The Inquirer-Home

More holes discovered in Apple OS X, cor!

Denial is not a river in Egypt
Fri May 21 2004, 09:29
THE CALM arrogance of SnApple users have that the OS X system is somehow more secure than the patchwork quilt that is Windows is taking a quiet battering over at the Full-Disclosure website, here.

Two posts showing how to take apart the OS X operating system have been posted in the last week using flaws that the security advisory service Secunia has rated as "extremely critical". The latest was published last night.

The two flaws are in the OS's URI handlers, "help" and "disk", which allow users to run AppleScript and to remotely mount network disks. Using the handler 'disk', script files, could be planted in a known location on a user's system. And using the 'help'handler these scripts could then be executed.

And while Apple users might mock Microsoft for being slow to come up with patches for its patchwork quilt, the INQ has been reliably informed that Job's Mob was told of both these flaws in February. The finder, known as lixlpixel, just heard back from SnApple yesterday saying that a fix would be available 'soon'.

Security researchers often complain that Apple does not react to security threats in a mature manner, often ignoring them.

According to the Sydney Morning Herald, Apple issued a statement saying it took security very seriously. Job's mob's spinsters said that while no operating system can be completely secure from all threats, Apple had an excellent track record of identifying and rapidly correcting potential vulnerabilities.

Well, that is alright then. µ

Share this:

Comments

There are no comments submitted yet. Do you have an interesting opinion? Then be the first to post a comment.

aboutus
Advertisement
Subscribe to INQ newsletters
Advertisement
INQ Poll

Authorities in several countries raided Megaupload recently, shut down all of its services, seized hundreds of servers and arrested several of its executives on criminal charges.

Do you think the move was justified?