MacRumors
Dec 1, 01:56 PM
http://www.macrumors.com/images/macrumorsthreadlogo.gif (http://www.macrumors.com)
Last month's Month of Kernel Bugs (http://projects.info-pull.com/mokb/) (MOKB) has concluded, and a total of 10 Mac OS X vulnerabilities has been found. The vulnerabilities were wide-ranging, from a wireless driver exploit (http://www.macrumors.com/pages/2006/11/20061102085906.shtml) to a system call (http://www.macrumors.com/pages/2006/11/20061111185646.shtml), multiple disk image vulnerabilities (http://www.macrumors.com/pages/2006/11/20061121195941.shtml), and most recently an AppleTalk vulnerability (among others). Apple patched the first wireless driver exploit (http://www.macrumors.com/pages/2006/11/20061128162852.shtml) along with other unrelated vulnerabilities this week, however all remaining MOKB vulnerabilities remain un-patched.
Interview
MOKB organizer "LMH" spoke to MacRumors about the project. According to LMH, most of the project's time was spent on Linux and the Mac OS, both of which were described as "not hard" to break.
The Linux kernel takes little time to break. I'm more familiar with the code and thus it also takes less time to isolate issues. OS X kernel (XNU) takes less time but depending on the area you're checking, debugging and isolation may require a bit more time (if you take into account that AppleTalk source code is almost unreadable and totally deprecated) [...] I didn't have much time left for working on Microsoft Windows but I've received the most helpful feedback from the MSRC people on potentially interesting stuff to check. Not a huge reference of internal code nor NDA covered documents, but at least enough to start with.
In LMH's point of view, the state of Mac OS X security is not great.
From the technical perspective, OS X security is rather poor, at least when it comes to kernel-land code. This isn't a sign of negligence of Apple, but obviously when you take code from many different places and stick it together, it's prone to problems. Not just new ones but also old issues that 'went under the radar'. [...] (ed note: now comparing MS to Apple) I can say that Microsoft has a more thorough auditing process and investment when it comes to kernel code than Apple. They also have the advantage of having such code being produced within the company. Mac OS X kernel, for example, depends heavily on FreeBSD development. A security flaw in the FreeBSD kernel will likely affect OS X and probably other BSD "flavours"
However, just because LMH is a bit critical of Mac OS X's security, don't call him an Apple-hater.
Taking security arguments apart, I have to say that Mac OS X is a pretty well integrated system. It's tightly packaged [...] and nice looking. I'm an OS X user myself and I certainly feel like Apple has invested long time on tweaking the little details. Now they just have to invest a little more on security matters, but not hiring a 'turnover security firm' to do the consulting that leaves the job half done. That's what failed, IMHO.
First Adware for Mac OS X?
In related news, F-Secure claims to have received what is possibly the first ever proof-of-concept Adware program for Mac OS X (http://www.f-secure.com/weblog/archives/archive-112006.html#00001030). The program, dubbed iAdware, will launch Safari to specified web pages when the user used any number of applications, and installation of the adware did not require admin privileges.
[ Digg This (http://digg.com/apple/Month_of_Kernel_Bugs_Unveils_10_Mac_OS_X_Vulnerabilities) ]
Last month's Month of Kernel Bugs (http://projects.info-pull.com/mokb/) (MOKB) has concluded, and a total of 10 Mac OS X vulnerabilities has been found. The vulnerabilities were wide-ranging, from a wireless driver exploit (http://www.macrumors.com/pages/2006/11/20061102085906.shtml) to a system call (http://www.macrumors.com/pages/2006/11/20061111185646.shtml), multiple disk image vulnerabilities (http://www.macrumors.com/pages/2006/11/20061121195941.shtml), and most recently an AppleTalk vulnerability (among others). Apple patched the first wireless driver exploit (http://www.macrumors.com/pages/2006/11/20061128162852.shtml) along with other unrelated vulnerabilities this week, however all remaining MOKB vulnerabilities remain un-patched.
Interview
MOKB organizer "LMH" spoke to MacRumors about the project. According to LMH, most of the project's time was spent on Linux and the Mac OS, both of which were described as "not hard" to break.
The Linux kernel takes little time to break. I'm more familiar with the code and thus it also takes less time to isolate issues. OS X kernel (XNU) takes less time but depending on the area you're checking, debugging and isolation may require a bit more time (if you take into account that AppleTalk source code is almost unreadable and totally deprecated) [...] I didn't have much time left for working on Microsoft Windows but I've received the most helpful feedback from the MSRC people on potentially interesting stuff to check. Not a huge reference of internal code nor NDA covered documents, but at least enough to start with.
In LMH's point of view, the state of Mac OS X security is not great.
From the technical perspective, OS X security is rather poor, at least when it comes to kernel-land code. This isn't a sign of negligence of Apple, but obviously when you take code from many different places and stick it together, it's prone to problems. Not just new ones but also old issues that 'went under the radar'. [...] (ed note: now comparing MS to Apple) I can say that Microsoft has a more thorough auditing process and investment when it comes to kernel code than Apple. They also have the advantage of having such code being produced within the company. Mac OS X kernel, for example, depends heavily on FreeBSD development. A security flaw in the FreeBSD kernel will likely affect OS X and probably other BSD "flavours"
However, just because LMH is a bit critical of Mac OS X's security, don't call him an Apple-hater.
Taking security arguments apart, I have to say that Mac OS X is a pretty well integrated system. It's tightly packaged [...] and nice looking. I'm an OS X user myself and I certainly feel like Apple has invested long time on tweaking the little details. Now they just have to invest a little more on security matters, but not hiring a 'turnover security firm' to do the consulting that leaves the job half done. That's what failed, IMHO.
First Adware for Mac OS X?
In related news, F-Secure claims to have received what is possibly the first ever proof-of-concept Adware program for Mac OS X (http://www.f-secure.com/weblog/archives/archive-112006.html#00001030). The program, dubbed iAdware, will launch Safari to specified web pages when the user used any number of applications, and installation of the adware did not require admin privileges.
[ Digg This (http://digg.com/apple/Month_of_Kernel_Bugs_Unveils_10_Mac_OS_X_Vulnerabilities) ]
iMeowbot
Jul 25, 12:09 PM
Anyone considered how this (technically) will work? How will the iPod detect where your hands are?
This seems to be a refinement of what the iPod and touch pads have been doing all along. Right now those can detect your finger through an insulated plastic layer, and even through clothes on top of that.
The main difference here would seem to be in smarter software that can do something useful with smaller changes in the electrical fields.
This seems to be a refinement of what the iPod and touch pads have been doing all along. Right now those can detect your finger through an insulated plastic layer, and even through clothes on top of that.
The main difference here would seem to be in smarter software that can do something useful with smaller changes in the electrical fields.
DontMacTheGyver
Jul 21, 06:41 AM
JUNE 6TH, isn't it about time this bit of news went away??:rolleyes:
NO
NO
princealfie
Oct 23, 12:26 PM
Disgusting. I think that I'm going to get some sushi instead. No rules there...
Keebler
Dec 31, 11:18 AM
Since when did a persons lifestyle choice become everyone else's business? Jesus, I didn't realize being fat was such an ethical decision... :rolleyes:
And to actually bring in healthcare and politics into this? Seriously? Then you guys should:
1) stop smoking cigarettes,
2) stop eating fast food,
3) stop sitting on your ass typing on mac rumors (maybe go for a run?)
4) avoid ever single carcinogen on the planet, like say, the sun (UV radiation?)...
5) stop driving cars, or doing anything that involves fast or dangerous movement, like say sports?
6) be the perfect most healthy person ever...
...because it's my problem. I'm paying for it in my taxes. HOW COULD YOU BE SO SELFISH!?
This is her choice. It effects her and her family, not you. I forgot how God declared that fat people go straight to hell, because being fat is so evil...
i think you missed my point - it's about her probably having a mental issue thinking her goal is 'ok'.
Raising healthcare is an issue - it's common sense that 'fit' people will probably have a smaller impact on healthcare than someone who is unfit. Being fit doesn't guarantee perfect health, but it's like having a flat tire on a car vs a car without a flat - which one is going to go farther and requires less repairs???
And to actually bring in healthcare and politics into this? Seriously? Then you guys should:
1) stop smoking cigarettes,
2) stop eating fast food,
3) stop sitting on your ass typing on mac rumors (maybe go for a run?)
4) avoid ever single carcinogen on the planet, like say, the sun (UV radiation?)...
5) stop driving cars, or doing anything that involves fast or dangerous movement, like say sports?
6) be the perfect most healthy person ever...
...because it's my problem. I'm paying for it in my taxes. HOW COULD YOU BE SO SELFISH!?
This is her choice. It effects her and her family, not you. I forgot how God declared that fat people go straight to hell, because being fat is so evil...
i think you missed my point - it's about her probably having a mental issue thinking her goal is 'ok'.
Raising healthcare is an issue - it's common sense that 'fit' people will probably have a smaller impact on healthcare than someone who is unfit. Being fit doesn't guarantee perfect health, but it's like having a flat tire on a car vs a car without a flat - which one is going to go farther and requires less repairs???
iMikeT
Oct 18, 05:59 PM
I wish I had the money to invest a couple of months ago when Apple's stock was ~$50.:(
BrianMojo
Aug 15, 04:55 PM
Doing things to improve existing features like many of the things in this thread are what make me happy, I must say.
I worry that with all the graphical trickery and little gizmos the OS is getting too convoluted. I'd very much like to see everything become more integrated and straightforward rather than increasingly complicated. I appreciate options added for power users and I use many myself, but I'm hoping that the essential OS experience does not grow more complicated.
I worry that with all the graphical trickery and little gizmos the OS is getting too convoluted. I'd very much like to see everything become more integrated and straightforward rather than increasingly complicated. I appreciate options added for power users and I use many myself, but I'm hoping that the essential OS experience does not grow more complicated.
BreadMaster
Sep 12, 09:25 PM
http://www.corndogcomputers.com/wp-content/uploads/2009/11/imacslbyjosh.png
2009 i5 Refurb, gets here Tuesday!
Also http://blogs.pitch.com/fatcity/sunkist.solar.fusion.jpg
It wasn't bad!
2009 i5 Refurb, gets here Tuesday!
Also http://blogs.pitch.com/fatcity/sunkist.solar.fusion.jpg
It wasn't bad!
rovex
May 2, 04:35 AM
Great news! Shame its taken so long but at least we got him eventually! :D
Now lets hope this is declared a national holiday and Apple releases the new iMac with a discount to celebrate :D
WE didn't find him, it was our American friends! :D
Now lets hope this is declared a national holiday and Apple releases the new iMac with a discount to celebrate :D
WE didn't find him, it was our American friends! :D
michael.lauden
Oct 21, 12:24 PM
yes i understand the point. but i don't find a reason.
and yes, i do have all the computers in my household contributing to my personal team.
i can't 'compete'. the whole thing is basically it's whoever has a very nice computer/folding rig, or whoever has a nice computer and doesn't use it, but leaves it on to fold. so technically it's not 'competing' because they are computers, you aren't actually doing any work besides for setting up the actual client, and having it run well on your machine.
and yes, i do have all the computers in my household contributing to my personal team.
i can't 'compete'. the whole thing is basically it's whoever has a very nice computer/folding rig, or whoever has a nice computer and doesn't use it, but leaves it on to fold. so technically it's not 'competing' because they are computers, you aren't actually doing any work besides for setting up the actual client, and having it run well on your machine.
!� V �!
Apr 28, 05:24 PM
Here's another way to slice it (literally). Flipped half the image. Left the guidelines on this one as well.
Image (http://www.marulla.com/files/thickness2.png)
I agree that this is no substitute for measuring the actual phone, but, at least in that photo, they are identical. Certainly not off by 1mm as the original post states.
Everyone knows that black is always "slimming." :eek::p;):D
Image (http://www.marulla.com/files/thickness2.png)
I agree that this is no substitute for measuring the actual phone, but, at least in that photo, they are identical. Certainly not off by 1mm as the original post states.
Everyone knows that black is always "slimming." :eek::p;):D
crees!
Dec 1, 03:41 PM
It has been brought to attention that Apple is encrypting certain parts of the OS kernel. Does this have any bearing in this discussion or it is only to make piracy of the OS more difficult?
ThaDoggg
Jan 28, 09:22 AM
yeah im behind the times.
Awesome game...too bad I don't have time to play it anymore.
Awesome game...too bad I don't have time to play it anymore.
Blorzoga
May 4, 05:21 AM
pfft, this should not be front page news, hell not even second page... just a bunch of hearsay from a CR that knows nothing about it and speculates BS.
Yeah, customer service reps are always soooo reliable.
Yeah, customer service reps are always soooo reliable.
twoodcc
Oct 21, 06:25 PM
You just leave the computers on 24/7 just folding. Not everyone does though. Also trying to fold more might influence your farm or purchases. Also trying beta programs is a way to compete. Also being on a team gives you more satisfaction than just your personal crunching.
i agree. the only reason i could see having your own team is if you had a different user for each computer, so that you knew the stats for each system
i agree. the only reason i could see having your own team is if you had a different user for each computer, so that you knew the stats for each system
RiverFox
Oct 4, 09:01 PM
A few things...
I've also had Verizon now for 4 years, and I've maybe during that time had 2 dropped calls. Not bad for 4 years of service.
As a consumer, when is 30% failure rate, acceptable?
And then these femtocells. If they (the provider) can't give you access you're paying for, is it really fair that they charge you on top of what you're already paying, to sell you a device that is supposed to boost the service you're already paying for?
:confused:
I've also had Verizon now for 4 years, and I've maybe during that time had 2 dropped calls. Not bad for 4 years of service.
As a consumer, when is 30% failure rate, acceptable?
And then these femtocells. If they (the provider) can't give you access you're paying for, is it really fair that they charge you on top of what you're already paying, to sell you a device that is supposed to boost the service you're already paying for?
:confused:
Surely
Jan 26, 11:12 AM
Wish I could get my taxes done, worked 3 jobs last year and only got my W2 for one of them :( didnt make much though...probably about 4k so maybe a $200 refund if that. Anyone have a guess? I always mark no dependencies or whatever so they take all the taxes out.
What?
Seriously dude, you're in the wrong thread.
This isn't the "What Is Your Wish?" or "Random Thought For The Day" thread.
What?
Seriously dude, you're in the wrong thread.
This isn't the "What Is Your Wish?" or "Random Thought For The Day" thread.
wordoflife
Nov 4, 07:06 PM
Hopefully $200-300 for Christmas and the same for my sister ... because we want to save up for a 2nd gen iPad,
Lesser Evets
Mar 31, 01:34 PM
I find most of the comments puerile or insane--over reacting with disdain or glee--while the major concern should be the function. I still find iCal a little limited and annoyingly so in terms of notes attached to daily functions.
Who gives a crap how it is decorated! Make the thing work better and it will work better, and that's what matters to real people who need real organization within their lives.
Who gives a crap how it is decorated! Make the thing work better and it will work better, and that's what matters to real people who need real organization within their lives.
0815
May 3, 08:06 AM
Nice upgrade :) ... but I was hoping for an 500GB SSD option :(
BigHat
Aug 1, 12:32 PM
I've had them all since Gen one excpet for the Video. Lost my Nano and gave other away. Now just have a Gen 3. Need a new one here soon when they make a car adaptor for the optical bus equipped BMWs. Gen 3 will go there and the new one will be for home, work and travel.
Is the smart play to wait a month or two?
Is the smart play to wait a month or two?
tdream
Mar 31, 10:53 AM
The iPadification of OSX.
damienvfx
Aug 15, 06:31 PM
What's the main wallpaper look like? Is this going to change before the final release, or is it going to be the same like Vista's Beta?
beebler
Apr 14, 11:06 AM
iPhone 5 will be announced in September along with the iPad 3, which is also planned for that time. I wouldn't be surprised if they pushed the iPad 3 back a little though.
100% sure the iPhone 5 will not be out this summer.
100% sure the iPhone 5 will not be out this summer.