Security Update 2006-002 — #27
Quote:
Originally Posted by Sophus
I had the same. Reinstalling the combo update fixed it. Give it a try.
I had an issue with my menu extras after I installed Photoshop Ele…
Found 17,378 posts across 1 forum.
Security Update 2006-002 — #28
Holy fscking sh!t.
http://www.rixstep.com/1/20060314,01.shtml
I got it to work on my machine running 10.4.5 with Security Updates 2006-001 and 002. The method may or may not wor…
Security Update 2006-002 — #30
Quote:
Originally Posted by alphasubzero949
Holy fscking sh!t.
http://www.rixstep.com/1/20060314,01.shtml
I don't feel like testing this POC (proof of concept for those won…
Security Update 2006-002 — #31
You're missing something. Although the file is read-only to you, its enclosing folder (/Library/Preferences) is still writable to you, which means you can pretty much override the …
Security Update 2006-002 — #32
Quote:
Originally Posted by TETENAL
What I don't understand is why Safari doesn't do the download validation when that setting is turned off.
OK, it seems like I was wrong h…
Security Update 2006-002 — #33
Quote:
Originally Posted by TETENAL
OK, it seems like I was wrong here. Sorry. The download validation is done regardless.
Oh, that's going to piss me off. They're treating…
Security Update 2006-002 — #34
Quote:
Originally Posted by CharlesS
You're missing something. Although the file is read-only to you, its enclosing folder (/Library/Preferences) is still writable to you, which…
Security Update 2006-002 — #35
Quote:
Originally Posted by Person Man
people will just click through it without reading it, and it won't be effective.
Just like Paranoid Android.
Security Update 2006-002 — #36
Okay guys, the Rixstep POC was updated with new instructions. He also now has a tidbit about MasterPasswordHint, which I stumbled on while going through the plist on my own machin…
Security Update 2006-002 — #37
Quote:
Originally Posted by alphasubzero949
Just like Paranoid Android.
Exactly.
This kind of hand-holding for people who are vulnerable to social engineering is not neede…
Security Update 2006-002 — #38
Quote:
Originally Posted by alphasubzero949
Okay guys, the Rixstep POC was updated with new instructions. He also now has a tidbit about MasterPasswordHint, which I stumbled on…
Security Update 2006-002 — #39
Okay, here's why the POC will not work through the Finder.
If you duplicate com.apple.loginwindow.plist through the Finder, you get a binary plist file (indicated by bplist00). A…
Security Update 2006-002 — #40
Just tried it, still no rooted.txt in my /Users/Shared.
Moving the com.apple.loginwindow.plist file to /var/root/Library/Preferences, though, does create the rooted.txt, even if t…
Security Update 2006-002 — #41
Quote:
Originally Posted by alphasubzero949
It seems that if you're running 10.4.0 or 10.4.1, you're 'safe' (notwithstanding the widget exploit).
To which widget exploit are…
Security Update 2006-002 — #42
Quote:
Originally Posted by CharlesS
Just tried it, still no rooted.txt in my /Users/Shared.
Moving the com.apple.loginwindow.plist file to /var/root/Library/Preferences, thoug…
Security Update 2006-002 — #43
Now Alpha, you just described three complex steps required for this vulnerability. Could a malicious application really secretly do all of those things? Apple can only lock things …
Security Update 2006-002 — #44
Quote:
Originally Posted by Big Mac
Now Alpha, you just described three complex steps required for this vulnerability. Could a malicious application really secretly do all of th…
Security Update 2006-002 — #45
Quote:
Originally Posted by alphasubzero949
This is how I made it work on my system, although I used Xfile instead of the Finder. The key is that the substituted plist be in XM…
Security Update 2006-002 — #46
Would you believe Apple Security Update 2006-002v1.1?
Security Update 2006-002 — #47
Quote:
Originally Posted by Hal Itosis
Would you believe Apple Security Update 2006-002v1.1?
It's the same update as before, it just fixes a few bugs in the original upd…
Security Update 2006-002 — #48
Quote:
Originally Posted by Hal Itosis
Would you believe Apple Security Update 2006-002v1.1?
I'm officially confused.® What does this v1.1 due/fix/break?
Security Update 2006-002 — #49
Quote:
Originally Posted by rickey939
I'm officially confused.® What does this v1.1 due/fix/break?
Presumably corrects bugs in update 2006-002. It fixes nothing new. Othe…
Security Update 2006-002 — #50
Maybe it just kills FrontRow anew...
Weather Channel Content Crashing Safari — #2
No problems here.
Try another user account.