• We’re currently investigating an issue related to the forum theme and styling that is impacting page layout and visual formatting. The problem has been identified, and we are actively working on a resolution. There is no impact to user data or functionality, this is strictly a front-end display issue. We’ll post an update once the fix has been deployed. Thanks for your patience while we get this sorted.

Linux vs. Mac OS X vs. Vista

mac was also the first targeted. there is no description of whether or not they moved on to the other systems, but i'll assume they did without immediate success.

"$20,000 may sound like a lot of money, but show attendees say that top-quality computer attack code could easily fetch that much, either from the security vendors like iDefense or Tipping Point who purchase this type of software, or from one of the three-letter U.S. government agencies said to be in the market for this type of code as well."

in the context of the computer security business, $20k sounds like peanuts.
 
Well at least it wasn't a network attack. It sounds like it's a flaw in Safari, quite possibly one of the flaws announced today.
 
Originally posted by: The Boston Dangler
mac was also the first targeted. there is no description of whether or not they moved on to the other systems, but i'll assume they did without immediate success.
All 3 systems were up. Once the Mac was cracked the remaining two systems were up for the rest of the day.

"$20,000 may sound like a lot of money, but show attendees say that top-quality computer attack code could easily fetch that much, either from the security vendors like iDefense or Tipping Point who purchase this type of software, or from one of the three-letter U.S. government agencies said to be in the market for this type of code as well."

in the context of the computer security business, $20k sounds like peanuts.

But why would that make the Mac the first one to be cracked?

Keep in mind that not only is the $20K a lot of money, so is the notoriety of winning the contest. It could bring a lot of business to the person to crack these individual systems. Especially for those that can crack Vista and Linux.
 
Originally posted by: Griffinhart

"$20,000 may sound like a lot of money, but show attendees say that top-quality computer attack code could easily fetch that much, either from the security vendors like iDefense or Tipping Point who purchase this type of software, or from one of the three-letter U.S. government agencies said to be in the market for this type of code as well."

in the context of the computer security business, $20k sounds like peanuts.

But why would that make the Mac the first one to be cracked?

i don't see a corelation between the purse and a safari-related weakness. 😕
 
Originally posted by: Griffinhart
That's my point. Why would the purse make the Mac any more or less targeted than the rest?

Why do you think it does? I'm pretty sure it doesn't.
 
I don't. I got the impression from Dangler's post that he was inferring that.

There seems to be a lot of that kind of speculation going on in the various forums today.
 
Could the default option of the firewall being off in OSX 10.5 have any thing to do with this exploit being so easy? Both Vista and Ubuntu has the firewall on by default.
 
Originally posted by: soonerproud
Could the default option of the firewall being off in OSX 10.5 have any thing to do with this exploit being so easy? Both Vista and Ubuntu has the firewall on by default.
Not unless they block port 80 outbound 😉
 
Could the default option of the firewall being off in OSX 10.5 have any thing to do with this exploit being so easy? Both Vista and Ubuntu has the firewall on by default.

I didn't think Ubuntu defaulted to a firewall being on at all either.
 
Originally posted by: Nothinman
Could the default option of the firewall being off in OSX 10.5 have any thing to do with this exploit being so easy? Both Vista and Ubuntu has the firewall on by default.

I didn't think Ubuntu defaulted to a firewall being on at all either.

Ubuntu firewall defaults to being off.
 
Originally posted by: Brazen
Originally posted by: Nothinman
Could the default option of the firewall being off in OSX 10.5 have any thing to do with this exploit being so easy? Both Vista and Ubuntu has the firewall on by default.

I didn't think Ubuntu defaulted to a firewall being on at all either.

Ubuntu firewall defaults to being off.

Yep i had to enable it in gutsy gibbon.
 
Originally posted by: Nothinman
Could the default option of the firewall being off in OSX 10.5 have any thing to do with this exploit being so easy? Both Vista and Ubuntu has the firewall on by default.

I didn't think Ubuntu defaulted to a firewall being on at all either.

IP tables is used and the ports are all blocked by default.
 
Originally posted by: soonerproud
Originally posted by: Nothinman
IP tables is used and the ports are all blocked by default.

If so that's a recent change because I know in the past it wasn't so.

You might be right, but that has always been what I was told.

You were told wrong. Unless they changed it in (the not yet released) Hardy. I doubt it though.

By default all daemons (or almost all, I think all, but not positive on that) are set to only listen on the 127.0.0.1 (localhost) address. This means, although the firewall is not enabled, any listening programs will ignore anything coming from the physical network.
 
Back
Top