5 ms·
The fact that private APIs can crash the device, access private data or cause issues with the network means Apple hasn't done their job in securing the OS. If O
by ryanpetrich 17y ago
The fact that private APIs can crash the device, access private data or cause issues with the network means Apple hasn't done their job in securing the OS. If OS X allowed processes in unprivileged user accounts access to hardware or other users' files, that would be considered a massive security hole
- drewcrawford 17y agoYou don't need to be root to rm -rf ~/
- lukifer 17y agoThe vulnerability was due solely to users running SSH (which is not installed except by jailbreaking) without changing the default root password. It's surprising that such a gaping security hole took as long as it did to be widely exploited.