Remember, son, many a good story has been ruined by over verification - James Gordon Bennett
Two posts showing how to take apart the OS X operating system have been posted in the last week using flaws that the security advisory service Secunia has rated as "extremely critical". The latest was published last night.
The two flaws are in the OS's URI handlers, "help" and "disk", which allow users to run AppleScript and to remotely mount network disks. Using the handler 'disk', script files, could be planted in a known location on a user's system. And using the 'help'handler these scripts could then be executed.
And while Apple users might mock Microsoft for being slow to come up with patches for its patchwork quilt, the INQ has been reliably informed that Job's Mob was told of both these flaws in February. The finder, known as lixlpixel, just heard back from SnApple yesterday saying that a fix would be available 'soon'.
Security researchers often complain that Apple does not react to security threats in a mature manner, often ignoring them.
According to the Sydney Morning Herald, Apple issued a statement saying it took security very seriously. Job's mob's spinsters said that while no operating system can be completely secure from all threats, Apple had an excellent track record of identifying and rapidly correcting potential vulnerabilities.
Well, that is alright then. ยต