on 2/11/06 9:12 AM, Bruce Johnson at [EMAIL PROTECTED] wrote:

> On Feb 11, 2006, at 6:37 AM, James Fraser wrote:
> 
>>>> "There is no ActiveX in Safari and there is no ActiveX equivalent.
>>>> That makes it harder to go to a web page and have your Mac
>>>> compromised."
>>> Substitute "harder" with "impossible"?
>> 
>> Wow...you're really flinging down the gauntlet here. ¬_¬
> 
> And he's wrong to boot.
> 
> Not that there is ActiveX, that open sore of exploitation, but there
> have been exploits that affected non-IE browsers, and one in
> particular I can think of that affected Safari: remember the
> 'autoinstalling widget' kerfuffle after the release of 10.4?

For one.  

Even a casual Google for "OS X + exploit" reveals OS X is far from
bombproof.  While a lot of the results are conjecture about what the move to
Intel will mean in terms of exploits, even the very first page has a (albeit
dated) link for "Four new Mac OS X exploits discovered."

That's not to say that exploits can't be countered fairly easily once they
are known.  It just demonstrates that even the most highly thought of OS is
not without its flaws and that the end user (or, Ghod help him, the network
admin) needs to keep his eyes and ears open.

I know it sounds terrible, but whenever I hear anyone boasting of Just How
Secure their network/box/OS is, I can't help but feel that that person will
soon be making an appearance on their local Wall of Shame:

http://www.tgdaily.com/2004/08/02/defcon_12/  (scroll down a bit)

Mac users do indeed have bragging rights, but it might be better if those
rights were exercised exclusively amongst Mac users...and in a low whisper
at that.


Best,

James Fraser



--
G-List is sponsored by <http://lowendmac.com/> and...

 Small Dog Electronics    http://www.smalldog.com | Refurbished Drives |
 -- We have Apple Refurbished Monitors in stock!  |  & CDRWs on Sale!  |

      Support Low End Mac <http://lowendmac.com/lists/support.html>

G-List list info:       <http://lowendmac.com/lists/g-list.shtml>
  --> AOL users, remove "mailto:";
Send list messages to:  <mailto:g-list@mail.maclaunch.com>
To unsubscribe, email:  <mailto:[EMAIL PROTECTED]>
For digest mode, email: <mailto:[EMAIL PROTECTED]>
Subscription questions: <mailto:[EMAIL PROTECTED]>
Archive: <http://www.mail-archive.com/g-list%40mail.maclaunch.com/>

iPod Accessories for Less
at 1-800-iPOD.COM
Fast Delivery, Low Price, Good Deal
www.1800ipod.com

Reply via email to