Linked by Thom Holwerda on Fri 20th Mar 2009 13:51 UTC, submitted by google_ninja
Privacy, Security, Encryption Fresh from winning the PWN2OWN contest yesterday, Charlie Miller has been interviewed by ZDNet. He talks about how Mac OS X is a very simple operating system to exploit due to the lack of any form of anti-exploit features. He also explains that the underlying operating system is much more important in creating a successful exploit than the bowser, why Chrome is so hard to hack, and many other things.
Permalink for comment 354161
To read all comments associated with this story, please click here.
apple is working on it
by puenktchen on Fri 20th Mar 2009 17:42 UTC
puenktchen
Member since:
2007-07-27

well at least i hope that they are and that's the impression which i got.
leopard broughts lots of new security features like sandboxing, mandatory access controls, address space randomization, application signing and execution protection:

http://images.apple.com/macosx/pdf/MacOSX_Leopard_Security_TB.pdf

but it seems like they only laid some of the ground work and didn't really implement it:

Mac OS X Leopard provides executable space protection in stack space on 32-bit Intel processors. Older PPC-based systems are not protected, either by hardware or software. Additionally, heap execute protection is only provided for 64-bit executables


ASLR in Mac OS X Leopard is limited to library randomization. ... By refusing to randomize the location of the code, stack, and heap, Apple has introduced an incomplete ASLR implementation in Mac OS X Leopard.

http://www.laconicsecurity.com/aslr-leopard-versus-vista.html

still way to go, but they not just sitting on their lazy ass either.

Edited 2009-03-20 17:48 UTC

Reply Score: 2