Search:  

 
 
   All ForumsHot TopicsGallery






how-to block ads


 
Forums » Up and Running » Security » Security » Highly-critical flaws found in Safari for Windows
 
Search Topic:
  Share Topic:
RSS topic:
 
Posting
toggle:
flat / full
normal / watch
Post a:
Post a:
scanner.virus.org? »
« Security Sofeware Updates - 30 March 2008  
AuthorAll Replies


Transmaster
Onward Through The Fog

join:2001-06-20
Cheyenne, WY

reply to bcastner
Re: Highly-critical flaws found in Safari for Windows

I have been using Safari it just to see what it is like, it is OK but I am not going to blow out FireFox anytime soon. I wonder if the Apple fanatics are despondent that Apple has done this...this traitorous action
--
Send a prayer to Allah, eat Beans.


RadioDoc
Sortofadog
Premium,ExMod 2000-03
join:2000-05-11
Chicago, IL
Looks like Safari may have upset the Apple cart. An undisclosed flaw has allowed OS X to be taken over just by visiting a website.

Not a good day in Cupertino, methinks.
--
Toolmaster of La Grange.

SUMware
Premium
join:2002-05-21

said by RadioDoc See Profile :

Looks like Safari may have upset the Apple cart. An undisclosed flaw has allowed OS X to be taken over just by visiting a website.
Yep. Info here:
»Hackers to challenge Windows, Mac OS X and Linux next week

daveinpoway

join:2006-07-03
Poway, CA

reply to RadioDoc
Before jumping all over Apple, keep in mind that pretty much all browsers (IE, Firefox, Safari, etc.) have had (and received patches for) security problems. The 100% secure browser does not exist yet (with the possible exception of something I was recently reading about, but I have been unable to locate a link to the article on the Internet, so I have been unable to post it here).


Steve
SAS-70 is extortion
Consultant
join:2001-03-10
Tustin, CA

said by daveinpoway See Profile :

Before jumping all over Apple, keep in mind that pretty much all browsers (IE, Firefox, Safari, etc.) have had (and received patches for) security problems. .
Do all browsers come with an arrogant, hubris-filled user base?

SipSizzurp
Time to switch hands.
Premium
join:2005-12-28
Hilo, HI
·RoadRunner Cable

said by Steve See Profile :

Do all browsers come with an arrogant, hubris-filled user base?
No, just the browsers of other forum sites have that problem.


RadioDoc
Sortofadog
Premium,ExMod 2000-03
join:2000-05-11
Chicago, IL
·AT&T Midwest

reply to daveinpoway
said by daveinpoway See Profile :

Before jumping all over Apple, keep in mind that pretty much all browsers (IE, Firefox, Safari, etc.) have had (and received patches for) security problems.
Well, at this state of the art, and especially in Apple's case considering their arrogant, smug advertising campaigns promoting themselves as the purveyor of "safe" and "just works" computing, they had damn well better make sure Safari is not susceptible to such things when it is the default browser supplied with the OS.

Basically what you are saying is Apple's browser and OS is about six years behind Vista and Linux.
--
Toolmaster of La Grange.

daveinpoway

join:2006-07-03
Poway, CA

I looked back over my comments, and I fail to see where I said (or implied) that Apple is 6 years behind anyone. Given that browser flaws are being patched all of the time (as an example, Firefox is praised by many folks in this forum, yet it just received an update this week which addressed some security problems), I fail to see how a current security issue puts Apple any number of years behind anyone else. If I'm wrong, please correct me.

Unfortunately, "at this state of the art", none of the browsers we depend on are completely secure, nor should we expect them to be (if you know of one with 100% security, please tell me, so I can start using it). Given enough time, expertise and motivation, I'm sure that hackers can find exploitable bugs in every single one of them (and, in fact, they have). I recently read that hackers are switching their attention from operating systems to other applications (such as web browsers), so the problem may well get worse.

Having said this, do I believe that Apple (and other companies) should do better? Of course I do!


RadioDoc
Sortofadog
Premium,ExMod 2000-03
join:2000-05-11
Chicago, IL
·AT&T Midwest


edit:
March 28th, @04:16PM

If you didn't see it, try again. You might open your eyes.

Neither of the other platforms suffered this fate. Considering the massive amount of attention paid to browser security both at the consumer and vendor level, Apple releasing such a flawed product in 2008 is a huge deal. Maybe in 2002 this would be understandable or even acceptable, but certainly not today. This is a comparative issue. Your attempt at changing the subject to "100% security" is indicative of a flawed argument.

Firefox is a third party product. It is not bundled with any OS. Maybe when installed on a computer it opens security holes, but that it certainly not the subject of yesterday's challenge. In fact, it would be today's.

Apple ships Safari with OS X, and it is enabled by default. It is essentially part of every Mac. Apple's advertising implies that their product is "safe" and "just works". Safari is probably one of the first programs run on a new Mac. A new user, lulled into a false sense of security, could easily get themselves into trouble by merely websurfing. I don't see that in any Apple ads.

This boils down to a major fault in Safari and OS X. One which should be treated as serious and not downplayed with irrelevant comparisons to unrelated scenarios. The same thing did not happen to Vista or Linux. That's the bottom line.
--
Toolmaster of La Grange.

daveinpoway

join:2006-07-03
Poway, CA

The reason I mentioned "100% security" is that unless a browser can achieve this level, then there will be at least one flaw that a hacker can exploit. Unfortunately, advertising hype notwithstanding, there is no flaw-free software product presently out there, from Apple, Microsoft, or anyone else.

If you read carefully, he said that he chose OS X because he thought it would have been easier, but he (and probably other hackers) could have come up with something for Windows or Linux, also. Meaning here: if the contest hadn't been stopped once the Mac was taken over, one (or both) of the other computers would also likely have fallen. You said "The same thing did not happen to Vista or Linux", but the only thing that truly did not happen to the other 2 systems is that they were not the first to be hacked. This doesn't even begin to indicate that they are free of security problems.

daveinpoway

join:2006-07-03
Poway, CA
reply to daveinpoway
Update: I finally found a link to the article about an upcoming (supposedly) secure browser: »Is this the secure browser we've been waiting for?


RadioDoc
Sortofadog
Premium,ExMod 2000-03
join:2000-05-11
Chicago, IL
·AT&T Midwest

reply to daveinpoway
said by daveinpoway See Profile :

If you read carefully, he said that he chose OS X because he thought it would have been easier, but he (and probably other hackers) could have come up with something for Windows or Linux, also. Meaning here: if the contest hadn't been stopped once the Mac was taken over, one (or both) of the other computers would also likely have fallen. You said "The same thing did not happen to Vista or Linux", but the only thing that truly did not happen to the other 2 systems is that they were not the first to be hacked. This doesn't even begin to indicate that they are free of security problems.
Contest wasn't stopped. The Vista box didn't "fall" until the rules were relaxed and the prize reduced. Are you seriously suggesting that they did not go after the other two and just concentrated on the Mac?

The same thing didn't happen to the Vista or Linux box. The rules were relaxed. The Mac installation was compromised under tighter restrictions. No amount of apologistic, diversionary orating from the Mac camp can change it.
--
Toolmaster of La Grange.

daveinpoway

join:2006-07-03
Poway, CA
Basically, you are correct.
Forums » Up and Running » Security » Securityscanner.virus.org? »
« Security Sofeware Updates - 30 March 2008  

Most commented news this week
· [176] East Coast Verizon Workers Authorize Strike
· [166] Is AT&T Hinting At Usage-Based Pricing This Fall?
· [149] Time Warner Cable Using Fine Print To Foist Caps On Customers
· [125] Is Broadband A Civil Right?
· [111] The Great Landline Exodus Continues
· [97] Update Your Browser, Dummy
· [83] Comcast Hit With Another Throttling Lawsuit
· [82] What's Your Favorite Newsgroup Provider?
· [80] Friday Open Thread
· [73] Google's Cerf: Baby Bells Act Like Tots Having Tantrums
Saturday, 26-Jul
02:03:17
Terms of Use | Privacy Policy | Hosting by www.nac.net - DSL,Hosting & Co-lo | feedback | contact
8th year online! © 1999-2008 dslreports.com.
page compression OFF