On May 27, 2009, at 9:01 PM, Paul wrote:

> so I thought I'd post it here to see if people know about fixes and
> workarounds. There aren't many problems, but every once in a while, a
> security issue does pop up:
>
> http://milw0rm.com/platforms/osX


The Safari Java issue is dealt with by going into prefs and turning  
off Java. You can turn it back on for sites you trust.

The xnu issue is a local privilege escalation attack, and if you don't  
let the bad guys on your computer in the first place, you're covered.

It's also probable this was fixed in 10.5.7. Tiger had a security  
patch at that time too.

This is the result of trying to run it on my system:

"Apple MACOS X xnu <= 1228.x local kernel root exploit
by: <[email protected]>
http://www.digit-labs.org/ -- Digit-Labs 20...@$!

./xnu-hfs-fcntl-v2: unsupported xnu version found "

More importantly, look at that list:

Remote exploits: 11 in 6 years, local exploits about 40 in the same  
time frame.

NOt a lot of activity, for all we've been being told "Well the hackers  
are gearing up to take OS X" for years now.

-- 
Bruce Johnson
University of Arizona
College of Pharmacy
Information Technology Group

Institutions do not have opinions, merely customs



--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed Low End Mac's G3-5 List, a 
group for those using G3, G4, and G5 desktop Macs - with a particular focus on 
Power Macs.
The list FAQ is at http://lowendmac.com/lists/g-list.shtml and our netiquette 
guide is at http://www.lowendmac.com/lists/netiquette.shtml
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to 
[email protected]
For more options, visit this group at 
http://groups.google.com/group/g3-5-list?hl=en
Low End Mac RSS feed at feed://lowendmac.com/feed.xml
-~----------~----~----~----~------~----~------~--~---

Reply via email to