Apple megapatch plugs 45 security holes

Apple on Tuesday issued a security update for its Mac OS X to plug 45 security holes, including several zero-day vulnerabilities.

The megapatch is the seventh Apple security patch release in three months. It deals with vulnerabilities in Apple's own software, as well as third-party components such as Adobe Systems' Flash Player, OpenSSH and MySQL. Sixteen of the vulnerabilities addressed by the update were previously released as part of two high-profile bug-hunting campaigns.

The vulnerabilities pose varying risks to Macs. Several of the flaws could be exploited to gain full control over a Mac running the vulnerable component, according to Apple's advisory. Other holes are limited and could only be exploited to crash a Mac or used by somebody who already has access to a machine to elevate privileges, for example.

One focus of the patch is to fix eight vulnerabilities in the way Mac OS X handles disk images, files that when opened appear as a drive within the Macintosh Finder. Mounting a malicious image may lead to an error and could provide a means for an attacker to breach a Mac, Apple said.

Tuesday's update deals with nine vulnerabilities released as part of the Month of Apple Bugs in January and seven bugs disclosed in the Month of Kernel Bugs in November. In earlier fix releases, Apple fixed several flaws identified during the projects.

While several of the vulnerabilities repaired by Apple's updates were previously known, it doesn't appear that any attacks that exploited the flaws actually occurred.

In addition to the Mac OS X patch, Apple issued a second update on Tuesday to fix a security bug in iPhoto that could expose Mac users to a serious attack. An attacker could craft a malicious "photocast" which, when opened, could compromise a Mac, Apple said in its alert. The Photocasts feature allows people to share pictures in iPhoto.

Tuesday's two releases bring Apple's total patch count for the year to seven. Microsoft, meanwhile, on Tuesday skipped its monthly patch day. However, it released a dozen security bulletins with fixes for 20 vulnerabilities in February and four bulletins with fixes for 10 bugs in January.

The Apple patch can be downloaded and installed via the Software Update feature in Mac OS X, or from Apple Downloads.

[the1kingarthur]

Welcome to the Real World Mac Fanatics

From the time it was born, the Apple Computer was destine for failure. Apple Developers promoted Apple as the greatest computer ever designed. Steve Jobs was once quoted as saying that one day Apple will be bigger than IBM. <br /><br />They built their company with a self righteous attitude and propaganda style marketing. This style of engineering lead to the refusal to license Apple Computer out to other manufactures, and a refusal to allow compatibility with other operating systems. This eventually caught up with them when it brought Apple to the point of near bankruptcy. Apple owner?s today fight like hell to deny the fact that if Bill Gates had not bailed them out, there would be no Apple Computer. SEE ?MS to invest $150 million in Apple? here on CNET NEWS.Com<br /><br />A real slap in the face is how Apple owners discovered that their cherish software from previous versions of Apple Operating systems will not run on OSX. I can run any program from any version of Windows including Windows 3.0 on Windows XP. The biggest laugh my friends and I had was when they used Apple Computers in the movies ?Hackers? and ?The Net?. It was hilarious. The truth is HACKERS DON?T USE APPLE!<br /><br />If Apple Computer had continued developing their operating system on the original platform, Apple Computer would have become extinct. What saved Apple? Using the same platform of those that Apple despised????UNIX. Apple Computer owners used to brag ?No one can get into an Apple system?. The fact is no one wanted to. All the major sources of information were stored on UNIX or Windows NT based systems. And now that Apple has finally wised up and started to develop their operating system on UNIX, Apple Computer owners are still complaining, and refuse to accept the truth.<br /><br />Yes Windows has had a variety of problems including security issues, but the advantages have always been enormous in choosing Windows. I have a Windows base system that runs 3 versions of Windows, OS2/Warp, and 2 versions of Linux. If you doubt this look up System Commander. Another advantage is if I don?t like the way IBM builds my Windows based system I can go to Dell, Compaq, Gateway, or build one from scratch. Could Apple Computer owners say that? <br /><br />You?re into the real world now Apple Computer owners get used to it and move on. And by the way before you scream how Bill gates copied the Apple operating system, you better do a little study in history. Here is the facts&gt; But although Apple was the first to successfully mass-produce a GUI, they were not its inventors, nor were they the first to market it.<br /><br />The honor for producing the first working GUI goes to Doug Englebart ? at the time an employee of Stanford Research Institute. Englebart and colleagues created a program called the oNLine System in 1965-?68. This program used the first mouse, a windowing system, and hypertext, and was based on a description of a system called ?memex? proposed by Vannevar Bush in 1945. <br /><br /><a class="jive-link-external" href="http://imrl.usu.edu/OSLO/technology_writing/004_003.htm" target="_newWindow">http://imrl.usu.edu/OSLO/technology_writing/004_003.htm</a>

[bunnyman]

You beat me to it! Darn.

the1kingarthur,<br />Congrats on being the 1st to post on this. All the MSFT Bashing Apple User have continually stated how secure Apple is.(Macintosh) Well, I guess this blows that theory! 42 patches? For what? Macs are so secure they don't need patches. LOL.

[Jesus#2]

so sad/

Who's the fanatic?

[Sabroson]

Blah... Blah... Blah...

I got to give it to you. You just accomplished to write a HUGE <br />one paragraph comment that says nothing !!!! <br /><br />Well, it says the same old stuff that most Apple haters keep <br />repeting and repeting... and repeting... "Apple is bad... uhhh... <br />Apple has accomplished nothing.. uhhh... Windows is better .. <br />uhhhh... Apple has no viruses because nobody cares.. UHHH..."<br /><br />But well... we would not be talking about this if Apple was not <br />relevant.. or would we?

[lesfilip]

Unbelievable FUD

No one should be impressed by your rambling. The sky is not <br />falling. There are still no real viruses for Mac OS X, no real-world <br />exploits that matter, and Apple is still a technology and design <br />leader.<br /><br />Mac users already are in the real world; they exercise free will to <br />use a secure, easy to use operating system. The fact that Apple <br />provides patches for Mac OS X and other software only shows <br />you how much they care about their duty to their customers.<br /><br />May I ask if you are a talkbot? It is pretty hard to believe your <br />post was real. In any case have a nice day.

[Clues]

Hilarious!

That was the best laugh I've had in years! <br /><br />I don't think you missed a single piece of Microsoft spoon fed <br />FUD. Looks like you drank ALL the cool-aid. <br /><br />I guess we Mac users will just have to be satisfied with the best <br />operating system in the world and the most secure operating <br />system in the world. Apple never breached, never beaten 30 <br />years and counting...<br /><br />Once again loved all the vitriol, way over the top, just the way we <br />like our Microsoft zealots. Posts like yours remove all doubt <br />about your objectivity, sanity and ignorance in one fell swoop. <br />Please post your ignorance more often we need a good laugh <br />now and again.

[dansterpower]

Seriously Messed Up

Tisk Tisk Tisk.<br /><br />Your Darkness and Anger reveals a true nature.<br /><br />Have you considered trying a Mac?<br /><br />I've got Linux, I've got 2000, I've Got XP. I've even got Vista.<br /><br />I like them all.<br /><br />I code. I design. I produce high end animation, video, flash, web, <br />and print for Hollywood, musicians and publishing.<br /><br />I prefer the Mac.<br /><br />The Mac is FAR from Extinct.<br /><br />Free you soul, my friend.<br /><br />Open your mind. <br /><br />A closed mind is a terrible burden to carry.

[protagonistic]

RE: Welcome to the Real World Mac Fanatics

Since I am not an Apple fanatic I think it is fitting that I reply to <br />your diatribe. It seems a likely that in spite of your claims you <br />most likely have never seriously used anything but Windows. But <br />first, my credentials.<br /><br />The first computer I worked on used Vacuum tubes. I have <br />worked on just about everything from mainframes to mini's to <br />PC's. In the process I have probably used more OS's than you <br />ever knew existed. And I can say no OS is bulletproof. Some are <br />just better than others.<br /><br />Anyway, during all these years the Windows line of OS's, and I <br />even used them from just about their beginning until 2003, are <br />the most insecure OS's I have ever used. (Sorry to deflate your <br />bubble). And there are Windows programs that will not run <br />properly on the later versions of Windows. I know because I have <br />them mothballed.<br /><br />As for your statement that software from previous versions will <br />not run on OS X, that just shows you do not know what you are <br />talking about. I can run almost any piece of software fro OS 9 on <br />the PowerMac I bought about 3 1/2 years ago. Which was the <br />first Apple computer I have ever owned.<br /><br />Maybe "real hackers" don't use Macs, well, most of them don't <br />use Windows as their main OS either. If you want a secure <br />system you are going to need to run UNIX/Linux. Windows <br />security is the ultimate oxymoron. Oh, BTW, just how many fixes <br />did MS release this past patch Tuesday? And it wasn't because <br />they have no outstanding vulnerabilities either. I have to give <br />Apple credit for not waiting to release fixes once a month.<br /><br />But I have to admit, you would probably make a good politician. <br />You seem to have mastered the art of half truths and mis-<br />statements. And your sense of history seems a bit distorted as <br />well. As far as I remember Apple never claimed to have invented <br />any of the things you say they did not invent. In most cases they <br />took something that was already there, improved it and made it <br />popular.<br /><br />Anyway, I run two systems here in my office. A PowerMac G5 <br />with OS X on it and an IBM with PC-BSD and Linux on it. All of <br />these OS's are head and shoulders above Windows when it <br />comes to security. And System Commander? Really, there are <br />better ways to accomplish the task. And yes, I have used SC in <br />the past. You seem to be stuck in a Windows world with no way <br />out. I feel sorry for you.

[David Turner]

Interesting

Two things.... <br /><br />if you have that much time to write all that surely you are a MS <br />zealot. Interesting that it seems you have not be labeled as such. <br /><br />2nd, <br /><br />why does everyone say MAC vs PC debate???? I see no debate, <br />Mac people are into Macs and Windows people are into Windows. <br /><br />You can scream all you want about how great your platform of <br />choice is but is it really going to change anyones mind?

[Christopher Hall]

I can run every program EXCEPT...

I can run every legacy program that I wish, but the only one I truly [i]want[/i] to run is 2001's "Anachronox".<br /><br />...But I can't...<br /><br />='(

[rcrusoe]

"HACKERS DON?T USE APPLE!" Really?

There sure seems to be a lot of them showing up at defcom. They aren't as popular as Thinkpads running Linux, but their numbers are growing.

[the1kingarthur]

Welcome to the Real World Mac Fanatics

From the time it was born, the Apple Computer was destine for failure. Apple Developers promoted Apple as the greatest computer ever designed. Steve Jobs was once quoted as saying that one day Apple will be bigger than IBM. <br /><br />They built their company with a self righteous attitude and propaganda style marketing. This style of engineering lead to the refusal to license Apple Computer out to other manufactures, and a refusal to allow compatibility with other operating systems. This eventually caught up with them when it brought Apple to the point of near bankruptcy. Apple owner?s today fight like hell to deny the fact that if Bill Gates had not bailed them out, there would be no Apple Computer. SEE ?MS to invest $150 million in Apple? here on CNET NEWS.Com<br /><br />A real slap in the face is how Apple owners discovered that their cherish software from previous versions of Apple Operating systems will not run on OSX. I can run any program from any version of Windows including Windows 3.0 on Windows XP. The biggest laugh my friends and I had was when they used Apple Computers in the movies ?Hackers? and ?The Net?. It was hilarious. The truth is HACKERS DON?T USE APPLE!<br /><br />If Apple Computer had continued developing their operating system on the original platform, Apple Computer would have become extinct. What saved Apple? Using the same platform of those that Apple despised????UNIX. Apple Computer owners used to brag ?No one can get into an Apple system?. The fact is no one wanted to. All the major sources of information were stored on UNIX or Windows NT based systems. And now that Apple has finally wised up and started to develop their operating system on UNIX, Apple Computer owners are still complaining, and refuse to accept the truth.<br /><br />Yes Windows has had a variety of problems including security issues, but the advantages have always been enormous in choosing Windows. I have a Windows base system that runs 3 versions of Windows, OS2/Warp, and 2 versions of Linux. If you doubt this look up System Commander. Another advantage is if I don?t like the way IBM builds my Windows based system I can go to Dell, Compaq, Gateway, or build one from scratch. Could Apple Computer owners say that? <br /><br />You?re into the real world now Apple Computer owners get used to it and move on. And by the way before you scream how Bill gates copied the Apple operating system, you better do a little study in history. Here is the facts&gt; But although Apple was the first to successfully mass-produce a GUI, they were not its inventors, nor were they the first to market it.<br /><br />The honor for producing the first working GUI goes to Doug Englebart ? at the time an employee of Stanford Research Institute. Englebart and colleagues created a program called the oNLine System in 1965-?68. This program used the first mouse, a windowing system, and hypertext, and was based on a description of a system called ?memex? proposed by Vannevar Bush in 1945. <br /><br /><a class="jive-link-external" href="http://imrl.usu.edu/OSLO/technology_writing/004_003.htm" target="_newWindow">http://imrl.usu.edu/OSLO/technology_writing/004_003.htm</a>

[bunnyman]

You beat me to it! Darn.

the1kingarthur,<br />Congrats on being the 1st to post on this. All the MSFT Bashing Apple User have continually stated how secure Apple is.(Macintosh) Well, I guess this blows that theory! 42 patches? For what? Macs are so secure they don't need patches. LOL.

[Jesus#2]

so sad/

Who's the fanatic?

[Sabroson]

Blah... Blah... Blah...

I got to give it to you. You just accomplished to write a HUGE <br />one paragraph comment that says nothing !!!! <br /><br />Well, it says the same old stuff that most Apple haters keep <br />repeting and repeting... and repeting... "Apple is bad... uhhh... <br />Apple has accomplished nothing.. uhhh... Windows is better .. <br />uhhhh... Apple has no viruses because nobody cares.. UHHH..."<br /><br />But well... we would not be talking about this if Apple was not <br />relevant.. or would we?

[lesfilip]

Unbelievable FUD

No one should be impressed by your rambling. The sky is not <br />falling. There are still no real viruses for Mac OS X, no real-world <br />exploits that matter, and Apple is still a technology and design <br />leader.<br /><br />Mac users already are in the real world; they exercise free will to <br />use a secure, easy to use operating system. The fact that Apple <br />provides patches for Mac OS X and other software only shows <br />you how much they care about their duty to their customers.<br /><br />May I ask if you are a talkbot? It is pretty hard to believe your <br />post was real. In any case have a nice day.

[Clues]

Hilarious!

That was the best laugh I've had in years! <br /><br />I don't think you missed a single piece of Microsoft spoon fed <br />FUD. Looks like you drank ALL the cool-aid. <br /><br />I guess we Mac users will just have to be satisfied with the best <br />operating system in the world and the most secure operating <br />system in the world. Apple never breached, never beaten 30 <br />years and counting...<br /><br />Once again loved all the vitriol, way over the top, just the way we <br />like our Microsoft zealots. Posts like yours remove all doubt <br />about your objectivity, sanity and ignorance in one fell swoop. <br />Please post your ignorance more often we need a good laugh <br />now and again.

[dansterpower]

Seriously Messed Up

Tisk Tisk Tisk.<br /><br />Your Darkness and Anger reveals a true nature.<br /><br />Have you considered trying a Mac?<br /><br />I've got Linux, I've got 2000, I've Got XP. I've even got Vista.<br /><br />I like them all.<br /><br />I code. I design. I produce high end animation, video, flash, web, <br />and print for Hollywood, musicians and publishing.<br /><br />I prefer the Mac.<br /><br />The Mac is FAR from Extinct.<br /><br />Free you soul, my friend.<br /><br />Open your mind. <br /><br />A closed mind is a terrible burden to carry.

[protagonistic]

RE: Welcome to the Real World Mac Fanatics

Since I am not an Apple fanatic I think it is fitting that I reply to <br />your diatribe. It seems a likely that in spite of your claims you <br />most likely have never seriously used anything but Windows. But <br />first, my credentials.<br /><br />The first computer I worked on used Vacuum tubes. I have <br />worked on just about everything from mainframes to mini's to <br />PC's. In the process I have probably used more OS's than you <br />ever knew existed. And I can say no OS is bulletproof. Some are <br />just better than others.<br /><br />Anyway, during all these years the Windows line of OS's, and I <br />even used them from just about their beginning until 2003, are <br />the most insecure OS's I have ever used. (Sorry to deflate your <br />bubble). And there are Windows programs that will not run <br />properly on the later versions of Windows. I know because I have <br />them mothballed.<br /><br />As for your statement that software from previous versions will <br />not run on OS X, that just shows you do not know what you are <br />talking about. I can run almost any piece of software fro OS 9 on <br />the PowerMac I bought about 3 1/2 years ago. Which was the <br />first Apple computer I have ever owned.<br /><br />Maybe "real hackers" don't use Macs, well, most of them don't <br />use Windows as their main OS either. If you want a secure <br />system you are going to need to run UNIX/Linux. Windows <br />security is the ultimate oxymoron. Oh, BTW, just how many fixes <br />did MS release this past patch Tuesday? And it wasn't because <br />they have no outstanding vulnerabilities either. I have to give <br />Apple credit for not waiting to release fixes once a month.<br /><br />But I have to admit, you would probably make a good politician. <br />You seem to have mastered the art of half truths and mis-<br />statements. And your sense of history seems a bit distorted as <br />well. As far as I remember Apple never claimed to have invented <br />any of the things you say they did not invent. In most cases they <br />took something that was already there, improved it and made it <br />popular.<br /><br />Anyway, I run two systems here in my office. A PowerMac G5 <br />with OS X on it and an IBM with PC-BSD and Linux on it. All of <br />these OS's are head and shoulders above Windows when it <br />comes to security. And System Commander? Really, there are <br />better ways to accomplish the task. And yes, I have used SC in <br />the past. You seem to be stuck in a Windows world with no way <br />out. I feel sorry for you.

[David Turner]

Interesting

Two things.... <br /><br />if you have that much time to write all that surely you are a MS <br />zealot. Interesting that it seems you have not be labeled as such. <br /><br />2nd, <br /><br />why does everyone say MAC vs PC debate???? I see no debate, <br />Mac people are into Macs and Windows people are into Windows. <br /><br />You can scream all you want about how great your platform of <br />choice is but is it really going to change anyones mind?

[Christopher Hall]

I can run every program EXCEPT...

I can run every legacy program that I wish, but the only one I truly [i]want[/i] to run is 2001's "Anachronox".<br /><br />...But I can't...<br /><br />='(

[rcrusoe]

"HACKERS DON?T USE APPLE!" Really?

There sure seems to be a lot of them showing up at defcom. They aren't as popular as Thinkpads running Linux, but their numbers are growing.

[bunnyman]

Security Holes in Apple?

I must start a discussion on this one. I have read so many posts bashing MSFT about their security holes and seen so many posts about how "Secure" the Macintosh OS is. I said it before, there is no absolutely "secure" OS. Not Windows, not Apple's Macintosh, not Linux, etc. Vulnerablities can be found and exploited in ANY OS. So, all the MSFT bashers, read this one. Now, how "secure" is your OS?

[Jesus#2]

if...

if you can't see the difference... they you don't know dooky about <br />operating systems.

[ewelch]

A heck of a lot more secure than Windows

You Windows fanboys should actually do some research before <br />you talk about OS X. Apple has been patching security holes in <br />OS X since it came out in 2001! We Mac users are quite aware of <br />the challenges Apple faces from potential attacks.<br /><br />Doh!<br /><br />No Apple computer has ever had a single spyware exploit <br />sucessfully annoy its user. No virus has sucessfully attacked a <br />Mac. Sure they're not absolutely secure. No OS hooked to the <br />Internet is invlunerable except for maybe the extra secure <br />version of Solaris? Obscurity, better built, a combination of both. <br />Who cares? Them's the facts. As long as we're careful and watch <br />for attacks which will inveitibly arrive some day, and we'll enjoy <br />our time without the burden Windows users deal with every day.<br /><br />So, one guy says he can run programs for all versions of <br />Windows since 3.0? Hogwash. I've been a Windows user. <br />Windows NT, Windows 2000, Windows XP and no doubt Windows <br />Vista will break old software and it won't work anymore. Games <br />especially. There are DirectX9 games that don't run in Vista! Go <br />figure. <br /><br />OS X could run OS9 apps just fine. So dude, you were wrong. <br />And guess what? It can't any more. But a Mac can run all <br />Windows versions since 3.0 to Vista, OS/2. Solaris, Linux, and a <br />bunch of others. How many of those can be run on a PC now? All <br />at the same time? All of 'em? Good for you, but it can't run OS X. <br />Macs win.<br /><br />We Mac users are plenty savvy about the world. Just because you <br />have never bothered to learn much about Macs means nothing.<br /><br />As for who invented the GUI, there may have been a GUI and <br />mouse in the 60s (there was) but the GUI that Apple borrowed <br />from came from Xerox PARC. Ever hear about the conversation <br />between Bill Gates and Steve Jobs on the topic. Gates compared <br />it to breaking into someone's home to steal, and ends up saying <br />something like, "Imagine getting in there and finding that <br />someone beat you to the TV set."<br /><br />Remember GEM? I didn't think so. Remember Amiga? No? Yes? <br />Fine. NeXT created the first really sophisticated computer that <br />was way ahead of the competition. And NeXT raided Apple and <br />took them over. Jobs lead the charge. And that's why Macs are <br />so good now. It has little to do with the Apple geneolgoy. It's the <br />legacy of NeXT that we inherit now.

[FellowConspirator]

All software has security holes...

That's the nature of the beast. It's not a <br />matter of having no security holes, it's a <br />matter of risk (probability of event * cost of <br />event), a mitigating that risk. Most of the <br />issues addressed here are low risk, and <br />historically there's been very low risk <br />(security-wise) using Mac OS X. <br /> <br />Not that it makes much of a difference. Windows <br />has a comparably much higher risk associated <br />with using it, but they are willing to accept <br />the higher risk and spend considerable effort <br />attempting to mitigate those risks, because of a <br />perceived higher value to the product. I.e., the <br />risk is worth it. Note that Linux still has <br />higher risk than Mac OS X despite having fewer <br />and lesser severity issues by virtue of the fact <br />that it's a popular target for crackers -- <br />namely because it runs many servers containing <br />sensitive information. <br /> <br />The only wrinkle is that people's perceptions of <br />value and risk are rarely very objective. Many <br />people use don't use an software that best <br />addresses their needs, and many people are <br />blissfully unaware of the risks associated with <br />their choices in software and hardware. The <br />result is a net loss in productivity and <br />increased costs.

[bunnyman]

Security Holes in Apple?

I must start a discussion on this one. I have read so many posts bashing MSFT about their security holes and seen so many posts about how "Secure" the Macintosh OS is. I said it before, there is no absolutely "secure" OS. Not Windows, not Apple's Macintosh, not Linux, etc. Vulnerablities can be found and exploited in ANY OS. So, all the MSFT bashers, read this one. Now, how "secure" is your OS?

[Jesus#2]

if...

if you can't see the difference... they you don't know dooky about <br />operating systems.

[ewelch]

A heck of a lot more secure than Windows

You Windows fanboys should actually do some research before <br />you talk about OS X. Apple has been patching security holes in <br />OS X since it came out in 2001! We Mac users are quite aware of <br />the challenges Apple faces from potential attacks.<br /><br />Doh!<br /><br />No Apple computer has ever had a single spyware exploit <br />sucessfully annoy its user. No virus has sucessfully attacked a <br />Mac. Sure they're not absolutely secure. No OS hooked to the <br />Internet is invlunerable except for maybe the extra secure <br />version of Solaris? Obscurity, better built, a combination of both. <br />Who cares? Them's the facts. As long as we're careful and watch <br />for attacks which will inveitibly arrive some day, and we'll enjoy <br />our time without the burden Windows users deal with every day.<br /><br />So, one guy says he can run programs for all versions of <br />Windows since 3.0? Hogwash. I've been a Windows user. <br />Windows NT, Windows 2000, Windows XP and no doubt Windows <br />Vista will break old software and it won't work anymore. Games <br />especially. There are DirectX9 games that don't run in Vista! Go <br />figure. <br /><br />OS X could run OS9 apps just fine. So dude, you were wrong. <br />And guess what? It can't any more. But a Mac can run all <br />Windows versions since 3.0 to Vista, OS/2. Solaris, Linux, and a <br />bunch of others. How many of those can be run on a PC now? All <br />at the same time? All of 'em? Good for you, but it can't run OS X. <br />Macs win.<br /><br />We Mac users are plenty savvy about the world. Just because you <br />have never bothered to learn much about Macs means nothing.<br /><br />As for who invented the GUI, there may have been a GUI and <br />mouse in the 60s (there was) but the GUI that Apple borrowed <br />from came from Xerox PARC. Ever hear about the conversation <br />between Bill Gates and Steve Jobs on the topic. Gates compared <br />it to breaking into someone's home to steal, and ends up saying <br />something like, "Imagine getting in there and finding that <br />someone beat you to the TV set."<br /><br />Remember GEM? I didn't think so. Remember Amiga? No? Yes? <br />Fine. NeXT created the first really sophisticated computer that <br />was way ahead of the competition. And NeXT raided Apple and <br />took them over. Jobs lead the charge. And that's why Macs are <br />so good now. It has little to do with the Apple geneolgoy. It's the <br />legacy of NeXT that we inherit now.

[FellowConspirator]

All software has security holes...

That's the nature of the beast. It's not a <br />matter of having no security holes, it's a <br />matter of risk (probability of event * cost of <br />event), a mitigating that risk. Most of the <br />issues addressed here are low risk, and <br />historically there's been very low risk <br />(security-wise) using Mac OS X. <br /> <br />Not that it makes much of a difference. Windows <br />has a comparably much higher risk associated <br />with using it, but they are willing to accept <br />the higher risk and spend considerable effort <br />attempting to mitigate those risks, because of a <br />perceived higher value to the product. I.e., the <br />risk is worth it. Note that Linux still has <br />higher risk than Mac OS X despite having fewer <br />and lesser severity issues by virtue of the fact <br />that it's a popular target for crackers -- <br />namely because it runs many servers containing <br />sensitive information. <br /> <br />The only wrinkle is that people's perceptions of <br />value and risk are rarely very objective. Many <br />people use don't use an software that best <br />addresses their needs, and many people are <br />blissfully unaware of the risks associated with <br />their choices in software and hardware. The <br />result is a net loss in productivity and <br />increased costs.

[rubenerd]

Grow up.

I love reading comments that go along the lines of "TOLD YOU <br />SO MACBOYS YOUR OS ISN'T SECURE EITHER HAHAHAHAH!!!1!!<br />11!!!!11" Please. If your intention is to bag out fanboys by <br />resorting to this, you're no better than they are. Grow up.<br /><br />I could also induge myself and ask you to point out the <br />frequency of Windows problems compared to Mac, Linux, BSD, <br />Kitchen Sink (hint: it's not all about market share), but then I <br />guess I'd be a fanboy wouldn't I? It says something about people <br />who lurk in the shadows desperately waiting for something <br />other than Windows to slip so they can feel better about their <br />own.<br /><br />And at least Apple are actively fixing their security problems <br />compared to their Redmond counterparts (<a class="jive-link-external" href="http://" target="_newWindow">http://</a><br />news.com.com/Microsoft+takes+a+Patch+Tuesday+break/<br />2100-1002_3-6165647.html)

[SeizeCTRL]

ah come on...

You are seriously kidding yourself if you don't think market share has a big thing to do with it.<br /><br />Falls into 2 categories... <br />1. more market share means more stupid people using the product who will do more stupid things. <br /><br />2. less market share means less of a target for attack... less stupid users and less of a reason to bother.<br /><br />I have two Mac's... an old G4 and an iMac. I also have several PC's running XP, Vista, Linspire and Ubuntu, so it's not like I am particularly biased in the matter. It just cracks me up though how the majority of Mac users act a lot like religious zealots.

[Gunady]

Ya, Grow Up

"I could also induge myself and ask you to point out the frequency of Windows problems compared to Mac, Linux, BSD, Kitchen Sink (hint: it's not all about market share)"<br /><br />Ya, if Windows is so problematic, why does majority of business users use windows at their office (with a big investment)? Are all business users dumb? Not to mention home users. Hmm..

[adlyb1]

The facts

Go to SANS' website and look at SANS@Risk which documents vulnerabilities across all platforms and you will see that rarely a week goes by that something isn't identifed for EVERY major platform.<br /><br />I will grant you that I am impatient with MS's response to some recent flaws, but at least 2 of the items patched by Apple in this group were reported over 2 months ago.

[rubenerd]

Grow up.

I love reading comments that go along the lines of "TOLD YOU <br />SO MACBOYS YOUR OS ISN'T SECURE EITHER HAHAHAHAH!!!1!!<br />11!!!!11" Please. If your intention is to bag out fanboys by <br />resorting to this, you're no better than they are. Grow up.<br /><br />I could also induge myself and ask you to point out the <br />frequency of Windows problems compared to Mac, Linux, BSD, <br />Kitchen Sink (hint: it's not all about market share), but then I <br />guess I'd be a fanboy wouldn't I? It says something about people <br />who lurk in the shadows desperately waiting for something <br />other than Windows to slip so they can feel better about their <br />own.<br /><br />And at least Apple are actively fixing their security problems <br />compared to their Redmond counterparts (<a class="jive-link-external" href="http://" target="_newWindow">http://</a><br />news.com.com/Microsoft+takes+a+Patch+Tuesday+break/<br />2100-1002_3-6165647.html)

[SeizeCTRL]

ah come on...

You are seriously kidding yourself if you don't think market share has a big thing to do with it.<br /><br />Falls into 2 categories... <br />1. more market share means more stupid people using the product who will do more stupid things. <br /><br />2. less market share means less of a target for attack... less stupid users and less of a reason to bother.<br /><br />I have two Mac's... an old G4 and an iMac. I also have several PC's running XP, Vista, Linspire and Ubuntu, so it's not like I am particularly biased in the matter. It just cracks me up though how the majority of Mac users act a lot like religious zealots.

[Gunady]

Ya, Grow Up

"I could also induge myself and ask you to point out the frequency of Windows problems compared to Mac, Linux, BSD, Kitchen Sink (hint: it's not all about market share)"<br /><br />Ya, if Windows is so problematic, why does majority of business users use windows at their office (with a big investment)? Are all business users dumb? Not to mention home users. Hmm..

[adlyb1]

The facts

Go to SANS' website and look at SANS@Risk which documents vulnerabilities across all platforms and you will see that rarely a week goes by that something isn't identifed for EVERY major platform.<br /><br />I will grant you that I am impatient with MS's response to some recent flaws, but at least 2 of the items patched by Apple in this group were reported over 2 months ago.

[GiveMeAUserNamePlease]

So What's the point?

I've used a whole bunch of operating systems: Solaris, Windows <br />(through XP Pro), All flavors of MacOS, OS2, Linux, SGI, to name <br />a few.<br /><br />They all fall in two categories: UNIX and not-UNIX. Apple has <br />very polished interface over UNIX. Windows has a very polished <br />interface over DOS (I know I'm asking for it here).<br /><br />Both express an OPINION about software programming. <br />Sometimes I agree, sometimes I don't. I don't understand why <br />Apple users are stereotyped as weird zealots: It's just a 5% <br />market-share OS alternative.

[GiveMeAUserNamePlease]

So What's the point?

I've used a whole bunch of operating systems: Solaris, Windows <br />(through XP Pro), All flavors of MacOS, OS2, Linux, SGI, to name <br />a few.<br /><br />They all fall in two categories: UNIX and not-UNIX. Apple has <br />very polished interface over UNIX. Windows has a very polished <br />interface over DOS (I know I'm asking for it here).<br /><br />Both express an OPINION about software programming. <br />Sometimes I agree, sometimes I don't. I don't understand why <br />Apple users are stereotyped as weird zealots: It's just a 5% <br />market-share OS alternative.

[jeromatron]

10.3.9 Patch wise guy, + MS still has zero day flaws

First of all, it's a patch for Panther, pretty much a legacy patch to keep the legacy 10.3 line up to date with the 10.4 security updates, so to say that it is in *addition* to the other security updates they've done in the last few months isn't entirely accurate. Besides that, it's 10.3 - when I saw the article I wondered if you were talking about 10.4.9 that came out today too. So I checked and lo and behold, it's just for 10.3.<br /><br />Besides that, MS didn't have anything for patch Tuesday, but guess what, they still have at least 5 outstanding zero day vulnerabilities:<br /><a class="jive-link-external" href="http://it.slashdot.org/article.pl?sid=07/03/09/1317240" target="_newWindow">http://it.slashdot.org/article.pl?sid=07/03/09/1317240</a><br /><br />Are you just trying to stir the pot or did you have some real security news about Apple or MS?

[DaiMac]

actually its both 10.3.x and 10.4.x

I wondered because I had noticed a link about a security update <br />and a 10.4.9 update but only the 10.4.9 update came up. I <br />guess they put it all in one installer since the security fixes <br />probably aren't that big. I hope there was something else other <br />than security fixes in that update, but I haven't noticed anything <br />yet.<br /><br />One big thing about the mac vs PC debate also, and I'm not <br />trying to sound like a dumb western xenophobe or anything, but <br />doesn't it always seem like the worst virus/cracks/spyware come <br />from former soviet/eastern bloc countries, where Apple's <br />marketshare is far lower than in the west? I know thats a <br />generalization, but I do remember back in the late 80s and early <br />90s my mom worked at a university computer services office, <br />and they had a russian there as part of a new exchange <br />program. Even though this was after the berlin wall and such, he <br />said that while he thought macs were interesting he would have <br />to buy a PC because Macs were on the no-export list (I honestly <br />don't recall why) to Warsaw Pact countries. That was his <br />explanation anyway, he might have just been trying to diffuse <br />my militant mac evangelism and change the subject about his PC <br />purchase ;)<br /><br />Anyway point being that perhaps it is that Macs are not just <br />obscure, but non-existent in the places most likely to breed <br />virulent electronic contagion. I know when I was in China my <br />mac got a lot of comment from natives to the effect of "your <br />computer is very beautiful.", and then from the handful who <br />were computer-saavy (like my roommate the Comp. Sci major) "I <br />wish I could afford an Apple, but they are too expensive" I found <br />that funny because I saw some great deals on Apple hardware <br />over there, but they were just deals to me because of the <br />currency valuation, in terms of Yuan Apple's price margin, <br />particularly in laptops, was often 2x that of comparably <br />equipped PCs. I found it odd because they make them in China, <br />one would think they would get a deal because of low shipping <br />costs, but I guess not. Probably 90% of their Mac customers are <br />Japanese, so they charge prices that, just as they do to me, look <br />like a good deal to Japanese consumers.<br /><br />Wild tangent there ;)

[jeromatron]

10.3.9 Patch wise guy, + MS still has zero day flaws

First of all, it's a patch for Panther, pretty much a legacy patch to keep the legacy 10.3 line up to date with the 10.4 security updates, so to say that it is in *addition* to the other security updates they've done in the last few months isn't entirely accurate. Besides that, it's 10.3 - when I saw the article I wondered if you were talking about 10.4.9 that came out today too. So I checked and lo and behold, it's just for 10.3.<br /><br />Besides that, MS didn't have anything for patch Tuesday, but guess what, they still have at least 5 outstanding zero day vulnerabilities:<br /><a class="jive-link-external" href="http://it.slashdot.org/article.pl?sid=07/03/09/1317240" target="_newWindow">http://it.slashdot.org/article.pl?sid=07/03/09/1317240</a><br /><br />Are you just trying to stir the pot or did you have some real security news about Apple or MS?

[DaiMac]

actually its both 10.3.x and 10.4.x

I wondered because I had noticed a link about a security update <br />and a 10.4.9 update but only the 10.4.9 update came up. I <br />guess they put it all in one installer since the security fixes <br />probably aren't that big. I hope there was something else other <br />than security fixes in that update, but I haven't noticed anything <br />yet.<br /><br />One big thing about the mac vs PC debate also, and I'm not <br />trying to sound like a dumb western xenophobe or anything, but <br />doesn't it always seem like the worst virus/cracks/spyware come <br />from former soviet/eastern bloc countries, where Apple's <br />marketshare is far lower than in the west? I know thats a <br />generalization, but I do remember back in the late 80s and early <br />90s my mom worked at a university computer services office, <br />and they had a russian there as part of a new exchange <br />program. Even though this was after the berlin wall and such, he <br />said that while he thought macs were interesting he would have <br />to buy a PC because Macs were on the no-export list (I honestly <br />don't recall why) to Warsaw Pact countries. That was his <br />explanation anyway, he might have just been trying to diffuse <br />my militant mac evangelism and change the subject about his PC <br />purchase ;)<br /><br />Anyway point being that perhaps it is that Macs are not just <br />obscure, but non-existent in the places most likely to breed <br />virulent electronic contagion. I know when I was in China my <br />mac got a lot of comment from natives to the effect of "your <br />computer is very beautiful.", and then from the handful who <br />were computer-saavy (like my roommate the Comp. Sci major) "I <br />wish I could afford an Apple, but they are too expensive" I found <br />that funny because I saw some great deals on Apple hardware <br />over there, but they were just deals to me because of the <br />currency valuation, in terms of Yuan Apple's price margin, <br />particularly in laptops, was often 2x that of comparably <br />equipped PCs. I found it odd because they make them in China, <br />one would think they would get a deal because of low shipping <br />costs, but I guess not. Probably 90% of their Mac customers are <br />Japanese, so they charge prices that, just as they do to me, look <br />like a good deal to Japanese consumers.<br /><br />Wild tangent there ;)

[open-mind]

Fixes 45, Exploits 00

It seems like the same arguments every time Apple releases an <br />update.<br /><br />If they DON'T patch any security holes, then they're called lazy <br />about security.<br /><br />If they DO patch security holes, then they're called insecure. <br />Even though none of the patched holes have yet been exploited.<br /><br />Kobiashi Maru

[protagonistic]

RE: Fixes 45, Exploits 00

You Star Trek fanboy... :-)

[webdev511]

Yet to be exploited?

So it's only a security patch if a potential hole has actually been exploit?<br /><br />I guess that means they are optional?

[open-mind]

Fixes 45, Exploits 00

It seems like the same arguments every time Apple releases an <br />update.<br /><br />If they DON'T patch any security holes, then they're called lazy <br />about security.<br /><br />If they DO patch security holes, then they're called insecure. <br />Even though none of the patched holes have yet been exploited.<br /><br />Kobiashi Maru

[protagonistic]

RE: Fixes 45, Exploits 00

You Star Trek fanboy... :-)

[webdev511]

Yet to be exploited?

So it's only a security patch if a potential hole has actually been exploit?<br /><br />I guess that means they are optional?

[imacpwr]

Peanuts..

45 Mac security flaws most of which can only be exploited locally <br />compared to 114,000+ MS flaws many of which can be exploited <br />remotely..?? No wonder the MS crowd gets excited every time <br />there's a Mac patch..

[Vegaman_Dan]

Please provide your evidence

There were 45 Mac flaws addressed in the latest batch of updates. You state that there are 114,000+ flaws that were supposed to be addressed on Tuesday? Would you please list them in order? I would like to check into your facts before I can accept them. Please list all 114,000+. <br /><br />I can make up numbers just as easily, but if you can list all 114,000+, I'll gladly back you up on this one.

[adlyb1]

Apples to Oranges

I don't have a problem with showing the difference, but compare the same thing. <br /><br />You show the number of bugs for one or two Apple patches and then compare it to the 'possible' lifetime count for Windows bugs across multiple versions.

[imacpwr]

Peanuts..

45 Mac security flaws most of which can only be exploited locally <br />compared to 114,000+ MS flaws many of which can be exploited <br />remotely..?? No wonder the MS crowd gets excited every time <br />there's a Mac patch..

[Vegaman_Dan]

Please provide your evidence

There were 45 Mac flaws addressed in the latest batch of updates. You state that there are 114,000+ flaws that were supposed to be addressed on Tuesday? Would you please list them in order? I would like to check into your facts before I can accept them. Please list all 114,000+. <br /><br />I can make up numbers just as easily, but if you can list all 114,000+, I'll gladly back you up on this one.

[adlyb1]

Apples to Oranges

I don't have a problem with showing the difference, but compare the same thing. <br /><br />You show the number of bugs for one or two Apple patches and then compare it to the 'possible' lifetime count for Windows bugs across multiple versions.

[richto]

Lucky so few people use MACs or someone might bother writing an exploit...

Lucky so few people use MACs or someone might bother writing an exploit...

[gm2net]

Are you so stupid you still believe that?

It's been proven wrong again and again. It's NOT marketshare <br />related.

[Musica360.com]

Not that many people drive Ferraris either...

so your point?

[Kevin Cotham]

For the last time!

For the last time: MAC means Media Access Control! Why is it that <br />Windows cronies can't get that right? Normally capitalization <br />wouldn't matter. But MAC is a computing term.

[Vegaman_Dan]

It's a common misconception

While market share is much lower for Apple products over others in the industry, it doesn't necessarily mean that they are being ignored. Some day when they take over as the number one OS out there, they will likely get targeted.<br /><br />Give them time. They haven't taken over the world yet. They still have to take on Windows, Linux, Ubuntu, and others. Give them enough time to take over and we can see how they handle the pressure. I'm sure they will do fine.

[Vegaman_Dan]

It's a common misconception

While market share is much lower for Apple products over others in the industry, it doesn't necessarily mean that they are being ignored. Some day when they take over as the number one OS out there, they will likely get targeted.<br /><br />Give them time. They haven't taken over the world yet. They still have to take on Windows, Linux, Ubuntu, and others. Give them enough time to take over and we can see how they handle the pressure. I'm sure they will do fine.

[GGGlen]

That's right!

BTW, they have tried writing exploits for the ten million Macs out <br />there, they just haven't succeeded.

[richto]

Lucky so few people use MACs or someone might bother writing an exploit...

Lucky so few people use MACs or someone might bother writing an exploit...

[gm2net]

Are you so stupid you still believe that?

It's been proven wrong again and again. It's NOT marketshare <br />related.

[Musica360.com]

Not that many people drive Ferraris either...

so your point?

[Kevin Cotham]

For the last time!

For the last time: MAC means Media Access Control! Why is it that <br />Windows cronies can't get that right? Normally capitalization <br />wouldn't matter. But MAC is a computing term.

[Vegaman_Dan]

It's a common misconception

While market share is much lower for Apple products over others in the industry, it doesn't necessarily mean that they are being ignored. Some day when they take over as the number one OS out there, they will likely get targeted.<br /><br />Give them time. They haven't taken over the world yet. They still have to take on Windows, Linux, Ubuntu, and others. Give them enough time to take over and we can see how they handle the pressure. I'm sure they will do fine.

[Vegaman_Dan]

It's a common misconception

While market share is much lower for Apple products over others in the industry, it doesn't necessarily mean that they are being ignored. Some day when they take over as the number one OS out there, they will likely get targeted.<br /><br />Give them time. They haven't taken over the world yet. They still have to take on Windows, Linux, Ubuntu, and others. Give them enough time to take over and we can see how they handle the pressure. I'm sure they will do fine.

[GGGlen]

That's right!

BTW, they have tried writing exploits for the ten million Macs out <br />there, they just haven't succeeded.

[gm2net]

"The truth is HACKERS DON?T USE APPLE!"

I'm not going to bother with the rest of that (you know it's wrong, <br />as well as I do), but I'm laughing at this statement 'The truth is <br />HACKERS DON?T USE APPLE!'...

[richto]

Neither does anyone else....

1.2% global market share. Looks like no one else does either.

[richto]

Neither does anyone else....

1.2% global market share. Looks like no one else does either.

[protagonistic]

RE: "The truth is HACKERS DON?T USE APPLE!"

Does this come under the heading of "an Inconvenient Truth"? If <br />you discount the script kiddies most of them don't use Windows <br />either. They just abuse Windows. Why, you might ask? because it is <br />just so darn easy to do.

[gm2net]

"The truth is HACKERS DON?T USE APPLE!"

I'm not going to bother with the rest of that (you know it's wrong, <br />as well as I do), but I'm laughing at this statement 'The truth is <br />HACKERS DON?T USE APPLE!'...

[richto]

Neither does anyone else....

1.2% global market share. Looks like no one else does either.

[richto]

Neither does anyone else....

1.2% global market share. Looks like no one else does either.

[protagonistic]

RE: "The truth is HACKERS DON?T USE APPLE!"

Does this come under the heading of "an Inconvenient Truth"? If <br />you discount the script kiddies most of them don't use Windows <br />either. They just abuse Windows. Why, you might ask? because it is <br />just so darn easy to do.

[gm2net]

45 patched is better than what MS does - none patched, 45 zerodays...

Why is Apple fixing the security holes being spun to be a bad thing <br />here?

[bemenaker]

Because of fanboys

Mac Fanboys have chronically been some of the most annoying on the net. They have always railed how secure their system is, when in fact ALL systems have vulnerabilities. And, for the record, Apple doesn't have the best reputation in the industry for being timely with their patches, do a little research on what the bug finders/reporters say about their experience with Apple. <br /><br />All that being said, yes, security patches are a good thing, regardless of your OS.

[Vegaman_Dan]

It isn't the news story, it's just OS Holy Wars

The actual news about the patches has nothing to do with the arguments here. People just want to trot out their same old tired schtick.<br /><br />Windows is Evil.<br />Mac is Godly.<br /><br />Windows is #1.<br />Mac is #1.<br /><br />Nobody uses a Mac.<br />Everybody uses a Mac.<br /><br />There's really no point in any of it. You could say the sky was falling and both sides would argue that it's because God didn't patch his OS in time. <br /><br />I look at it in that all the OS's have good and bad points. If you only focus on the bad aspects, you'll never get anywhere. Educate yourself on what is available, evaluate the options, make an informed decision, and move on. There is no bad choice between them. Both work for what they are meant for. Ignore the OS Holy wars and their fan/soldiers and you'll be fine.

[gm2net]

45 patched is better than what MS does - none patched, 45 zerodays...

Why is Apple fixing the security holes being spun to be a bad thing <br />here?

[bemenaker]

Because of fanboys

Mac Fanboys have chronically been some of the most annoying on the net. They have always railed how secure their system is, when in fact ALL systems have vulnerabilities. And, for the record, Apple doesn't have the best reputation in the industry for being timely with their patches, do a little research on what the bug finders/reporters say about their experience with Apple. <br /><br />All that being said, yes, security patches are a good thing, regardless of your OS.

[Vegaman_Dan]

It isn't the news story, it's just OS Holy Wars

The actual news about the patches has nothing to do with the arguments here. People just want to trot out their same old tired schtick.<br /><br />Windows is Evil.<br />Mac is Godly.<br /><br />Windows is #1.<br />Mac is #1.<br /><br />Nobody uses a Mac.<br />Everybody uses a Mac.<br /><br />There's really no point in any of it. You could say the sky was falling and both sides would argue that it's because God didn't patch his OS in time. <br /><br />I look at it in that all the OS's have good and bad points. If you only focus on the bad aspects, you'll never get anywhere. Educate yourself on what is available, evaluate the options, make an informed decision, and move on. There is no bad choice between them. Both work for what they are meant for. Ignore the OS Holy wars and their fan/soldiers and you'll be fine.