electro-music.org :: View topic - Apple Security Update 2006-001

FAQ

Calendar

Memberlist

Usergroups

Links

Profile

Chat Room

Forum index » News... » Apple Computers

Apple Security Update 2006-001

Page 1 of 1 [1 Post]

View unread posts
View new posts in the last week
Mark the topic unread :: View previous topic :: View next topic

Author

Message

brinxmat

Joined: Oct 24, 2005
Posts: 262
Location: Norway

Posted: Thu Mar 02, 2006 7:17 am Post subject: Apple Security Update 2006-001

Apple has released Security update 2006-001, the following is quoted from http://docs.info.apple.com/article.html?artnum=303382

Quote:

Mail

CVE-ID: CVE-2006-0395

Available for: Mac OS X v10.4.5, Mac OS X Server v10.4.5

Impact: Download Validation fails to warn about unsafe file types

...

iChat. A malicious application named Leap.A that attempts to propagate using iChat has been detected. With this update for Mac OS X v10.4.5 and Mac OS X Server v10.4.5, iChat now uses Download Validation to warn of unknown or unsafe file types during file transfers.

Additionally, they give a pointer to Safety tips for handling email attachments and content downloaded from the Internet, which is a "security article".

That was the news, here is my "personal" comment:

Validation is an attempt to stop the rot getting onto a machine, not fix the problem.

Isn't it time we sorted this out once and for all? Why does Apple not understand that they have to fix OS X so that this trick isn't possible?
_________________
-- Say "&Eth;onne hit wæs hrenig weðer"

Page 1 of 1 [1 Post]

View unread posts
View new posts in the last week
Mark the topic unread :: View previous topic :: View next topic

Forum index » News... » Apple Computers

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum