Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
tfaz1 said:
Safari timeout issue still unresolved. Everyday I meet more and more people sufferning though this bug. Very JV, if you ask me.

What issue is that? That Safari always times out after 60 seconds? They fixed that one a while ago (at least, the fix worked on my system).
 
Long Load Time on Reboot

I've seen this with previous updates. Taking 15 plus minutes to reach the log on window on the first restart. It hasn't happened on my home machine so I believe it relates to the network here at work. Interrupting it with a restart works as well as simply waiting it out. Shutdown, then power on doesn't suffer the issue. No ill effects from the update.
 
Installed fine

Just installed it on my 12" powerbook, worked fine, rebooted normally, no lost apps.

I for one am very glad to see such frequent updates, gives me confidence that Apple are not forgetting us computing folk with all the ipod success around.

ta
kb
 
Noiseboy said:
The KB article says that this is for OS 10.2.8 and 10.3.6 I am running 10.3.5 and it doesn't show up in my software update. I am (sadly) still nervous about installing 10.3.6.

oh common dont be chicken,


just backup your stuff and get moving..
 
mazola said:
But what about the Canadian Security Update?

Cheeky Bugger 😛 You expect iTunes and software updates in one day?

Remember, you're in Canada, not the US. Apple doesn't care about you 😉
 
For those people concerned that Security Update = less secure: if you replace the lock on your front door with a more secure design, does that suddenly mean that you're more likely to get burgled, or that the person who installed your previous lock was incompetent?

Or does it just mean that you like to stay ahead of the game?

Just something to think about 😉
 
Just installed here at home... Everything seems to work fine...

Obviously those who think that too many security updates is a bad thing don't write software for a living... 😀

Actually, the point is that being secure requires constant vigilance. Given the fact that a brand new Windows XP SP1 box is compromised in only 4 minutes after being connected to the net means that security is a serious issue. To not fix bugs and release them in a timely manner makes the problem much worse, and costs us all... I wonder what a percentage of ip traffic is Windows BOTS trying to propogate themselves? Would be an interesting stat...
 
Stampyhead said:
No known spyware or anything like that that affects Macs.

I think you're right. Certainly I hope that's still the case. It appears that one of the updates in this package fixes a gaping wide open hole that spyware, if it existed, could use to harvest sensitive info:

Appkit
Available for: Mac OS X v10.3.6, Mac OS X Server v10.3.6, Mac OS X v10.2.8, Mac OS X Server v10.2.8
CVE-ID: CAN-2004-1081
Impact: Characters entered into a secure text field can be read by other applications in the same window session
Description: In some circumstances a secure text input field will not correctly enable secure input. This can allow other applications in the same window session to see some input characters and keyboard events. Input to secure text fields is now enabled in a way to prevent the leakage of key press information.

Yikes! 😱
 
StarbucksSam said:
Well as usual, nothing VISIBLE happened, but I'm not a power user like most of you.

Did you want the Security Update to do cartwheels for you or something????

You'll almost never see any differences with a security update. All the stuff security updates patch are usually little UNIX apps that run in the background. And the Safari ones, most general users won't notice a difference either.
 
Apache
Available for: Mac OS X v10.3.6, Mac OS X Server v10.3.6, Mac OS X v10.2.8, Mac OS X Server v10.2.8
CVE-ID: CAN-2004-1084
Impact: File data and resource fork content can be retrieved via HTTP bypassing normal Apache file handlers.
Description: The Apple HFS+ filesystem permits files to have multiple data streams. These data streams can be directly accessed using special filenames. A specially crafted HTTP request can bypass an Apache file handler and directly access file data or resource fork content. This update modifies the Apache configuration to deny requests for file data or resource fork content via their special filenames. For more information, see this document. Credit to NetSec for reporting this issue.

Umm....

If you're running a web server, this is HUGE.

Basically, if this fix is not applied, anyone can read 1) the contents of any server-side executed file, like PHP scripts, perl scripts, etc. AND 2) bypass any Apache-applied password protection.

If you're unable to apply this fix to your webserver, apply it manually (just a tweak to httpd.conf):

http://docs.info.apple.com/article.html?artnum=300422

Attention to this should be brought in the main post, IMHO. This has the potential to MAJORLY screw things up for some people if left unpatched, especially now that it's out in the open. My site was completely vulnerable, potentially handing out custom PHP scripts, MySQL passwords, the works. Not cool.
 
Frankly, one of the biggest problems with Windows support is their user-base, and how different one machine could be from another. The OS itself isn't at all bad, just different.

As far as security is concerned, I think Apple is wise to update us because of our (finally) growing user-base. As our ranks grow, more and more hackers are going to start to look this way. While we haven't had any Windows-like pandemic outbreaks, we might be looking at one soon if Apple wasn't patching the systems up as fast as they are.

The reasoning of a hacker is that most will play the numbers game when it comes to owning systems and "more is better". At present time we don't yet have critical mass as far as malicious hacking is concerned. Most of our problems had been trivial as best, but one hole can lead to many if not patched on time.

So it's good now, but I'm worried about the future of this (so far) very secure (for online applications) OS.

However, I can't say the same for physical hacks, Mac OS X is way too easy to break into with rudimentary understandings of the OS it scares me. As long as someone can get their hands on your Mac he can hack it.

If you can get your hands on the Government Security Papers on OS X, try reading it. It patches up some serious hole on both the online and the physical side of Mac OS X and is quite a good read for any power-users.
 
Peyote said:
What was the point of that? Are you the forum's "hall monitor"?

Those are valid questions and concerns, regardless of whether or not you think you already addressed them. Maybe you're wrong. Maybe they didn't understand. Doesn't matter.

What are you? The hall monitor of hall monitors? 😀

But seriously, Toe was commenting about how MaCaDDiCT21's post appeared practically a page in like he/she/it hadn't even read ANY of the previous comments which basically if he had, he wouldn't have asked a the question in the first place. Reality is too many peeps here will read the headline to the thread, hit "reply" to it and ask a question that, chances are, was asked once, maybe six dozen times which just adds to fluff and frustration. A good forum member reads ALL the posts THEN hits reply if there if there's something to say. It's just good courtesy.
😉
 
Still waiting for reboot

I installed the update about 20 minutes ago. My 20" G5 iMac is still trying to boot up. The really loud fans are on and the little circle under the Apple logo is just spinning and spinning. I really hope this thing boots up soon! I'm starting to get worried.
 
ohhhh.

tfaz1 said:
Safari timeout issue still unresolved. Everyday I meet more and more people sufferning though this bug. Very JV, if you ask me.


so THAT's what that is. i knew it was something with X cause 9 wasn't doing it when i tried it. but it happens in firefox for me, as well, so it's gotta be something with the system. if it was just safari i would just use firefox.

for people that don't know what we're talking about... there appears to be a bug that causes sites to give a page not found error, but if you click reload they work. it's annoying.

i thought it was just my system being funky, but it seems it was introduced in a late semtember security update.

(i sure hope it didn't affect my dad's computer. it would be extra frustrating for him. [modem, older mac, less adaptable])
 
Photorun said:
What are you? The hall monitor of hall monitors? 😀

But seriously, Toe was commenting about how MaCaDDiCT21's post appeared practically a page in like he/she/it hadn't even read ANY of the previous comments which basically if he had, he wouldn't have asked a the question in the first place. Reality is too many peeps here will read the headline to the thread, hit "reply" to it and ask a question that, chances are, was asked once, maybe six dozen times which just adds to fluff and frustration. A good forum member reads ALL the posts THEN hits reply if there if there's something to say. It's just good courtesy.
😉

whoa, we've got some serious meta-hall-monitor action going on here.
 
Installed on all the machines below with no issues so far.

I did force all maintenance, updated all the prebinding and repaired permissions before the update, though.

*fingers crossed*
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.