Forum Home
PC World Chat
 
Thread ID: 82055 2007-08-14 21:24:00 Oh no, they are everywhere!! or was that winmacguy?? The_End_Of_Reality (334) PC World Chat
Post ID Timestamp Content User
581118 2007-08-14 21:24:00 Heya Peeps :D

I was on my way to work on the train this morning and a guy sat next to me... he asked about my choice of MP3 player (Creative Zen Vision M) and why I had not got an Apple iPod... I explained the various reasons... then he asked if I have a Mac... no... explained I am a gamer etc... Then he starts going on about the iPhones...

Winmacguy, what are you doing down in Welly??? :p

:lol:
The_End_Of_Reality (334)
581119 2007-08-14 21:27:00 Heya Peeps :D

I was on my way to work on the train this morning and a guy sat next to me... he asked about my choice of MP3 player (Creative Zen Vision M) and why I had not got an Apple iPod... I explained the various reasons... then he asked if I have a Mac... no... explained I am a gamer etc... Then he starts going on about the iPhones...

Winmacguy, what are you doing down in Welly??? :p

:lol:
I can see where you went wrong. Buy a car
plod (107)
581120 2007-08-14 21:50:00 I can see where you went wrong. Buy a car Ha ha ha, I have got a car... only it is more practical and cost effective to take the train... (I am so close to the train station it is not funny) The_End_Of_Reality (334)
581121 2007-08-14 21:52:00 I love it TEoR! :lol: :thumbs:

(and GO Creative Zen Vision M!)
Greg (193)
581122 2007-08-14 22:01:00 Here's one for WinMacFanatic:

Macs are easy to hack: researcher
www.zdnet.com.au

"Macs are as easy to hack as they are to use", according to researcher Charles Miller.

Miller and his colleagues at Independent Security Evaluators discovered the first known vulnerability within the Apple iPhone.

During his presentation, "Hacking Leopard: Tools and techniques for attacking the newest Mac OS X, at the recent Black Hat Briefings, Miller said that for some reason the Mac OS has over 50-plus suid root programs.

Suid stands for "set user ID" and is used to temporarily elevate privileges to perform a specific task such as running executables.

Given the root access provided by these tools, they provide at least one vector for attack.

Another vector is Safari, which when opened, also opens several applications including: Address Book, Finder, iChat, Script Editor, iTunes, Dictionary, Help Viewer, iCal, Keynote, Mail, iPhoto, QuickTime Player, Sherlock, Terminal, BOMArchiveHelper, Preview and DiskImageMounter.

A flaw in any one of these could be easily exploited over the Web. That's because Apple's operating system doesn't randomise the location of the stack, the heap, the binary image or the dynamic libraries, meaning an attacker would know where in memory these applications are loaded on almost every machine running Mac OS X.

Open source is yet another vector for new attacks on Apple Macs.

Miller said that on July 31 Apple did update its version of Samba -- but for the first time in two and half years, and the latest version still fell short of the current open-source version.

Miller said his formula for finding a zero-day flaw on a Mac is this: "Find an open-source package that they use that's out of date--there's, like I said, plenty of those."

He then suggested reading through the change log for the current version of any of the above open-source software to find a useable bug that's been fixed in the newer version but still vulnerable to Mac OS X users.

Miller said by doing this, "you won't have to worry about static analysis or fuzzing or any of that stuff".

Several attempts to contact Apple for comment on this story went unanswered.
pctek (84)
581123 2007-08-14 22:12:00 Several attempts to contact Apple for comment on this story went unanswered.

Obviously Apple didn't expect this to happen so soon. :thumbs:
intel hunter (6666)
581124 2007-08-14 22:12:00 I love it TEoR! :lol: :thumbs:

(and GO Creative Zen Vision M!) :D He he he :D

Yeah Zen Vision M FTW

Great info there pctek :thumbs:
The_End_Of_Reality (334)
581125 2007-08-14 22:48:00 .

Suid stands for "set user ID" and is used to temporarily elevate privileges to perform a specific task such as running executables.

I didn't think mac's ran executable(.exe) files. If that was what you were meaning
plod (107)
581126 2007-08-15 03:34:00 Heya Peeps :D

I was on my way to work on the train this morning and a guy sat next to me... he asked about my choice of MP3 player (Creative Zen Vision M) and why I had not got an Apple iPod... I explained the various reasons... then he asked if I have a Mac... no... explained I am a gamer etc... Then he starts going on about the iPhones...

Winmacguy, what are you doing down in Welly??? :p

:lol:

Wasn't me. He even sounds more enthusiastic than me.:eek:
winmacguy (3367)
581127 2007-08-15 03:36:00 Here's one for WinMacFanatic:

Macs are easy to hack: researcher
www.zdnet.com.au

"Macs are as easy to hack as they are to use", according to researcher Charles Miller.

A flaw in any one of these could be easily exploited over the Web. That's because Apple's operating system doesn't randomise the location of the stack, the heap, the binary image or the dynamic libraries, meaning an attacker would know where in memory these applications are loaded on almost every machine running Mac OS X.
I guess that is why there are so many reports in the news of Mac users being hacked all the time.... like not.:rolleyes:
winmacguy (3367)
1 2 3 4