running after a restart. I turned that off, restarted and all seems well now.

[James Craner]

Installed the update, system is working fine, for all those users who like to wait and see before installing.

[iriejedi]

I can't wait to start installing all the updates - common Stevie - I dare you to release the Rev B G5's tomorrow!!!!

I Double Dog Dare you!

IJ

Wohoo! Another Update!

Ahh man...

At least when Apple see's a problem that don't wait forever like windows... and are still continuing to re-invent the way computing is done.

[Awimoway]

This is a better solution than Paranoid Android. I was getting tired of being asked every time if I wanted to let an app launch and I eventually disabled PA, practicing “safe surf” in the meantime. I have Applescripts timed to go off at certain times without me having to be there to grant permission. A first-time-only approval is a much cleaner solution.

[saabmp3]

waiting for iTunes 4.6...........

BEN

[Savage Henry]

We'll I'm back .. but my hard drive is whirring louder than pizza delivery bike.

Oh well, time to rummage my hardware.

[Toe]

At least when Apple see's a problem that don't wait forever like windows... and are still continuing to re-invent the way computing is done.

Hey! When Microsoft learns of a security problem, they often respond within only a few months. It's not their fault that they don't have any money to spend on patching security flaws, or that they don't know anything about software development, or that security updates aren't that important. I mean, what can you expect from the richest, most widely-used software developer? How much harm can it do if a few hundred million Windows systems go without a patch for a few weeks or months or years?

Most Windows users don't seem to run security updates anyway.

[jessefoxperry]

waiting for iTunes 4.6...........

BEN

probably won't come until after iTMS Europe. The new airports aren't shippin until july so they dont need to update itunes right away. other than that - nice freakin job apple.

[titaniumducky]

probably won't come until after iTMS Europe. The new airports aren't shippin until july so they dont need to update itunes right away. other than that - nice freakin job apple.

iTunes 4.6 is the iTMS Europe((/Canada/China)?).

[jessefoxperry]

iTunes 4.6 is the iTMS Europe((/Canada/China)?).

well they also need to update it for the new airport

[Windowlicker]

while it's nice to see these updates, I still am starting to wonder why there has been so many of them lately :P I know these fixes are mostly pretty much minor ones, but when we had jaguar we didn't get too much security updates...

luckily these are so small it doesn't really take much time to install them.

[Bear]

iTunes 4.6 is the iTMS Europe((/Canada/China)?).Actually with the way the iTunes store works, it's quite likely that no iTunes updates are needed at all for the store when it sets up in new territories.

[Mitthrawnuruodo]

What Next?

iTunes 4.6 :D

[virividox]

yay sercirty flaw remedied :)

[gwangung]

yay sercirty flaw remedied :)

Does that mean we have to stop bashing Apple now for being unresponsive? :p

[Hugin777]

This fixes it.

I have updated my example exploit page (http://ozwix.dk/OpnAppFixer/testit.html).

Yes, what a day :)

[liketom]

why is it i keep checking my update software box am i that sad !!!! i seem to live every day with the same thought " is apple releasing something today that i don't know about ?" i might as well make my home page apple.com instead of google it's always the first web site i vist next is here! go figure .

good job apple , you make me enjoy mondays and tuesdays at work now !

tom

[Captain Canuck]

Steve Jobs Speaking from the Wall Street Journal's D: All Things Digital conference this afternoon in Carlsbad:

Jobs said that the vulnerability came to Apple in two parts, with the first being in February and the second in May. The first vulnerability was not disastrous unto itself, but when compounded by second, it became critical. Jobs said it took them three weeks to fix it once they understood the seriousness of the flaw.

A Security update which closes all the recent vulnerabilities should be "available today, but no later than the end of the week."

[xtbfx]

while it's nice to see these updates, I still am starting to wonder why there has been so many of them lately :P I know these fixes are mostly pretty much minor ones, but when we had jaguar we didn't get too much security updates...

Um, Jaguar we went up to 10.2.8

All of those updates included security patches/etc.

Panther is only up to 10.3.4 with Tiger just around the corner.

Jaguar had far more updates than Panther.

[fluidinclusion]

I've installed the 6-7-04 update, and all appears stable on my 12" Powerbook. Yay!!!

[hob]

Actually with the way the iTunes store works, it's quite likely that no iTunes updates are needed at all for the store when it sets up in new territories.

How'd you figure that one? I'm pretty sure it'd need at least a rudimentary update - the introduction of £'s and/or €'s!

[Bear]

How'd you figure that one? I'm pretty sure it'd need at least a rudimentary update - the introduction of £'s and/or €'s!The whole store is in XML. All Apple has to do is send the correct XML for the country you're in and you get the correct prices and currency symbol.

[nightcap965]

Installed the new update with no problems on my iBook G4 and PowerMac G5. By Jove, I think they've got it.

Many much thanks to Unsanity for Paranoid Android, but it's nice to be able to turn it off and only have to give permission once.

[Jetson]

I just installed the security update. So far everything seems fine except that Microsoft's Windows Media Player didn't work.

Turns out that somehow the mute button on the Windows Media Player became enabled. Clicking it brought back the sound.

[wdlove]

I'm going to update our iBook backup and see what happens! :)

[dontmatter]

Thank god!

Everytime I see a rumor of "new security update" I get a major, feeling of FU apple, I keep defending you and you're hardly better than windows... can't you do better than filling holes, letting people find new ones, and then filling them? can't you design a system that's fundamentally different in some way that it's secure without even needing to look for holes to fill?

But this time, it looks like it's just that-being strategic and smart, instead of just trying to play the race and be a step ahead of your enemies. Way to go, elegantly blocking trojan horses. I'm just waiting until maybe with OS 11 we get "now, we have an OS that cannot crash, cannot be hacked, cannot let viruses, worms, trojans, etc. get in". That is my dream. "Sorry dudes, we were clever, and made the computer built on some recursive structure so that you aren't limited at all, but even the NSA still can't hack your computer."

This, is a step in that direction. It's a hell of a lot better than a promise that they'll try and beat the geeks of the world to finding their own weaknesses, isn't it?

[adamjay]

why is it i keep checking my update software box am i that sad !!!! i seem to live every day with the same thought " is apple releasing something today that i don't know about ?" i might as well make my home page apple.com instead of google it's always the first web site i vist next is here! go figure .


are you using Safari? that nice little google search next to the URL bar keeps me from having google as my home page, now i switch my home page from my webmail server to macbytes, and back and forth.
--
and i'm the same way, i check software update nearly every 2 days. i wish it would learn that i DONT use an ipod though, and stop automatically putting a checkmark for the ipod update that i will never download
--
this is a great update btw, good pro-active thinking apple.

[MhzDoesMatter]

Thank god!

Everytime I see a rumor of "new security update" I get a major, feeling of FU apple, I keep defending you and you're hardly better than windows... can't you do better than filling holes, letting people find new ones, and then filling them? can't you design a system that's fundamentally different in some way that it's secure without even needing to look for holes to fill?

But this time, it looks like it's just that-being strategic and smart, instead of just trying to play the race and be a step ahead of your enemies. Way to go, elegantly blocking trojan horses. I'm just waiting until maybe with OS 11 we get "now, we have an OS that cannot crash, cannot be hacked, cannot let viruses, worms, trojans, etc. get in". That is my dream. "Sorry dudes, we were clever, and made the computer built on some recursive structure so that you aren't limited at all, but even the NSA still can't hack your computer."

This, is a step in that direction. It's a hell of a lot better than a promise that they'll try and beat the geeks of the world to finding their own weaknesses, isn't it?

I'm pretty sure that there will never be such a thing as a crash-proof, unhackable, totally immune computer operating system. Flaws are inherant to creation and imperfections in programming languages are not always predictable. So we work out the kinks when they're revealed, often times by being exploited. The only way to close 100% of the security holes is to close the software to any avenues of expansion or advancement. In other words, if you want a secure OS, buy a pocket calculator.

[Savage Henry]

I'm going to update our iBook backup and see what happens! :)


The whirring that came from my iBook after I installed it has now stopped. I can't think it had much to do with the patch, but it did annoy the bejeezes out of me for a couple of hours.

Still, small price to pay, and all that.:)

[cb911]

wow, this fixes problems that i didnt' even know existed! :eek:

oh well, once i get patched i now know how to have some fun with un-patched machines and any poor souls running 10.2.8. http://mugget.com/web_images/twisted.gif j/k :p


edit>> whoa! scary update! :eek: i just re-booted and it hung on the blue screen with that round progress indicator. had to force re-boot and now everything's working okay... just hope it stays like that.

[nagromme]

So, maybe Apple wasn't "ignoring" the problem as people have enjoyed accusing them, but rather spending the time building and testing a BETTER solution instead of a quick and dirty one.

Sounds good to me.

It's a shame about all the Macs that were attacked in the meantime. Oh, wait... they weren't, and this hole was not one that a virus or worm could use to spread....

[JJTiger1]

Just exactly what was it that this update fixes? What was broken? :confused:
=-=
I trashed the Haxies and APE's a long time ago. :eek:

Wish List for OSX: the Apple Menu that I have in OS 9.2.2 :o

JJ
QuickSilver G4/733, OS 10.3.4 :D

[razorme]

--
and i'm the same way, i check software update nearly every 2 days. i wish it would learn that i DONT use an ipod though, and stop automatically putting a checkmark for the ipod update that i will never download
--
this is a great update btw, good pro-active thinking apple.

You can inactivate that update.

[shamino]

why is it i keep checking my update software box am i that sad !!!! i seem to live every day with the same thought " is apple releasing something today that i don't know about ?"
I just have mine set to check for updates once per day.

In the worst case (an update comes out a minute after the program checks), I'll find out one day late. Typically, I see the alert as soon as I log-on in the evening, after coming home from work.

For anything more up-to-date than that, I've got MacBytes :D

[cschilderink]

After I installed the update it took forever for my computer to shutdown. It was a blue screen with the spinning cirle for who knows how long since I just went to bed and left it.

The next day I started it up and it had a blue screen with the spinning cirlce. I waiting probably 5 mintues and still nothing happened. I then held down the power button on my PB 1.25ghz and turned it off. I clicked the button again and it started up normal.

Working fine every since but still a strange happening. Although, it could have been something else to do with my computer, I seriously dout it was.

Has anyone elsse had this problem with this update?

[kylos]

I've noticed that after a machine has been running for a long time that it will sometimes take quite a while shutting down and starting up.

[rob010]

The Update fails the test above and is seemingly still unfixed when I run the test it says I am unsecure.

I ran the repair permissions before and after the update and this has made no difference at all.

If there is something else I should try by all means let me know and I will try it.

I am running 10.3.4 and have had no other problems.

[spookz]

audiohijack will not start up utils configured in the presets. it seems i have to start the app first, point the preset at it, then hijack.

i have to do this every time i turn on audohijack. the preset refuse to remember the location of the app it is supposed to hijack

i want to kill. what a frikkin sucker i am! i fall for these updates everytime