Security Update 2006-002 — #29
dp.
Found 18,567 posts across 1 forum.
Security Update 2006-002 — #30
Quote:
Originally Posted by alphasubzero949
Holy fscking sh!t.
http://www.rixstep.com/1/20060314,01.shtml
I don't feel like testing this POC (proof of concept for those won…
Security Update 2006-002 — #31
You're missing something. Although the file is read-only to you, its enclosing folder (/Library/Preferences) is still writable to you, which means you can pretty much override the …
Security Update 2006-002 — #32
Quote:
Originally Posted by TETENAL
What I don't understand is why Safari doesn't do the download validation when that setting is turned off.
OK, it seems like I was wrong h…
Security Update 2006-002 — #33
Quote:
Originally Posted by TETENAL
OK, it seems like I was wrong here. Sorry. The download validation is done regardless.
Oh, that's going to piss me off. They're treating…
Security Update 2006-002 — #34
Quote:
Originally Posted by CharlesS
You're missing something. Although the file is read-only to you, its enclosing folder (/Library/Preferences) is still writable to you, which…
Security Update 2006-002 — #35
Quote:
Originally Posted by Person Man
people will just click through it without reading it, and it won't be effective.
Just like Paranoid Android.
Security Update 2006-002 — #36
Okay guys, the Rixstep POC was updated with new instructions. He also now has a tidbit about MasterPasswordHint, which I stumbled on while going through the plist on my own machin…
Security Update 2006-002 — #37
Quote:
Originally Posted by alphasubzero949
Just like Paranoid Android.
Exactly.
This kind of hand-holding for people who are vulnerable to social engineering is not neede…
Security Update 2006-002 — #38
Quote:
Originally Posted by alphasubzero949
Okay guys, the Rixstep POC was updated with new instructions. He also now has a tidbit about MasterPasswordHint, which I stumbled on…
Security Update 2006-002 — #39
Okay, here's why the POC will not work through the Finder.
If you duplicate com.apple.loginwindow.plist through the Finder, you get a binary plist file (indicated by bplist00). A…
Security Update 2006-002 — #40
Just tried it, still no rooted.txt in my /Users/Shared.
Moving the com.apple.loginwindow.plist file to /var/root/Library/Preferences, though, does create the rooted.txt, even if t…
Security Update 2006-002 — #41
Quote:
Originally Posted by alphasubzero949
It seems that if you're running 10.4.0 or 10.4.1, you're 'safe' (notwithstanding the widget exploit).
To which widget exploit are…
Security Update 2006-002 — #42
Quote:
Originally Posted by CharlesS
Just tried it, still no rooted.txt in my /Users/Shared.
Moving the com.apple.loginwindow.plist file to /var/root/Library/Preferences, thoug…
Security Update 2006-002 — #43
Now Alpha, you just described three complex steps required for this vulnerability. Could a malicious application really secretly do all of those things? Apple can only lock things …
Security Update 2006-002 — #44
Quote:
Originally Posted by Big Mac
Now Alpha, you just described three complex steps required for this vulnerability. Could a malicious application really secretly do all of th…
Security Update 2006-002 — #45
Quote:
Originally Posted by alphasubzero949
This is how I made it work on my system, although I used Xfile instead of the Finder. The key is that the substituted plist be in XM…
Security Update 2006-002 — #46
Would you believe Apple Security Update 2006-002v1.1?
Security Update 2006-002 — #47
Quote:
Originally Posted by Hal Itosis
Would you believe Apple Security Update 2006-002v1.1?
It's the same update as before, it just fixes a few bugs in the original upd…
Security Update 2006-002 — #48
Quote:
Originally Posted by Hal Itosis
Would you believe Apple Security Update 2006-002v1.1?
I'm officially confused.® What does this v1.1 due/fix/break?
Security Update 2006-002 — #49
Quote:
Originally Posted by rickey939
I'm officially confused.® What does this v1.1 due/fix/break?
Presumably corrects bugs in update 2006-002. It fixes nothing new. Othe…
Security Update 2006-002 — #50
Maybe it just kills FrontRow anew...
Weather Channel Content Crashing Safari — #1
Does anyone know what kind of content on the Weather Channel's site could cause Safari to crash? It happens very consistently on my wife's iBook. It is apparently something below…
Weather Channel Content Crashing Safari — #2
No problems here.
Try another user account.
Weather Channel Content Crashing Safari — #3
You mean another user account on the iBook, right? (The Weather Channel lets you set up accounts as well.) I'll give it a shot. If it works well with another user account, what …