Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.

MacRumors

macrumors bot
Original poster


After security concerns about Apple's new Safari Beta for Windows arose earlier this week, Apple has issued an update to Safari for Windows.

According to Macworld, the update addresses a number of security issues:

The security improvements in Safari Beta 3.0.1 include correction for a "command injection vulnerability," corrected with additional processing and validation of URLs that could otherwise lead to an unexpected termination of the browser; an out-of-bounds memory read issue; and a race condition that can allow cross-site scripting using a JavaScript exploit

The new version is available through Apple's software update or downloaded from Apple's site. The Macintosh version of Safari 3 is not vulnerable to these issues.
 
Time to run Software Update.

Looks like Apple is on the ball when it comes to closing security holes.
 
Not only are they very quick with fixing the security holes, but they fix them before they officially release it, unlike M$.
 
So, did they send out a buggy beta while they had the fixes in the wings just to show the PC world that they can get a fix out within a few days?
If they did do that, was it worth the bad press for the bugs?
 
Hahahaha!

Releasing an update 3 DAYS after the beta went public...

That is seriously the funniest thing I've heard today.
Granted, it is early... but still. 3 days.

Then you toss in "the Macintosh version of Safari 3 is not vulnerable to these issues" and it gets even funnier.
 
So I uninstalled the OSX version for nothin 🙁 When i saw the secuirty issues, i didnt wanna be doing my online banking with the beta.
 
Good to know they're on the ball about this one. Perhaps that'll quell some of the nay-sayers....sadly, I doubt it, though.

So, did they send out a buggy beta while they had the fixes in the wings just to show the PC world that they can get a fix out within a few days?
If they did do that, was it worth the bad press for the bugs?

What? Why would anyone do that? This is beta software...it's going to have bugs...the fact that they're getting such bad press for their BETA software is beyond me.
 
Some of the user feedback that is more relevant to end users has to do with "features" offered by Firefox and Opera. Perhaps Apple could implement some of the features in Safari under an "alternate interface" similar to what "Sprint" did with word processing in the late 80's. That word processor had "interfaces" for Wordstar, Word Perfect, Word, and about a dozen others, while the underlyinjg program was a kernal. It allowed users of "any" word processor to use it with no learning curve, and some users used it to convert files from one format to another.

Rocketman
 
Not only are they very quick with fixing the security holes, but they fix them before they officially release it, unlike M$.

If you think there won't be more Safari patching done post-release, then you're kidding yourself. 😎

I applaud Apple for rectifying the problems quickly...and I still think they need to change their "secure from day one" tagline. 😱
 
To be fair, Firefox has been good about keeping their browser stable, but I'm really glad to see that Apple is making such an effort, as well. Despite the naysayers, this is what's gonna grow Safari's portion of the pie-chart. Kudos, Cupertino!
 
I'm glad they're on this. I mean, I know it's a beta, but you still get the feeling that they wanted this out the door before the iPhone release, and that the calendar got the best of them on this.
 
whatever, this patch is good, apple's Beta debut with a huge PR campaign, the security holes exposes large amount of users to the risks, so a patch is very necessary.

for whoever claim apple patched the hole before "release", please, u are literally betting on apple's final version of safari for windows will NOT have any security hole in the future? Thats just such an ignorant statement.

next step for safari: make it native, make it support localized windows (i heard report saying it doesn't display font correctly with chinese and korean version of windows), make webkit mature, make it more flexible, make tab browsing better.
 
If you think there won't be more Safari patching done post-release, then you're kidding yourself. 😎

I applaud Apple for rectifying the problems quickly...and I still think they need to change their "secure from day one" tagline. 😱

Agree, but "Secure from day three" doesn't have the same ring.
 
Still crashes when you do anything in XP.
So it would seem...

Here's what happens when I'm trying to add a bookmark:

Picture 2.jpg

Fantastic... 🙄
 
Releasing an update 3 DAYS after the beta went public...

That is seriously the funniest thing I've heard today.
Granted, it is early... but still. 3 days.

Then you toss in "the Macintosh version of Safari 3 is not vulnerable to these issues" and it gets even funnier.

Do you know how Betas work?
 
Rumor has it, the execution of command line stuff still works and was not fixed...

Safari works great on my Mac (on OSX). Never crashed, uber fast, way more stable than Firefox. I like it.
 
This is beta software...it's going to have bugs...the fact that they're getting such bad press for their BETA software is beyond me.

Cause they pimped it, and because Apple is branded as "it just works". Combine the two and you get people that don't realize that Safari 3 is still at day < 0

On another note:
I've generally found it to run more smoothly on my XP box than the first version of IE7 that M$ attempted to push out in a windows update.
 
Kinda sad it had bugs in the first place, but happy they got fixed quickly!

Kinda sad it had bugs in the first place? When was the last time you wrote software that doesn't have bugs? I hope that's a joke.....

next step for safari: ... make webkit mature, make it more flexible, make tab browsing better.

What's wrong with their tabbed browsing? I think it works pretty well, and it's definitely a vast improvement over Safari2, and if you want my opinion, I think WebKit is maturing rather nicely. I'd put it up against the Gecko engine just about anyday as far as maturity and standards compliance goes.
 
This is great news. I'm surprised and impressed with Apples quick response, however I think I'll wait a bit longer before downloading it for Windows. I have however been running it on my iBook. It is very much improved over version 2. The two things that kept my using Firefox have been fixed. Searching in place and it now works for me with Gmail which I could not get to work with Safari 2. My only remaining grip is that there is no way to open links in new tabs by default. I would even settle for a keyboard shortcut for the Merge Windows function (which I love) instead.
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.