Security company discloses iCal vulnerabilities

In regards to Pwn2Own...

The MacBookAir was compromised in less than 2 minutes. An email was sent to the Mac and the user clicked a link. That was it. As soon as the link was clicked an exploit in Safari allowed access to the machine.

It took about 18 hours to hack into Vista and that was using a bug in Adobe Flash.

One will note that a great deal of the issues regarding security issues with Windows back in the 90s had to do with users clicking on links in emails and which exlploited flaws in IE.

http://www.darknet.org.uk/2008/03/mac-owned-on-2nd-day-of-pwn2own-hack-contest/

"The mac OS is yet to gain enough weigh to be of any interest to serious missfits. So hence having far fewer known exploits."

This oft-repeated argument doesn't hold up to further scrutiny. The fact is, there were MANY virises/malware in OS 9 and earlier, back when Mac had a very much smaller slice of an overall smaller pie. The number of OS X users is *much* larger than the number of OS 9/8/7 users, yet there was no shortage of actual, in the wild, viruses and malware for the earlier OS.

there's now bugs in the pdf render code for adobe reader which is probaly in the core osx code for pdf rendering [...]
lol you have no idea what your talking

Hmmm. Adobe has never licensed any of their PDF code to Apple actually Apple wanted to pull this off with Adobe when OS came out, but Adobe didn't, so Apple were pissed off and wrote their own PDF implementation. That's why it took them so long to get some of the editing capabilities for PDFs in Preview.app. They had to reverse engineer it.

No none of that Adobe code and those bugs are in the core OS X code for PDF rendering and it is you who is talking out of his arse.

Have a nice day. Namaste.

[quote] "may allow un-authenticated attackers to execute arbitrary code on vulnerable systems with (and potentially without) the assistance from the end user of the application" [/quote]

It's the "and potentially without" that always pisses me off. Scaremongers try to equate the Window's self-replicating viri with socially spread malware (trojans, hacks, exploits whatever) on the Mac. Then they mysteriously claim that these things that must be spread by user interaction may magically turn into something that self replicates.

There are going to be stupid people using Macs or Windows that will type their password to install malware onto their computers. It's just a fact of life and is not news.

The news will be when a Mac OSX user visits a website and without any intervention on behalf of the user, a virus is installed, replicates and redistributes itself to other Macs.

Until then, yes you got us, there are stupid people who use Macs, and they will install anything. Just look at the number that whacked away on their iPhone without understanding what the code was doing in the background or who it was talking to.

I only hope that once Apple and OS X gather more market share that the less helpful individuals in the software business don't turn their attention our way.

Windows is so vulnerable because everyone is looking to exploint it.

The mac OS is yet to gain enough weigh to be of any interest to serious missfits. So hence having far fewer known exploits.

No one knows the colour of your underwear unless they look to see what you are wearing. Sorry for the long rant ;)

Very, very interesting. Its always intriguing to look at the other side of the apple/coin. Have enjoyed all your posts so far, thanks!