OS X Security Flaws

Discussion in 'Current Events' started by cryhavoc2112, May 26, 2004.

  1. cryhavoc2112 macrumors newbie

    Joined:
    May 10, 2004
    #1
    http://news.com.com/Mac+OS+fix+fails+to+plug+security+hole/2100-1002_3-5220285.html?tag=nefd.top


    "The company released the original patch Friday after news of the vulnerability appeared on the Internet.

    The vulnerability actually involves two flaws. One allows a Web site to place a file on the Mac's hard drive when a user clicks on a uniform resource locator, or URL, specifically designed to bypass Mac OS X's security. The other gives an attacker the ability to run a file on another user's computer, provided the location of the file is known. Used together, the flaws constitute a major security hole that could result in a potential instant-messaging or e-mail virus.

    Apple would not comment." (imagine that.)

    OSX/XP Apple/Microsoft...they all suck :cool:
     
  2. virividox macrumors 601

    virividox

    Joined:
    Aug 19, 2003
    Location:
    Manila - Nottingham - Philadelphia - Santa Barbar
  3. dragula53 macrumors regular

    Joined:
    Jun 23, 2003
    #3
    flamebait

    it is flamebait
    but the vulnerabilities still exist (or still did before today's update, cross your fingers)
     
  4. Counterfit macrumors G3

    Counterfit

    Joined:
    Aug 20, 2003
    Location:
    sitting on your shoulder
    #4
    *cough*LINUX ZEALOT*cough*
     
  5. johnnyjibbs macrumors 68030

    johnnyjibbs

    Joined:
    Sep 18, 2003
    Location:
    London, UK
    #5
    If I remember, there are two parts of the flaw. Apple fixed one of them. Therefore a vulnerability still exists - this is what Apple wouldn't comment on.

    Still, I expect if it wasn't fixed with 10.3.4 it will be fixed shortly before any damage is done. Oh, and it's nice to see Apple release last week's security fix for Jaguar users too.
     

Share This Page