Linked by Thom Holwerda on Sat 7th Apr 2012 23:26 UTC
We don't normally report on security issues, especially not when they occur on Mac OS X. So far, the security issues on the Mac can barely be labelled as such, and really don't deserve a lot of attention. Now, however, it would appear we're looking at the first successful widespread malware infection on Mac OS X. Not a bad track record for an eleven year old operating system, by the way.
Thread beginning with comment 513208
To read all comments associated with this story, please click here.
To read all comments associated with this story, please click here.
Member since:2011-01-28
leech,
"But this particular case is because of Java, which is a security crapfest in itself, even more so since Apple rolls their own."
You are correct, and some of the vulnerabilities against macs do seem to be third party related. Note though that apple was always eager in it's advertising to group together all malware under the "windows" umbrella regardless of whether microsoft windows was at fault or not.
Now, that view has some merit. We can recognize that the windows experience can be worse for end-users regardless of who is responsible for vulnerabilities. However in order to not be hypocrites, apple would have to admit that mac users are in fact affected by malware.
To be honest though, apple's portrayal of being impervious to malware is far more appalling (to me) than their security track record, which is still respectable in context. On the other hand, the fact that they deny any security risks is a disservice to the mac community who are ill prepared to cope when things like this inevitably happen.
Member since:2007-02-18
Note though that apple was always eager in it's advertising to group together all malware under the "windows" umbrella regardless of whether microsoft windows was at fault or not.
Now, that view has some merit. We can recognize that the windows experience can be worse for end-users regardless of who is responsible for vulnerabilities. However in order to not be hypocrites, apple would have to admit that mac users are in fact affected by malware.
Now, that view has some merit. We can recognize that the windows experience can be worse for end-users regardless of who is responsible for vulnerabilities. However in order to not be hypocrites, apple would have to admit that mac users are in fact affected by malware.
That's a good point.
Apple can't have it both ways, but Jobs knows they'll try.
Member since:2006-01-10
leech,
You are correct, and some of the vulnerabilities against macs do seem to be third party related. Note though that apple was always eager in it's advertising to group together all malware under the "windows" umbrella regardless of whether microsoft windows was at fault or not.
Now, that view has some merit. We can recognize that the windows experience can be worse for end-users regardless of who is responsible for vulnerabilities. However in order to not be hypocrites, apple would have to admit that mac users are in fact affected by malware.
To be honest though, apple's portrayal of being impervious to malware is far more appalling (to me) than their security track record, which is still respectable in context. On the other hand, the fact that they deny any security risks is a disservice to the mac community who are ill prepared to cope when things like this inevitably happen.
You are correct, and some of the vulnerabilities against macs do seem to be third party related. Note though that apple was always eager in it's advertising to group together all malware under the "windows" umbrella regardless of whether microsoft windows was at fault or not.
Now, that view has some merit. We can recognize that the windows experience can be worse for end-users regardless of who is responsible for vulnerabilities. However in order to not be hypocrites, apple would have to admit that mac users are in fact affected by malware.
To be honest though, apple's portrayal of being impervious to malware is far more appalling (to me) than their security track record, which is still respectable in context. On the other hand, the fact that they deny any security risks is a disservice to the mac community who are ill prepared to cope when things like this inevitably happen.
Yeah that was kind of my point, in that even though it technically was "Java's fault" which some Apple fans (of which I am the exact opposite, I hate Apple, and their products), it was inevitably Apple's fault anyhow 'cause they're not even using Oracle's Java.
It's like a double whammy for 'em. And for their users.
Reminds me of the one I read about where a Mac could act as the Mac authentication server and grab all of the login names and passwords on a network. I can't recall the exact specifics of that, but I was talking to my older brother (he's a jerk with a Mac) and he was saying "at least it's not Stuxnet." Yeah, Stuxnet affected a particular hardware platform, not just Windows (if I'm recalling correctly) but that's the gist of how Apple fans think.
'Oh, well aren't our faces red... but LOOK how much worse it is for Windows!!!' 'Yeah, but uhm, I've been asking you for years why you don't use Linux, especially since you work for a security firm?' 'Uhm, well my Mac will do all that and is secure...'
Well, this is the same guy (yeah my older brother...) that replied a long time ago when I asked him why he didn't use Linux, and he said he couldn't get his printer working... of course I had to ask which model..
It was an HP! They have probably the best Linux support out there... I just shook my head and walked away.
Member since:2005-07-06
...
But this particular case is because of Java, which is a security crapfest in itself, even more so since Apple rolls their own.
But this particular case is because of Java, which is a security crapfest in itself, even more so since Apple rolls their own.
I'm not sure why java should be the root of the problem. Sure, java like any software sometimes containes bugs that might be malignant, but unlike most other software Java is designed to keep close control over what java code is allowed to do. So running java is not worse than running any other program.
The real root of the problem here is not java, but that people download unknown software over the net, in combination with insecure operating systems that forbids certain things that can be dangerous, instead of allowing things that are not dangerous (making anything not explicitly allowed forbidden).
It doesn't matter if it is java, flash, or even your webbrowser that does it, this behaviour will always be associated with a risc, even though I agree with you that Apple rolling their own version of java is a bad thing as fewer people will test it, and bugs fixed by Oracle doesn't directly end up in the Apple version.
News
Linked by Thom Holwerda on 05/24/13 14:44 UTC
"Sources have described iOS 7 as 'black, white, and flat all over'. This refers to the dropping of heavy textures and the addition of several new black and white user interface elements." I couldn't be happier.
Linked by Thom Holwerda on 05/23/13 23:22 UTC
"Ilja van Sprundel, a security researcher with IOActive, has discovered a large number of issues in the way various X client libraries handle the responses they receive from servers, and has worked with X.Org's security team to analyze, confirm, and fix these issues."
Linked by Thom Holwerda on 05/23/13 22:04 UTC
"Google is facing a new antitrust probe by the U.S. Federal Trade Commission into whether the company is using its leadership in the online display-advertising market to illegally curb competition, people familiar with the matter said." Sucks to be Google today, apparently.
Linked by Thom Holwerda on 05/23/13 22:01 UTC
"In the midst of the major press blitz surrounding its annual I/O Conference, Google dropped some unfortunate news about its instant messaging plans. In several places around the web, the company is replacing the existing 'Talk' platform with a new one called 'Hangouts' that sharply diminishes support for the open messaging protocol known as XMPP (or sometimes informally Jabber), and also removes the option to disable the archiving of all chat communications. These changes represent a switch from open protocols to proprietary ones, and a clear step backward for many users." That's why I always say: only suckers trust companies.
Linked by Thom Holwerda on 05/23/13 17:52 UTC
"The wave of departures is a sign of internal struggle, but amidst all the bad news, there is a glimmer of hope. According to an anonymous HTC executive cited by WSJ, the crucial HTC One is selling 'pretty good so far'. The executive revealed that HTC sold about five million One units since launch, a performance that is deemed encouraging. However, sales have been limited by the persisting supply issues that still plague the production of the HTC One." Finally some good news for HTC. Five million units amidst supply constraints is very impressive.
Linked by Thom Holwerda on 05/22/13 22:23 UTC
"Sony gave the PS4 50% more raw shader performance, plain and simple (768 SPs @ 800MHz vs. 1152 SPs & 800MHz). Unlike last generation, you don't need to be some sort of Jedi to extract the PS4's potential here. The Xbox One and PS4 architectures are quite similar, Sony just has more hardware under the hood. Weâll have to wait and see how this hardware delta gets exposed in games over time, but the gap is definitely there. The funny thing about game consoles is that itâs usually the lowest common denominator that determines the bulk of the experience across all platforms. On the plus side, the Xbox One should enjoy better power/thermal characteristics compared to the PlayStation 4. Even compared to the Xbox 360 we should see improvement in many use cases thanks to modern power management techniques." AnandTech does its usual in-depth thing.
Linked by Thom Holwerda on 05/22/13 13:38 UTC
"The Verge has learned that HTC's Chief Product Officer, Kouji Kodera, left the company last week. Kodera was responsible for HTC's overall product strategy, which makes the departure especially notable on the heels of the global launch of the make-or-break One. It's not just Kodera. In the past three-odd months, HTC has lost a number of employees in rapid succession." I really hope HTC pulls it together.
Linked by Thom Holwerda on 05/22/13 13:30 UTC, submitted by JRepin
"It is with huge pleasure that the Debian GNU/Hurd team announces the release of Debian GNU/Hurd 2013. This is a snapshot of Debian 'sid' at the time of the Debian 'wheezy' release (May 2013), so it is mostly based on the same sources. It is not an official Debian release, but it is an official Debian GNU/Hurd port release." Important note: 75% of Debian packages are supported bu Debian GNU/Hurd. Impressive.
Linked by Thom Holwerda on 05/21/13 22:06 UTC
"The first killer app was VisiCalc. This early spreadsheet turned the Apple II from a hobbyist toy to a business computer. VisiCalc came with room for improvement, though. In addition, a new architecture and operating system, the Intel-based IBM PC and MS-DOS, also needed a spreadsheet to be taken seriously. That spreadsheet, released in early 1983, would be Lotus 1-2-3, and it would change the world. It became the PC's killer app, and the world would never be the same. On May 14, IBM quietly announced the end of the road for 1-2-3, along with Lotus Organizer and the Lotus SmartSuite office suite. Lotus 1-2-3's day is done." Impressive 30 year run.
Linked by Thom Holwerda on 05/21/13 21:45 UTC
"There's a disconnect between how Apple CEO Tim Cook sees his company's tax strategies and how some members of the US Senate view it. That became clearer than ever today after Cook and two other Apple executives testified before Congress, explaining why they're holding most of their international income in Irish subsidiaries like Apple Operations International, which declare no tax residency anywhere in the world. AOI hasn't filed a tax return anywhere in the world for the last five years, yet it earned $30 billion in income from 2009 to 2012, according to a Senate report released yesterday." Just because something is legal, doesn't mean it's just. Apple, Google, Microsoft, and many more - these companies might not be breaking any laws, but it's obvious to anyone that what they are doing is scummy.More News »
Sponsored Links
Member since:
2006-01-10
Well besides the funny of Macs getting a major blast here, even though it's happened plenty of times in the past..
Firstly, they prove more than anything that their security ideas have always been that no one will hit us 'cause we're a minority. Some of the security vulnerabilities that have hit Mac OS are seriously laughable.
But this particular case is because of Java, which is a security crapfest in itself, even more so since Apple rolls their own.