Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
Try googling 'firefox malicious code'. :eek:

IIRC, all browsers (at one point or another) have had versions that allowed for these types of exploits.

u gotta admit firefox does patches much faster. And firefox's security problem probably won't be as straightforward as this one.

Not to mention, if there is a current exploitable hole in firefox, why Ubuntu is still standing?

PS. I googled it :)
 

Attachments

  • Picture 1.png
    Picture 1.png
    151 KB · Views: 76
Its always either Safari or Quicktime. At least Apple is usually quick to fix the exploits once found.

oh, hai

Microsoft or Apple - Who Is the Faster Patcher?

"And the answer is... Microsoft. Researchers from the Swiss Federal Institute of Technology analyzed 658 high-risk and medium-risk vulnerabilities affecting Microsoft products and 738 affecting Apple. They measured how many times over the past six years the two vendors were able to have a patch available on the day a vulnerability became publicly known, which they call the 0-day patch rate. What they found: 'Apple was below 20 [unpatched vulnerabilities at disclosure] consistently before 2005,' said Stefan Frei, one of the researchers involved in the study. 'Since then, they are very often above. So if you have Apple and compare it to Microsoft, the number of unpatched vulnerabilities are higher at Apple.'"

its on slashdot, second page
 
My only point for saying "google FireFox malicious code" was to back up my statement that all browsers have their moments in time when they're vulnerable to hacks.

The only reason I specifically mentioned FireFox was in response to Adokimus' "GO FIREFOX" comment because I wasn't sure if he was aware that FireFox has had the same issues in the past that Safari seems to currently have.

... definitely wasn't trying to claim that the current version of FireFox has any issues, or that FireFox is slow at fixing them. :eek:
 
My only point for saying "google FireFox malicious code" was to back up my statement that all browsers have their moments in time when they're vulnerable to hacks.

The only reason I specifically mentioned FireFox was in response to Adokimus' "GO FIREFOX" comment because I wasn't sure if he was aware that FireFox has had the same issues in the past that Safari seems to currently have.

... definitely wasn't trying to claim that the current version of FireFox has any issues, or that FireFox is slow at fixing them. :eek:

thats fine :). no product is perfect, it all comes down to how fast they got fixed, and how long users getting exposed to the risk. So far, apple falls behind...
 
The Vista and Ubunut machine were not hacked on the 1st or 2nd day.
Shane Macaulay, who was Dai Zovi's co-winner last year, spent much of Thursday trying to hack into the Fujitsu Vista laptop, at one point rushing back to his Vancouver area home to retrieve a file that he thought might help him hack into the system.
But it was all in vain. AS OF THURSDAY THE VISTA AND UNBUNTU MACHINES WERE NOT BROKEN INTO. Only the Mac. On friday when they change the rules then all the machines will most likely be hacked. If Vista was so bad then how come it was not hacked on the first or second day?

I own Vista, Xp, Ubuntu and Apple computers. I think I am going to turn them all off and hide them under the bed. I'm scared just turning on a computer these days. Please Mr Hacker don't steal my credit card number.
 
thats fine :). no product is perfect, it all comes down to how fast they got fixed, and how long users getting exposed to the risk. So far, apple falls behind...

So far, as far as we know, no OSX user is "exposed" to risk, so Apple is not behind. Windows users are, its just that no new zero-day exploit has been found.
 
I didn't know what forum to put it in. I guess the guy who did it is a big apple fans and just wants to strengthen the OS.

No. He is a greedy bastard who did it for the money (10K and a MBA for his trouble) and sat on the exploit for weeks rather then report the issue so it could be fixed in the last update.

Don't try and make him out to be some kind of hero.

However, standard web rules apply. Be careful what you click on. The question is - will this exploit still work on a Mac where the standard precautions have been taken...

1. Turn on Firewall (and use another in your router)
2. Don't run as an admin account
3. Turn off Safari auto open
 
So far, as far as we know, no OSX user is "exposed" to risk, so Apple is not behind. Windows users are, its just that no new zero-day exploit has been found.

well. if you want to redefine "exposed to risk" and "behind", wait until ur definition get recognized by majority of tech ppl. before that. lets follow the tradition:
"expose to risk" means product has hole. no patch from maker yet.

"behind" means taking longer time to patch.

after all. windows was criticized this way. and no criminal will let u know exactly when they are going to use which hole to exploit u. thats why its called a "risk".
 
I own Vista, Xp, Ubuntu and Apple computers. I think I am going to turn them all off and hide them under the bed. I'm scared just turning on a computer these days. Please Mr Hacker don't steal my credit card number.

Back "in the day" I had an invulnerable XP workstation. No AV. No Firewall.

No network connection.

Very secure system
 
You know, the reason I left windows really wasn't just security, although a big part of it. It was all the bugs and it being for the most part a big pain in the butt. :rolleyes: I so much prefer Linux and Mac os X to using windows now that I don't care if Vista is more secure or not. All that being said, patch Safari now Apple and do a better job with this stuff!!!!!!

P.S. To all you windows vista trolls that hate apple so bad, just because you cant afford a apple computer doesn't mean you have to hate apple. And I know a huge percentage of you fall in this category.
 
26% of vista crashes in 2007 were due to nvidia drivers.

I have an xp box with nothing but steam and anti-virus for gaming. I have all the stable drives, everything set up fine. I ONLY use it for gaming, and it is very, very stable.

It is only when you begin adding a bunch of programs and stuff that it turns to crap.
 
I'm interested to know about the exploit. I'm sure we'll hear details as soon as it has been patched.
 
You know, the reason I left windows really wasn't just security, although a big part of it. It was all the bugs and it being for the most part a big pain in the butt. :rolleyes: I so much prefer Linux and Mac os X to using windows now that I don't care if Vista is more secure or not. All that being said, patch Safari now Apple and do a better job with this stuff!!!!!!

P.S. To all you windows vista trolls that hate apple so bad, just because you cant afford a apple computer doesn't mean you have to hate apple. And I know a huge percentage of you fall in this category.




I don't think that is the case at all. I built a custom pc so I could run Crysis close to a top level. Some people just like to build their own stuff. With apples its all about what they want you to have. I can afford Apples, Windows and Linux computers so I use all of them. At the time I built my pc you could not get an Apple that would run windows games as well.
 
26% of vista crashes in 2007 were due to nvidia drivers.
I have an xp box with nothing but steam and anti-virus for gaming. I have all the stable drives, everything set up fine. I ONLY use it for gaming, and it is very, very stable.

It is only when you begin adding a bunch of programs and stuff that it turns to crap.

Funny thing is I have been using Vista since day 1 and have had zero crashes like what happens in XP every hour.
 
let me know when you found a more ridiculously fanboish website than roughlydrafted, even macdailynews looks much better than that.

your opinion which means less to me than anything Daniel writes on his site. Tell me how that "security contest" has any real world application other than FUD and impress us all with your knowledge.
 
"expose to risk" means product has hole. no patch from maker yet.

To me, exposed means that if I am browsing with Safari there is a chance, however small, that I will run into trouble from an exploit. This is not the case right now on OSX.
 
your opinion which means less to me than anything Daniel writes on his site. Tell me how that "security contest" has any real world application other than FUD and impress us all with your knowledge.
whatever, tell people not to look at fact, rather than speculating the "politics" behind it, is, ridiculous, "Dan" is a obvious apple fanboy, every post he wrote, every comparison he made, all disregard the favorable data/facts of opponent,

not attack vista because MS give money to the contest? why not "not attack vista because he can do it faster on MBA?(as hacker himself said so, is "Dan" accusing the hacker lying?)" which is more reasonable? M$ gonna kidnap him, deny him reward? or what? not to mention "M$ sponser" is only a rumor.

Apple sponsers (maybe write itself) the revised iBench to test its safari to be "fastest browser alive", is Dan or you gonna take it as a joke as well?

maybe what he said means alot to you, but what he said means little to the truth.

To me, exposed means that if I am browsing with Safari there is a chance, however small, that I will run into trouble from an exploit. This is not the case right now on OSX.

I do understand your point, however, what you said is a situation that is very difficult to judge, for windows Vista, under your definition, how many ppl are at risk? nobody knows! Hackers won't tell you when they decide to exploit your computer, as long as the security hole is out in the wild, they can do it. And thats a "risk".

Its not about individuals, its about how we can fairly look at the security of OSes at a large scale.

EDIT, UPDATE:

Vista is compromised through Adobe Flash security hole on 3rd day (after the 3rd party app is allowed)!

Ubuntu is the final one standing.
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.