MacRumors
Dec 1, 01:56 PM
http://www.macrumors.com/images/macrumorsthreadlogo.gif (http://www.macrumors.com)
Last month's Month of Kernel Bugs (http://projects.info-pull.com/mokb/) (MOKB) has concluded, and a total of 10 Mac OS X vulnerabilities has been found. The vulnerabilities were wide-ranging, from a wireless driver exploit (http://www.macrumors.com/pages/2006/11/20061102085906.shtml) to a system call (http://www.macrumors.com/pages/2006/11/20061111185646.shtml), multiple disk image vulnerabilities (http://www.macrumors.com/pages/2006/11/20061121195941.shtml), and most recently an AppleTalk vulnerability (among others). Apple patched the first wireless driver exploit (http://www.macrumors.com/pages/2006/11/20061128162852.shtml) along with other unrelated vulnerabilities this week, however all remaining MOKB vulnerabilities remain un-patched.
Interview
MOKB organizer "LMH" spoke to MacRumors about the project. According to LMH, most of the project's time was spent on Linux and the Mac OS, both of which were described as "not hard" to break.
The Linux kernel takes little time to break. I'm more familiar with the code and thus it also takes less time to isolate issues. OS X kernel (XNU) takes less time but depending on the area you're checking, debugging and isolation may require a bit more time (if you take into account that AppleTalk source code is almost unreadable and totally deprecated) [...] I didn't have much time left for working on Microsoft Windows but I've received the most helpful feedback from the MSRC people on potentially interesting stuff to check. Not a huge reference of internal code nor NDA covered documents, but at least enough to start with.
In LMH's point of view, the state of Mac OS X security is not great.
From the technical perspective, OS X security is rather poor, at least when it comes to kernel-land code. This isn't a sign of negligence of Apple, but obviously when you take code from many different places and stick it together, it's prone to problems. Not just new ones but also old issues that 'went under the radar'. [...] (ed note: now comparing MS to Apple) I can say that Microsoft has a more thorough auditing process and investment when it comes to kernel code than Apple. They also have the advantage of having such code being produced within the company. Mac OS X kernel, for example, depends heavily on FreeBSD development. A security flaw in the FreeBSD kernel will likely affect OS X and probably other BSD "flavours"
However, just because LMH is a bit critical of Mac OS X's security, don't call him an Apple-hater.
Taking security arguments apart, I have to say that Mac OS X is a pretty well integrated system. It's tightly packaged [...] and nice looking. I'm an OS X user myself and I certainly feel like Apple has invested long time on tweaking the little details. Now they just have to invest a little more on security matters, but not hiring a 'turnover security firm' to do the consulting that leaves the job half done. That's what failed, IMHO.
First Adware for Mac OS X?
In related news, F-Secure claims to have received what is possibly the first ever proof-of-concept Adware program for Mac OS X (http://www.f-secure.com/weblog/archives/archive-112006.html#00001030). The program, dubbed iAdware, will launch Safari to specified web pages when the user used any number of applications, and installation of the adware did not require admin privileges.
[ Digg This (http://digg.com/apple/Month_of_Kernel_Bugs_Unveils_10_Mac_OS_X_Vulnerabilities) ]
Last month's Month of Kernel Bugs (http://projects.info-pull.com/mokb/) (MOKB) has concluded, and a total of 10 Mac OS X vulnerabilities has been found. The vulnerabilities were wide-ranging, from a wireless driver exploit (http://www.macrumors.com/pages/2006/11/20061102085906.shtml) to a system call (http://www.macrumors.com/pages/2006/11/20061111185646.shtml), multiple disk image vulnerabilities (http://www.macrumors.com/pages/2006/11/20061121195941.shtml), and most recently an AppleTalk vulnerability (among others). Apple patched the first wireless driver exploit (http://www.macrumors.com/pages/2006/11/20061128162852.shtml) along with other unrelated vulnerabilities this week, however all remaining MOKB vulnerabilities remain un-patched.
Interview
MOKB organizer "LMH" spoke to MacRumors about the project. According to LMH, most of the project's time was spent on Linux and the Mac OS, both of which were described as "not hard" to break.
The Linux kernel takes little time to break. I'm more familiar with the code and thus it also takes less time to isolate issues. OS X kernel (XNU) takes less time but depending on the area you're checking, debugging and isolation may require a bit more time (if you take into account that AppleTalk source code is almost unreadable and totally deprecated) [...] I didn't have much time left for working on Microsoft Windows but I've received the most helpful feedback from the MSRC people on potentially interesting stuff to check. Not a huge reference of internal code nor NDA covered documents, but at least enough to start with.
In LMH's point of view, the state of Mac OS X security is not great.
From the technical perspective, OS X security is rather poor, at least when it comes to kernel-land code. This isn't a sign of negligence of Apple, but obviously when you take code from many different places and stick it together, it's prone to problems. Not just new ones but also old issues that 'went under the radar'. [...] (ed note: now comparing MS to Apple) I can say that Microsoft has a more thorough auditing process and investment when it comes to kernel code than Apple. They also have the advantage of having such code being produced within the company. Mac OS X kernel, for example, depends heavily on FreeBSD development. A security flaw in the FreeBSD kernel will likely affect OS X and probably other BSD "flavours"
However, just because LMH is a bit critical of Mac OS X's security, don't call him an Apple-hater.
Taking security arguments apart, I have to say that Mac OS X is a pretty well integrated system. It's tightly packaged [...] and nice looking. I'm an OS X user myself and I certainly feel like Apple has invested long time on tweaking the little details. Now they just have to invest a little more on security matters, but not hiring a 'turnover security firm' to do the consulting that leaves the job half done. That's what failed, IMHO.
First Adware for Mac OS X?
In related news, F-Secure claims to have received what is possibly the first ever proof-of-concept Adware program for Mac OS X (http://www.f-secure.com/weblog/archives/archive-112006.html#00001030). The program, dubbed iAdware, will launch Safari to specified web pages when the user used any number of applications, and installation of the adware did not require admin privileges.
[ Digg This (http://digg.com/apple/Month_of_Kernel_Bugs_Unveils_10_Mac_OS_X_Vulnerabilities) ]
twoodcc
Oct 21, 10:05 AM
It doesn't look like the Core i860 was overclocked, running at 2.8...
Hyperthreading does wonder to Folding eh.
oh ok. i did see a core i7-860 running at 3.8 somewhere. but 43 - 45 mins a frame should be about right i think. wouldn't you get a bonus with that?
Hyperthreading does wonder to Folding eh.
oh ok. i did see a core i7-860 running at 3.8 somewhere. but 43 - 45 mins a frame should be about right i think. wouldn't you get a bonus with that?
Phatpat
Jul 25, 08:21 AM
I'm still wondering about battery life.
And they list the wired as Windows compatible, but not the new bluetooth version. Any reason it wouldn't work on Windows?
And they list the wired as Windows compatible, but not the new bluetooth version. Any reason it wouldn't work on Windows?
gorgeousninja
Apr 28, 05:40 PM
Wirelessly posted (Mozilla/5.0 (iPhone; U; CPU iPhone OS 4_3_2 like Mac OS X; en-us) AppleWebKit/533.17.9 (KHTML, like Gecko) Version/5.0.2 Mobile/8H7 Safari/6533.18.5)
Aaaarrrrggggghhhhhhhh!! The white iPhone is slightly thicker than the black one... Heeeelllllllllpppppppp....we're all dooooommmmmed!!!!!!
Aaaarrrrggggghhhhhhhh!! The white iPhone is slightly thicker than the black one... Heeeelllllllllpppppppp....we're all dooooommmmmed!!!!!!
more...
CubaTBird
Jul 21, 07:33 PM
This is awesome. The fact that Apple has gone above and beyond that 3% that we have seemed to stayed at for so long is most awesome. :o
Krafty
Feb 1, 05:48 AM
http://lulzimg.com/i11/c3a4da.jpg
more...
neko girl
May 1, 11:14 PM
If anything this will have just made our foreign policy situation worse. Get ready for the blowback, because this event definitely pissed off some extremists.
Why does it sound like you are hoping something like this will happen? Bitter much?
Why does it sound like you are hoping something like this will happen? Bitter much?
wordoflife
Apr 14, 01:00 AM
I originally waited for the white version (back when it was only delayed until "late summer".) but once September rolled around, I just decided to wait until the 5 came out. With the rumors of the 5 being delayed until fall, I might have to seriously consider some backup plans. I'd prefer to stick with an iPhone, but the 3GS is getting long in the tooth and I will not sign a contract for outdated hardware.
It's not really outdated in the sense that it is still the best and latest iPhone out there. But I know what you are getting at.
It's not really outdated in the sense that it is still the best and latest iPhone out there. But I know what you are getting at.
more...
inkswamp
Jul 21, 12:26 PM
Neither did I, but more market share means more software developers and more apps. That's the only reason I care.
I suppose there's some truth to that, but even when Apple was hitting its lowest points in terms of market share, there was no dearth of good apps. You may not be able to get some more esoteric stuff but that's not going to affect most people.
I suppose there's some truth to that, but even when Apple was hitting its lowest points in terms of market share, there was no dearth of good apps. You may not be able to get some more esoteric stuff but that's not going to affect most people.
disisdave
Apr 13, 08:50 PM
I saw one in the wild.
Employee at an AT&T store in Charlotte, NC had one last week when I stopped in to purchase a car charger. He said they are probably going to be out soon, but mentioned that he is having problems with the proximity sensor. he said the screen display is staying on when he is on calls and that his cheek/ear are activating display controls. Could it be an issue with the bright white reflecting too much light into the sensor?
Employee at an AT&T store in Charlotte, NC had one last week when I stopped in to purchase a car charger. He said they are probably going to be out soon, but mentioned that he is having problems with the proximity sensor. he said the screen display is staying on when he is on calls and that his cheek/ear are activating display controls. Could it be an issue with the bright white reflecting too much light into the sensor?
more...
SandynJosh
Apr 29, 05:12 PM
Oh good. I like lower prices.
When I buy music, I typically buy from Amazon anyway. Their prices almost always seem to be cheaper than iTunes for the music I buy.
/would not buy or listen to anything by the artists listed in the above article. Just sayin' :p
I've only bought one song from Amazon and the sample rate was less than I get with iTunes. Anyone else notice a difference?
When I buy music, I typically buy from Amazon anyway. Their prices almost always seem to be cheaper than iTunes for the music I buy.
/would not buy or listen to anything by the artists listed in the above article. Just sayin' :p
I've only bought one song from Amazon and the sample rate was less than I get with iTunes. Anyone else notice a difference?
hexonxonx
Apr 29, 05:37 PM
I have to wonder how many people discussing audio quality buy their movies from iTunes vs Blu-Ray.
Just asking since apparently those people are so concerned with getting optimal performance from their media.
Not to take this off topic - but too many people have been duped by all the streaming serves and cable companies to believe they're getting a true HD experience when, in fact, they aren't because of the astronomical bitrate difference between what can be streamed vs delivered by hard media at current.
I don't have a blu-ray player and have no plans on buying one. I also don't have an HD TV, still using a 10+ year old Sony Trinitron. It's not broke so it's not getting replaced till it is.
I buy all my TV shows and on iTunes in HD and watch them on my 15" MBP. I buy movies on iTunes as well as I don't rent and haven't in over 15 years.
Even if Amazon has 69 cent songs, I will likely continue buying on iTunes. Over the past year, most music has been purchased on my iPhone while I am out. Can't do that with Amazon.
Just asking since apparently those people are so concerned with getting optimal performance from their media.
Not to take this off topic - but too many people have been duped by all the streaming serves and cable companies to believe they're getting a true HD experience when, in fact, they aren't because of the astronomical bitrate difference between what can be streamed vs delivered by hard media at current.
I don't have a blu-ray player and have no plans on buying one. I also don't have an HD TV, still using a 10+ year old Sony Trinitron. It's not broke so it's not getting replaced till it is.
I buy all my TV shows and on iTunes in HD and watch them on my 15" MBP. I buy movies on iTunes as well as I don't rent and haven't in over 15 years.
Even if Amazon has 69 cent songs, I will likely continue buying on iTunes. Over the past year, most music has been purchased on my iPhone while I am out. Can't do that with Amazon.
more...
DaBlackMamba
Mar 17, 01:25 PM
2 White Ipads 16GB! :apple:
Had fun in line too.
Waited from 7 AM.
Had fun in line too.
Waited from 7 AM.
Yvan256
Jul 28, 09:37 AM
iTunes, iPod, Music Store, TV Shows, etc.....
Apple's efforts have been just as long term as Microsoft's. Apple just seems more segmented because they don't disclose info ahead of time. Apple had the advantage of being the first with all of these.
In think the main point of view of many people here is that when Microsoft makes long-term plans, it's because they're planning to drive the competition to the ground with the help of a big pile of cash instead of innovation and good products.
The fact that they started this whole new thing by dropping their own PlaysForSure DRM isn't a good indicator (for the users AND commercial partners - they have to switch hardware again).
Apple, on the other hand, has switched three times (68K->PPC, OS 9->OS X, PPC->Intel) and has always tried to keep compatibility with the previous system. A first generation iPod can play iTMS-bought tunes, too (unless I'm mistaken).
Apple's efforts have been just as long term as Microsoft's. Apple just seems more segmented because they don't disclose info ahead of time. Apple had the advantage of being the first with all of these.
In think the main point of view of many people here is that when Microsoft makes long-term plans, it's because they're planning to drive the competition to the ground with the help of a big pile of cash instead of innovation and good products.
The fact that they started this whole new thing by dropping their own PlaysForSure DRM isn't a good indicator (for the users AND commercial partners - they have to switch hardware again).
Apple, on the other hand, has switched three times (68K->PPC, OS 9->OS X, PPC->Intel) and has always tried to keep compatibility with the previous system. A first generation iPod can play iTMS-bought tunes, too (unless I'm mistaken).
more...
Master-D
Apr 4, 02:19 AM
http://farm6.static.flickr.com/5097/5588279616_ea0e50516f_b.jpg (http://www.flickr.com/photos/damoncrane/)
this is where boris and the clan are plotting how we can all pay for the olympics with parking tickets :rolleyes:
this is where boris and the clan are plotting how we can all pay for the olympics with parking tickets :rolleyes:
ufkdo
Apr 13, 03:26 PM
I will most likely need to buy a TV on the middle of next year, so this would be awesome :)
more...
alexf
Oct 18, 04:47 PM
Check the links at the top of the press release (http://www.apple.com/pr/library/2006/oct/18results.html).
Still not sure about this "less than half the total" figure... :confused:
Still not sure about this "less than half the total" figure... :confused:
Eidorian
May 3, 08:12 AM
The way they've been able to keep the price low while using quad-cores in EVERY iMac has been by downgrading the GPUs. The Graphics Cards in EVERY model are now mobile. In the last line of iMacs they were full powered desktop GPUs.
So, you see, while there's an upside (the processors), it doesn't come without a down (the GPUs). At first glance I was really annoyed as the �999 one (which is what I got before the refresh) had an i5 quad core, then I saw the graphics memory and got even more annoyed, but THEN I noticed the large shiny M at the end of the GPU name. THAT's how they've been able to bring us them processors and still keep the price down. They've downgraded the GPUs. As my i3 processor practically acts like a quad core anyway and is virtually never pushed to it's limits I think I'm more than happy with what I have. The GPU may only have 256MB dedicated memory but at least it's not mobile.They have been mobile since the switch to Intel. Though the 24" with 7300/7600GT does stand out.
http://en.wikipedia.org/wiki/List_of_Intel_Core_i5_microprocessors#.22Sandy_Bridge.22_.2832_nm.29_2
The 2.5GHz and 2.7GHz models look to be Low-Voltage 65W Core i5, which is why Apple is able to fit quad cores in the 21.5" enclosure. But does that actually mean the 3.1GHz Core i5 in the 27" is actually cheaper than the slower 2.7GHz Core i5 in the 27"? Intel doesn't sell a 2.7GHz standard voltage Core i5 unless its a custom model or Apple is underclocking the 2.8GHz Core i5, which seems like an unnecessary waste of free clock speed room.Underclock and relabel is not anything new.
So, you see, while there's an upside (the processors), it doesn't come without a down (the GPUs). At first glance I was really annoyed as the �999 one (which is what I got before the refresh) had an i5 quad core, then I saw the graphics memory and got even more annoyed, but THEN I noticed the large shiny M at the end of the GPU name. THAT's how they've been able to bring us them processors and still keep the price down. They've downgraded the GPUs. As my i3 processor practically acts like a quad core anyway and is virtually never pushed to it's limits I think I'm more than happy with what I have. The GPU may only have 256MB dedicated memory but at least it's not mobile.They have been mobile since the switch to Intel. Though the 24" with 7300/7600GT does stand out.
http://en.wikipedia.org/wiki/List_of_Intel_Core_i5_microprocessors#.22Sandy_Bridge.22_.2832_nm.29_2
The 2.5GHz and 2.7GHz models look to be Low-Voltage 65W Core i5, which is why Apple is able to fit quad cores in the 21.5" enclosure. But does that actually mean the 3.1GHz Core i5 in the 27" is actually cheaper than the slower 2.7GHz Core i5 in the 27"? Intel doesn't sell a 2.7GHz standard voltage Core i5 unless its a custom model or Apple is underclocking the 2.8GHz Core i5, which seems like an unnecessary waste of free clock speed room.Underclock and relabel is not anything new.
cosmokanga2
Apr 13, 03:44 PM
http://farm6.static.flickr.com/5227/5614995836_34cb024583_b.jpg (http://www.flickr.com/photos/stefanctf/5614995836/)
An airliner departs from Vancouver International Airport.
An airliner departs from Vancouver International Airport.
MorphingDragon
Apr 16, 09:09 PM
Well, for starters, to prevent the damn year 2038 problem.
Don't ruin the fun. We still have to make 2038 theories about the world ending. :D
Don't ruin the fun. We still have to make 2038 theories about the world ending. :D
Chef Medeski
Oct 18, 05:18 PM
Pssh.
That nothing.
I made 600 million profit selling lemonade on my street just last week.
Thats a whole lot of lemons and suger.... unless u used too much water!!!!!:eek:
YOU CANT DILUTE LEMONADE YOU BAS****. WHERES YOUR INNOVATION STOP FOCUSING ON THAT CUTE CUDDLY MUSIC PLAYER AND GET CRANKING WITH THE REAL LEMONADE..... BITTER LIKE I LIKE IT..
:rolleyes:
That nothing.
I made 600 million profit selling lemonade on my street just last week.
Thats a whole lot of lemons and suger.... unless u used too much water!!!!!:eek:
YOU CANT DILUTE LEMONADE YOU BAS****. WHERES YOUR INNOVATION STOP FOCUSING ON THAT CUTE CUDDLY MUSIC PLAYER AND GET CRANKING WITH THE REAL LEMONADE..... BITTER LIKE I LIKE IT..
:rolleyes:
lordonuthin
Oct 27, 05:33 PM
alright then. i'd say that's reason enough to run bigadv units on your 920 at stock speed
I'll get right on it! and try to oc it some, once I figure out how :o
I should finish my first bigadv wu sometime around 10 cst tonight.
I'll get right on it! and try to oc it some, once I figure out how :o
I should finish my first bigadv wu sometime around 10 cst tonight.
Small White Car
Apr 11, 01:36 PM
Could someone clarify this for me: Aren't hard drives too slow to make use of Thunderbolt anyway?
I haven't read for sure, but I'm guessing these products are RAIDed for speed, not redundancy.
How many drives are in there? It's possible they've got the speeds up pretty high on them.
I haven't read for sure, but I'm guessing these products are RAIDed for speed, not redundancy.
How many drives are in there? It's possible they've got the speeds up pretty high on them.
akac
Nov 4, 01:20 AM
I should add that this is the one reason I'm interested in VMWare - native disk speed. I can partition my disk to XP and Mac ala Bootcamp and have VMWare use the partition natively for disk access.