5 ms·
Bringing a pre-made exploit to a contest like this kind of dodges the point of the competition. Maybe an exploit contest could be started after each browser re
by blasdel 18y ago
Bringing a pre-made exploit to a contest like this kind of dodges the point of the competition.
Maybe an exploit contest could be started after each browser revision, where winning submissions must be exploiting a bug introduced by that version of the software.
- anatoli 18y agoWhile I definitely agree with you, I also think that Apple should start more seriously addressing these kinds of problems. So far, unlike Microsoft, they've been very slow to respond. (I'm an Apple-user.)
- sovande 18y ago> I'm an Apple-user Would you mind clicking this link...
- wallflower 18y agoI just got a MacBook (my first). Previously, in Windows land, I logged in as a Limited User all the time (and saved Adminiatrator access for what it should be used for - adding printers, installing software). On the Apple, I run Security Update habitually. What software for virus scanning, additional protection do you recommend?
- thenduks 18y agoNone. Common sense will serve you well, though.
- inklesspen 18y agoThere is no anti-virus software for the Mac worth running, because there are no viruses for OS X. This story is about a security flaw in Safari where the browser can be tricked into executing code.
- Jem 18y agoOuch. A tad naive. http://www.sophos.com/pressoffice/news/articles/2006/02/macosxleap.html http://www.sophos.com/pressoffice/news/articles/2006/02/maco... http://louisgray.com/live/2008/08/i-got-mac-os-x-virus-and-infected.html http://louisgray.com/live/2008/08/i-got-mac-os-x-virus-and-i... Just 2 from a quick google search: http://www.google.co.uk/search?q=mac+os+x+virus http://www.google.co.uk/search?q=mac+os+x+virus
- tvon 18y agoWhile I largely agree with your response, the second link is a trojan, not a virus.
- Jem 18y agoYeah, perhaps I should have read the links instead of just relying on the title. Oops!
- inklesspen 18y agoSecond one's a trojan. First one's a worm; it doesn't actually infect files or disks the way viruses did "back in the day". It relies on tricking the user into executing a program when the user is not expecting to be executing a program. Compare to Windows worms that run automatically, or viruses for Microsoft platforms that infect files that are commonly shared. I repeat my statement that you don't need anti-virus on the Mac. You simply need to have common sense. I don't think it's too naive of a viewpoint. There are legitimate security concerns on the Mac, just as there are on other operating systems. My point was that you don't need cpu-cycle-sucking memory-resident antivirus programs the way you do on Windows.
- Jem 18y agoWorm, trojan, whatever - I didn't read the links, I left that for you to do :) > You simply need to have common sense. I ran Windows ME (of all things) for several years with no AV, using just common sense. So, you don't "need" AV in Windows, but I would definitely recommend it. Although I agree with what you're getting at, both your original comment and this one seems to be relying heavily on stereotypes more than actual fact. That's what I think is naive.
- tptacek 18y agoI don't understand what you think the point of the competition is, or what the point would be to concealing latent vulnerabilities introduced by older versions of Safari that remained present in newer versions.
- Tichy 18y agoThe point for me kind of is that a fully patched OS X can be hacked easily.
- mechanical_fish 18y agoa fully patched OS X can be hacked easily By the folks who go to CanSecWest, anyway.