munkery
Mar 23, 04:20 PM
http://www.macforensicslab.com/ProductsAndServices/index.php?main_page=document_general_info&products_id=174
Much of the information in the PDF (http://www.macforensicslab.com/Malware_on_Mac_OS_X.pdf) associated with this article (http://www.macforensicslab.com/ProductsAndServices/index.php?main_page=document_general_info&products_id=174) is incorrect. For example:
Page 26
It refers to the bundle architecture as insecure. The argument presented would be true if security sensitive apps were not owned by system. Given that they are owned by system, malware cannot modify the bundle of an app owned by system without authentication when the app is run with user privileges in an admin or standard account.
For example, show package contents of iTunes, Safari, or Mail and try to create a folder in the bundle. In relation to the example in the article, try renaming iTunes. The argument in the article relies on actions that can not be completed in an OS X admin account; these type of changes are even more restricted in a standard account.
Apps not owned by system are vulnerable but without privilege escalation can not install rootkits or keyloggers. Even apps owned by system run with user privileges and require privilege escalation to install dangerous payloads.
Mac OS X does not prompt for authentication if you install apps in the proper location for that user account type. When installed in the proper location, apps are sandboxed from the system level of Mac OS X by the Unix DAC model used within Mac OS X.
Windows is less secure because most apps (Chrome only exception I can recall) install their associated files in levels of the system that require authentication regardless of user account type (unless Admin in Windows XP because running as superuser - no authentication required to install with elevated privileges - very dangerous). It is easier to trick Windows users to install a trojan with elevated privileges given that almost all apps ask for authentication to install and the user can not distinguish the intent of that authentication.
Page 30
The claim that the Application folder is unprotected is false. Security sensitive apps within the Application folder are owned by system.
Also, security sensitive system binaries are still stored in /bin and /sbin in Mac OS X.
Page 31
The ability to read the contacts stored in Address Book could be used by a worm to propagate. But, malware that uses this to spread is not likely to appear in the wild if the malware is not profitable. It is unlikely that malware will be profitable without being able to hook (this is a specific function) into apps owned by system.
Page 33
Starts off talking about trojans, trojans are easily avoided with user knowledge in Mac OS X because most apps do not require authentication to install if installed in the appropriate location where the Unix DAC model protects the system.
Viruses using the model shown in the article will not be successful without privilege escalation. This is the reason why Mac OS X malware is not successful in the wild.
By default, very few server side services are exposed in Mac OS X and those that are exposed are sandboxed. Vectors for worm propagation are limited to client side. Client side worms require authentication to install and spread if do not include privilege escalation via exploitation because of the Unix DAC model used in Mac OS X. Trojans used to trick users to authenticate are less likely to be successful in Mac OS X as stated above.
Much of the information in the PDF (http://www.macforensicslab.com/Malware_on_Mac_OS_X.pdf) associated with this article (http://www.macforensicslab.com/ProductsAndServices/index.php?main_page=document_general_info&products_id=174) is incorrect. For example:
Page 26
It refers to the bundle architecture as insecure. The argument presented would be true if security sensitive apps were not owned by system. Given that they are owned by system, malware cannot modify the bundle of an app owned by system without authentication when the app is run with user privileges in an admin or standard account.
For example, show package contents of iTunes, Safari, or Mail and try to create a folder in the bundle. In relation to the example in the article, try renaming iTunes. The argument in the article relies on actions that can not be completed in an OS X admin account; these type of changes are even more restricted in a standard account.
Apps not owned by system are vulnerable but without privilege escalation can not install rootkits or keyloggers. Even apps owned by system run with user privileges and require privilege escalation to install dangerous payloads.
Mac OS X does not prompt for authentication if you install apps in the proper location for that user account type. When installed in the proper location, apps are sandboxed from the system level of Mac OS X by the Unix DAC model used within Mac OS X.
Windows is less secure because most apps (Chrome only exception I can recall) install their associated files in levels of the system that require authentication regardless of user account type (unless Admin in Windows XP because running as superuser - no authentication required to install with elevated privileges - very dangerous). It is easier to trick Windows users to install a trojan with elevated privileges given that almost all apps ask for authentication to install and the user can not distinguish the intent of that authentication.
Page 30
The claim that the Application folder is unprotected is false. Security sensitive apps within the Application folder are owned by system.
Also, security sensitive system binaries are still stored in /bin and /sbin in Mac OS X.
Page 31
The ability to read the contacts stored in Address Book could be used by a worm to propagate. But, malware that uses this to spread is not likely to appear in the wild if the malware is not profitable. It is unlikely that malware will be profitable without being able to hook (this is a specific function) into apps owned by system.
Page 33
Starts off talking about trojans, trojans are easily avoided with user knowledge in Mac OS X because most apps do not require authentication to install if installed in the appropriate location where the Unix DAC model protects the system.
Viruses using the model shown in the article will not be successful without privilege escalation. This is the reason why Mac OS X malware is not successful in the wild.
By default, very few server side services are exposed in Mac OS X and those that are exposed are sandboxed. Vectors for worm propagation are limited to client side. Client side worms require authentication to install and spread if do not include privilege escalation via exploitation because of the Unix DAC model used in Mac OS X. Trojans used to trick users to authenticate are less likely to be successful in Mac OS X as stated above.
EagerDragon
Sep 10, 08:22 PM
Please stop these chip rumors, it will only spawn new "MacBooks this Tuesday" threads:(
No, PowerBook G7 on Monday's keynote
No, PowerBook G7 on Monday's keynote
TsMkLg068426
Apr 22, 12:31 PM
I hope this service will be free or else it is really pointless just saying. Great idea but I worry there will be a price for using a Cloud service and probably only available for only the purchases you made on iTunes not CDs you have ripped. I am assuming in few days if this Cloud service comes to live there will be a iOS update again and hopefully this will work with 4th Gen iPod Touch I do not see why it will not work.
BlizzardBomb
Jul 14, 12:22 PM
Yes, the Core Duo (Yonah) is a mobile chip. The Core 2 Duo equivalent is Merom.
What? You said the word Merom but didn't include a link to the guide? :p
Well anyways, if Apple could get Conroes into iMacs it would be great. A challenge I know (and I still personally think it is more likely to be a Merom iMac) but it would help to be that little bit more competitive. The rest is pretty much predictable, Merom for MBPs and eventually MacBooks and Mac Minis. Woodcrest for Mac Pro and MacServe (Macs in everything right ;) ). iMac's future is a big ?.
What? You said the word Merom but didn't include a link to the guide? :p
Well anyways, if Apple could get Conroes into iMacs it would be great. A challenge I know (and I still personally think it is more likely to be a Merom iMac) but it would help to be that little bit more competitive. The rest is pretty much predictable, Merom for MBPs and eventually MacBooks and Mac Minis. Woodcrest for Mac Pro and MacServe (Macs in everything right ;) ). iMac's future is a big ?.
lilo777
Apr 19, 01:01 PM
+1 on the notifications
Who would want to have a s*itty radio tuner on their iphone? that's why I download music So I can listen to the music I want at good quality. with no commercials? And you can multi task any ways so what the big deal of streaming music? at least streaming is the genre you like haha
Did you know that Radio offers more than just music?
Who would want to have a s*itty radio tuner on their iphone? that's why I download music So I can listen to the music I want at good quality. with no commercials? And you can multi task any ways so what the big deal of streaming music? at least streaming is the genre you like haha
Did you know that Radio offers more than just music?
manu chao
Apr 11, 09:01 AM
How? Not unless I buy airfoil?
It is $25, not the end of the world. And it seems you also have to buy each iOS device you want to stream to, they do not come free with a new Mac.
It is $25, not the end of the world. And it seems you also have to buy each iOS device you want to stream to, they do not come free with a new Mac.
aprilfools
Aug 31, 02:38 PM
Apple is buying MicroSoft
askthedust
Sep 13, 01:37 PM
I have the 60GB old 5gb ipod and i updated it to version 1.2 see my previous post on how to do if anyone hasn't figured it out yet. I get the scrolling letter thing. Mine does play games now. Bought Mahjong and played it a few times. It does have a load time to play the game which sucks, I already have to deal with that on my PSP. Once loaded, game plays well and smoothly. do not have the fast search feature under music menu. that would have been nice to have. why give us one and not the other? happy about the support for larger video size. But will probably stick to buying DVD's and using handbrake. ITV would change that if you can download directly to it and sync it with ipod using tv to complete these steps.
cmaier
Nov 13, 04:10 PM
they are using the OS X API in the context it was meant to be used in. as far as i can tell these images aren't loaded into the iPhone application itself and are rather transmitted over-the-air as the application is being used, thus they are being called by the OS while the application is being run and are merely being displayed through the iPhone application, its like saying you can't see any apple trademark icons through a VPN client.
Or like saying that if my app has a UIWebView, I have to prevent the user from navigating to Apple.com lest he be subjected to seeing Apple's trademarked logos and pictures of Apple computers.
Or like saying that if my app has a UIWebView, I have to prevent the user from navigating to Apple.com lest he be subjected to seeing Apple's trademarked logos and pictures of Apple computers.
j800r
Apr 22, 10:06 AM
If the cloud is left as just an option, then i'm all for it. So long as the iTunes store also exists in the format it is today. I have a massive music collection currently sitting at around 140GB and constantly growing. I like owning copies of the music. Not to do anything illegal with, but I like being responsible for the music. I can already take my music collection with my wherever I go. It's called my iPod Classic. I already have my entire iTunes library backed up. It's called Time Machine. I think SYNCHING via the cloud and having it there as just an option is a great idea, for people who want it, but if they made it cloud only, and took away the ability to download then that would only increase the level of piracy in time. Very much like DRM did. Record companies thought this was a great idea to restrict usage and prevent piracy. Turned out more people were turning to pirated music because of the restrictions that had been placed on them.
To sum up. The cloud should be an OPTION, not compulsory.
To sum up. The cloud should be an OPTION, not compulsory.
dethmaShine
Apr 22, 04:54 AM
I have no idea how this would be useful. Buffer times, connection loss, no WiFi around, these are all problems that will prevent this from working.
What's wrong with storing music on hard drives locally?
Well, a 3G connection is more or less the same as wifi, although its quite unstable.
3G in the UK is quite good in my opinion. I'll wait for the networks to come up with unlimited plans as they have been a bitch all these times.
What's wrong with storing music on hard drives locally?
Well, a 3G connection is more or less the same as wifi, although its quite unstable.
3G in the UK is quite good in my opinion. I'll wait for the networks to come up with unlimited plans as they have been a bitch all these times.
ezekielrage_99
Oct 27, 10:06 AM
And Greenpeace wonder why people don't take them very seriously.....
XArt@justinks.c
Sep 13, 09:01 AM
Apart from the word serach not being on 5GiPod, only the new 5GiPod has it (but seem that this is incorect, proberly some hidden option to enable).
It dose 640x480 h.264 when updated to 1.2 but still need to find out if it dose games as well as the new improved video size.
has the new iPods been givev improved ARM7 or upgraded to ARM9 for games or is it the same and just needs 1.2 for games as well as 640x480 video
It dose 640x480 h.264 when updated to 1.2 but still need to find out if it dose games as well as the new improved video size.
has the new iPods been givev improved ARM7 or upgraded to ARM9 for games or is it the same and just needs 1.2 for games as well as 640x480 video
digitalbiker
Sep 13, 10:46 PM
It would have to be really thin, but I like it! :cool:
However the real innovation that is going to put Apple over the top is the built-in microfibre wiper blade that squeeges the LCD display after every call. This removes all trace of facial oil and keeps the screen beaming with that showroom shine! :eek:
Sorry, I had to sneek that one in.:D
However the real innovation that is going to put Apple over the top is the built-in microfibre wiper blade that squeeges the LCD display after every call. This removes all trace of facial oil and keeps the screen beaming with that showroom shine! :eek:
Sorry, I had to sneek that one in.:D
LightSpeed1
Apr 25, 01:35 PM
Could just be me, but I think the design is perfect. Apple is still way ahead of the competition with the unibody design. How much better can it get?
Lesser Evets
Mar 22, 02:56 PM
I wouldn't be surprised if the iMac and new Mac mini are the replacement for the Mac Pro...
By the time November comes around, Thunderbolt may cause the death of the Mac Pro.
Your logic is half-baked. The MacPro has one specific function which the iMac will probably never have: instant customization. You can stack tons of drive space in them, tons of RAM, and choose any sort of monitor config.
Sure, iMacs might be able to do something like that, but with a lot of garbage floating around and cluttering everything. Also, the processors in the Pro are always beefier.
However, I'd agree that for almost all people in the market, an iMac would be just as good as a MacPro. In 4 years I will probably replace my 2007 Pro with an iMac. Spending $4000 for a good Pro isn't worth it compared to $2000 for an iMac.
By the time November comes around, Thunderbolt may cause the death of the Mac Pro.
Your logic is half-baked. The MacPro has one specific function which the iMac will probably never have: instant customization. You can stack tons of drive space in them, tons of RAM, and choose any sort of monitor config.
Sure, iMacs might be able to do something like that, but with a lot of garbage floating around and cluttering everything. Also, the processors in the Pro are always beefier.
However, I'd agree that for almost all people in the market, an iMac would be just as good as a MacPro. In 4 years I will probably replace my 2007 Pro with an iMac. Spending $4000 for a good Pro isn't worth it compared to $2000 for an iMac.
OllyW
Mar 29, 12:57 PM
by 2015, wp7 doesn't exist.
You're probably right, wp8 is scheduled for late 2012. :D
You're probably right, wp8 is scheduled for late 2012. :D
fetchmebeers
Sep 12, 08:27 PM
what's with all the video issues that the old 5gen canNOT be compatible with?? and what's with the pixel number?
dammit i'm totally ignorant when it comes to tech issues.....
so can any of you please bother to elaborate about the suitable file types for both the old on and the new one?
:eek:
dammit i'm totally ignorant when it comes to tech issues.....
so can any of you please bother to elaborate about the suitable file types for both the old on and the new one?
:eek:
aswitcher
Sep 14, 03:21 PM
New iSight? Works with new 5.5th Gen iPod?
Peace
Sep 5, 01:19 PM
I would figure in the meantime they would continue to sell products in areas that they are not restricted. Oh well.
They would.If you've checked out the iSight it has a ship date of October.
My guess is they stopped making them in order to redesign them.And since they have to redesign them why not make them better.wink...wink...nudge...nudge..;)
They would.If you've checked out the iSight it has a ship date of October.
My guess is they stopped making them in order to redesign them.And since they have to redesign them why not make them better.wink...wink...nudge...nudge..;)
appleguy
Sep 4, 09:48 PM
who knows they might release a mini mac style media centre with OSX that will be used to download the movies and allow you to burn it straight to DVD/Blueray lol :cool:
kevin.rivers
Jul 14, 11:11 AM
LOL! That's the silliest thing I've seen on here in a long time.
I am glad you have enough knowledge to tell me why it is silly, instead of making a silly comment yourself.
I am glad you have enough knowledge to tell me why it is silly, instead of making a silly comment yourself.
drdan
Aug 31, 11:56 AM
the "mac+ipod" back to school special runs through september 15. his steveness has pretty reliably held new releases until the day after those kinds of specials end. i believe a significant speed bump on the macbook pros and mac minis is imminent, along with some significant revisions to the ipod.
i'm keeping an eye on my stock.
i'm keeping an eye on my stock.
Gilj
May 3, 11:03 AM
This ruins my theory about smaller (24"?) ACD with daisy chain for multiple single-TB monitors...
