you should see a checkbox labeled "Auto Proxy Discovery" In my experience, that box is unchecked by default for a clean installation of El Capitan. So I don't

you should see a checkbox labeled "Auto Proxy Discovery" In my experience, that box is unchecked by default for a clean installation of El Capitan. So I don't think that OS X is vulnerable (unless that box is explicitly changed by an end user). I just found this Apple KB https://support.apple.com/kb/PH18553?locale=en_US https://support.apple.com/kb/PH18553?locale=en_US that instructs users to select that setting if needed. That seems to confirm that the default is off. The Ars Technica article should have been more nuanced. It strongly implies (IMO) that OS X is vulnerable by default.