I don't get it. Wasn't it just a pointer to Apple's already published page, which described how to get the update?
Got a tip for us?
Let us know
Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
Security Update 2008-005 Released
- Thread starter MacRumors
- Start date
- Sort by reaction score
I don't get it. Wasn't it just a pointer to Apple's already published page, which described how to get the update?
What are the ads everyone is talking about? Does it have something to do with the Security Update? I don't see any Home Depot ads.
Ah-ha! There's your culprit. Computers nowadays need swap space on the disk to function properly. As a rule of thumb, always keep 10% of your drive free. More disk cache... and OSX has been known to throw out all the preferences once it runs out of space (though it might not anymore, last I heard about that was 10.2).
On the main macrumors page there are often "tech" related ads, but the day this was posted there was a couple of Home Depot ads (my depend on where in the world you are). Mainstream advertisers are very selective as to where they spend their advertising dollars so this is actually a great thing, it shows that macrumors has become a high profile site... to more than just us of course.
Thanks for the response. That explains it. I've never seen an ad of any kind of MacRumors, so I wasn't aware they had any advertising.
My imac is also stuck at the blue screen after the itunes and security update. Not sure which one is causing this
It happened the first time and I held the power button, but it stopped at blue screen at start up again. I went to look on macrumors for about 15 minutes on my macbook, when I came back the was at the log on screen and now appears to be working correctly
It happened the first time and I held the power button, but it stopped at blue screen at start up again. I went to look on macrumors for about 15 minutes on my macbook, when I came back the was at the log on screen and now appears to be working correctly
Apple is playong MS old favorite trick of not patching correctly yet again.
The DNS Flaw still fully exists and apple have become money hungry and SJ needs his rear end kicking over this mess.
More info here
http://www.computerworld.com/action...leBasic&articleId=9111363&intsrc=news_ts_head
Come on apple and SJ pull the crappy finger/s out and fix the issue fully for god dam sack.
The DNS Flaw still fully exists and apple have become money hungry and SJ needs his rear end kicking over this mess.
More info here
http://www.computerworld.com/action...leBasic&articleId=9111363&intsrc=news_ts_head
Come on apple and SJ pull the crappy finger/s out and fix the issue fully for god dam sack.
My computer has been stuck at that screens for hours. I tried to restore from time machine and my OS X install disc, but when I choose RESTORE from the UTILITIES menu, nothing happens.
I am out of warranty and AppleCare, but this is all Apple's fault, so I'm sure they'll fix it, right? Right?!
Does ANYONE have ANY suggestions for me?
You'd expect MS to be fast by now. They've had lots of practice at fixing things.
You know what, the more infuriating thing is that Kaminsky actually told apple about this vulnerability when he found out. As in, he told MS, Cisco, Apple, ISC.......basically that multivendor patch a few weeks ago? Apple should have been part of that group.
Apple was the one who chose to really hold off on even saying anything until now, and it seems that port randomization wasn't even included. How insane.
Sorry you're having such a problem. Maybe email to MacFixit might get you a suggestion?
http://www.macfixit.com/article.php?story=20080801093419294
I installed the update on three systems: Macbook (10.5.4), iBook (10.4.11), PowerMac G4 (10.5.4). Everything went smoothly.
Eh, it doesn't sound fantastical to me, it sounds like a keylogger. Combined with some fairly standard phishing techniques. Doesn't make it true, but doesn't sound at all implausible, either. A google search for [phishing whaling] gets plenty of hits, so the term seems to be a real one. You can't believe everything you hear, but you can't dismiss it out of hand, either.
Saw this on Google's news page. Any comments?
The Cupertino, Calif.-based vendor rolled out Security Update 2008-005, a fix that Apple said plugs several security holes, including its implementation of the BIND (Berkeley Internet Name Domain) server, which left users of its Mac OS X operating system susceptible to the DNS flaw disclosed earlier this month.
However, several security researchers Friday said Apple's DNS patch doesn't actually fix the problem and that Mac users are still at risk.
"Did Apple forget to patch something? By the look of things, the DNS client on the OSX 10.4.11 distribution still has not been patched," said security researcher Andrew Storms, director of security operations at Ncircle Network Security, in a blog post.
http://www.crn.com/security/209901785
The Cupertino, Calif.-based vendor rolled out Security Update 2008-005, a fix that Apple said plugs several security holes, including its implementation of the BIND (Berkeley Internet Name Domain) server, which left users of its Mac OS X operating system susceptible to the DNS flaw disclosed earlier this month.
However, several security researchers Friday said Apple's DNS patch doesn't actually fix the problem and that Mac users are still at risk.
"Did Apple forget to patch something? By the look of things, the DNS client on the OSX 10.4.11 distribution still has not been patched," said security researcher Andrew Storms, director of security operations at Ncircle Network Security, in a blog post.
http://www.crn.com/security/209901785
"Application Enhancer" - hackware used by third parties which caused problems with MacOS X 10.5.x in the past.
And if you spent time reading the various stories, this has been posted in the follow up comments section:
Gregg,
The researchers you've talked with are simply incorrect in their statements. The DNS cache poisoning weakness affects caching recursive resolvers, not client stub libraries.
If you're familiar with the details of Dan's attack (which I won't repeat here), you'll realize that it does not affect any resolver mechanisms that do not employ caching of authoritative NS records.
Apple is in the clear here and the various reports have been hugely mistaken. Feel free to contact me if you need more information.
Regards,
Jon Oberheide
Considering all the problems during the MobileMe launch, caused at least in part, by people irresponsibly posting links to the downloads of Apple updates as opposed to letting Apple inform the users themselves though the software update feature, I continue to believe that the posting of these links by MacRumours staff is both irresponsible and incomprehensible.
Why not just let people install the updates in the order that Apple wants them to and at the time that Apple wants them to? what the heck is software update for if not that?
There are tons and tons of "regular" users out there that read this board that don't need to be screwing up their computers by blindly following vague directions and suggestions from self-styled "insiders." While in this particular case it's a single security update and the sequence of the install is irrelevant, as a practice, posting these links is just plain old irresponsible IMO.
Okay, now I've said it, let the hating and the dissing begin!
Please note that if you want to send me a personal note of hate for this comment that I usually keep my PM box clean and empty, so ...
hate away!
.
I didn't see the links posted, but where they taken from the software update XML, or just from links posted at: http://www.apple.com/support/downloads/ ?
There's not much wrong with the former, and nothing wrong with the latter...
I've read where some are having problems when installing this update and it causing crashing etc. but is anyone having a problem where during install you get a message saying that the file is corrupt????? Something to do with the security signature from Apple being corrupted or changed???? BTW, I've been trying to install directly from Software Update. I have downloaded the update from the Apple download page but am hesitant to attempt to install. The download I have is the security update for PPC....I have a G5 PPC. Any thoughts on this? Cheers
08/03/08 Just an update. Was finally able to download and install the security update using software update. All went well and have not had any of the "crashing" problems that others have reported. Just makes me wonder why I kept getting corrupted files using software update. Oh well, all is well. Cheers
08/03/08 Just an update. Was finally able to download and install the security update using software update. All went well and have not had any of the "crashing" problems that others have reported. Just makes me wonder why I kept getting corrupted files using software update. Oh well, all is well. Cheers