Linked by Thom Holwerda on Fri 20th Mar 2009 13:51 UTC, submitted by google_ninja
Privacy, Security, Encryption Fresh from winning the PWN2OWN contest yesterday, Charlie Miller has been interviewed by ZDNet. He talks about how Mac OS X is a very simple operating system to exploit due to the lack of any form of anti-exploit features. He also explains that the underlying operating system is much more important in creating a successful exploit than the bowser, why Chrome is so hard to hack, and many other things.
Thread beginning with comment 354552
To view parent comment, click here.
To read all comments associated with this story, please click here.
RE[2]: Operating System Security
by broch on Mon 23rd Mar 2009 14:39 UTC in reply to "RE: Operating System Security"
broch
Member since:
2006-05-04

[quote]Umm, I don't know what version of Mac OS X you are using but according to Apple's own documentation they implement sandbox, ASLR technology...[/quote]

hmm.., no
Apple introduced in Leopard incomplete ASLR by refusing to randomize the location of the code, stack, and 32-bit executables don't have heap-execute protection
only thing they did in Leopard is limited to library randomization

And most OS X apps are still 32-bit

Reply Parent Score: 2