Linked by Thom Holwerda on Fri 20th Mar 2009 13:51 UTC, submitted by google_ninja
Privacy, Security, Encryption Fresh from winning the PWN2OWN contest yesterday, Charlie Miller has been interviewed by ZDNet. He talks about how Mac OS X is a very simple operating system to exploit due to the lack of any form of anti-exploit features. He also explains that the underlying operating system is much more important in creating a successful exploit than the bowser, why Chrome is so hard to hack, and many other things.
Thread beginning with comment 354203
To view parent comment, click here.
To read all comments associated with this story, please click here.
RE[3]: Operating System Security
by Adam S on Fri 20th Mar 2009 20:45 UTC in reply to "RE[2]: Operating System Security"
Adam S
Member since:
2005-04-01

"OSX is unsecure, there are almost no hurdles to jump through to take control of a system"


Actually, he didn't say "take control." He said exploit. And really that's the issue: if the exploit is just that it can read a given site's cookie, or that it can write a non-executable file or something, that's not nearly as serious.

Reply Parent Score: 1

ciplogic Member since:
2006-12-22

What if it stoles your card data you are used to register to buy books from Amazon? Would you feel much safer that you know that your World of Warcraft is not attacked by the browser's exploit?

Reply Parent Score: 0

Adam S Member since:
2005-04-01

Assuming that's what actually happens, of course not. But a "vulnerability" doesn't mean he got access to all cookies, and it doesn't mean he had root on the system. Although, certainly if he found a buffer overflow, which is what it sounds like, that's not good.

However, there are plenty of vulnerabilities that don't expose your entire system.

Reply Parent Score: 2

Adam S Member since:
2005-04-01

Also interesting that you modded me down as "inaccurate." What exactly did I say that was inaccurate?

Reply Parent Score: 2