New MacDefender Defeats Apple Security Update 427
XxtraLarGe writes "Apple released a security update yesterday designed to rid Macs of the menacing MacDefender malware that has plagued users for nearly a month. But mere hours after the update, cyber-criminals released a new variant of the malware that easily defeated Apple's belated security efforts. That didn't take long."
Obligatory Clarification (Score:5, Informative)
Apple's security update include a new daily malware definitions update. So this is hardly the easy defeat that the description is hinting at. More like the beginning of a long drawn out war...
Re: (Score:3, Interesting)
Welcome to the windows security world. it's the end of "it just works" and the begining of "it just works as long as you do X, Y, and Z right".
Re:Obligatory Clarification (Score:4, Informative)
So far, I'd disagree with that. The malware detection is built into the system, invisible, automatic, and self updating. So the user doesn't have to do X, Y, or even Z at all. We're still at "It just works."
Not saying that couldn't change in the future, but we're not there yet.
Re: (Score:2, Insightful)
That would probably happen on Windows too if Microsoft is allowed to bundle MSE into the OS over 'OMGZ ANTITRUST" shouts.
Re: (Score:3, Funny)
Didn't the anti trust regulation period end a while back? I assume windows will become the garden of peace and prosperity any day now.
Re: (Score:2)
It only just ended 2 or 3 weeks ago (May 12)
Re: (Score:2)
Re:Obligatory Clarification (Score:4, Interesting)
Doesn't change the effectively whack-a-mole nature of antivirus(particularly now that sneaky shit like kernel-mode DRM drivers and silent phoning home are features of "legitimate" software...); but it wouldn't be a significant problem in itself.
Re: (Score:3)
MSE as a download seems to be an anti-piracy measure as well. You need a legit key to get it.
Re: (Score:3)
From what I have seen lately, MSE seems to be the best, everyone else seems to just want to add useless features. MSE is small and out of the way and it works. Take a hint do one thing and do it well.
Re:Obligatory Clarification (Score:5, Informative)
I was working at an ISP during that period. Before Win 95, we had to *license* Netscape, send out two floppies containing Netscape, Trumpet Winsock and a connection script on two floppies (or sell them in a box as our Internet Access Kit). When 95 came out, IE was free for the ISP, so only one floppy with a configuration script and IE. Later on, only the configuration script was needed. Since it was only one floppy and IE was free, it cost way less that way, and we saved one floppy. Besides, since everything was included in 95, it could even be done over the phone. That's what really killed Netscape IMO. Netscape 3.02 was a better browser than IE3 or IE4, but since IE was free and good enough, that's was people used, especially new costumers. Heck, I remember when we shipped Mosaic :)
Re:Antitrust ended2-3 weeks ago (Score:3)
Then the next story out of Redmond was "Yay. Now we can try to restrict chipmakers to one model of computer maker!"
Re: (Score:3)
And it's a good thing someone does. Anyone who is even remotely familiar with microsoft's track record on the issue wouldn't bet a broken dime on MS not abusing its monopoly whenever possible.
Re: (Score:2, Insightful)
So far, I'd disagree with that. The malware detection is built into the system, invisible, automatic, and self updating. So the user doesn't have to do X, Y, or even Z at all. We're still at "It just works."
If Microsoft had it's way, the malware detection would be built into the system as well (think Microsoft Security Essentials), but anti-trust fears and a huge security software market keep that from happening. And, as with Windows, until Macs are malware-proof (which they aren't) you still need to do X, Y, and Z. Even with the latest Apple updates.
Re: (Score:2)
Re: (Score:2)
Re:Obligatory Clarification (Score:5, Insightful)
maccodemonkey writes:
So far, I'd disagree with that. The malware detection is built into the system, invisible, automatic, and self updating. So the user doesn't have to do X, Y, or even Z at all. We're still at "It just works."
Not saying that couldn't change in the future, but we're not there yet.
Okay, maccodemonkey, here's the thing: if the malware detection which is built into the system, invisible, automatic, and self updating is defeated within hours of it being release, we are no longer at "It just works." What part of "It doesn't work anymore" sounds like "It just works" to you?!?
Re: (Score:2, Insightful)
Okay, maccodemonkey, here's the thing: if the malware detection which is built into the system, invisible, automatic, and self updating is defeated within hours of it being release, we are no longer at "It just works." What part of "It doesn't work anymore" sounds like "It just works" to you?!?
Because the user experience hasn't changed. The user neither notices the viruses, or the antivirus.
To a user, nothing has changed since before MacDefender.
Mac OS X and Linux have a root user that protects the system against rogue processes causing too much damage. Do we call that a fault in the system because it has to exist, or do we call that a solution?
No system is immune to trojans. Especially when users hand the trojan their root password, like what was done with MacDefender.
Re: (Score:2)
And Windows has "Administrator" - what's the difference?
The real issue here is that actual users care very much more about the stuff under their user account that the stuff owned by root. Installing malware as a regular user can do plenty of bad stuff without needing root.
Re: (Score:3)
Because the user experience hasn't changed. The user neither notices the viruses, or the antivirus.
Um. Er.
I'm pretty sure the user notices the virus, actually.
Re:Obligatory Clarification (Score:4, Informative)
Fuck Windows too. This is Slashdot. I have a four digit user ID. What operating system do you think I use, dipshit?
OS/2 user obviously ... (Score:4, Funny)
Fuck Windows too. This is Slashdot. I have a four digit user ID. What operating system do you think I use, dipshit?
Given the 90s timeframe and your level of anger I'd say you are obviously a very disappointed OS/2 user. ;-)
Re: (Score:2)
Re: (Score:2)
If Microsoft built MSE out of the box into windows they would find themselves in front of a court before it could run its first AV scan.
Maybe, but I am not so sure. Bundling tools in the OS that help protect the OS is a lot more justifiable than what they pulled with IE.
There have been many tools and utilities from third party developers that once filled shortcomings of the OS that have gradually been obsoleted as the OS has become more robust. I can't remember the last time I used XTree Gold out of anything other than nostalgia, as an example.
Re: (Score:3)
*sigh* I fear this is the end of OS X as we know it....
Re: (Score:2)
I can't help but wonder why there appears to be preference pane for this malware program and its update process?
Re: (Score:3)
What I haven't been able to find anywhere is information on what sort of "definitions" are used.<br><br>
The system is based on OS X's existing "file quarantine" feature, which sets a flag on files originating from safari, mail, and a few other sources, which thr
Re: (Score:2)
Ninty never kept up on it though; they'd go months without releasing patches like that.
Usually every time a big first party title came around there would be a 'firmware update.' Then, barring actual bugs or features (the exception), it'd sit there til the next big first party title.
And this is surprising why? (Score:5, Insightful)
It's a new piece of malware, as far as definitions go. It will be blocked tomorrow when the tool checks for new definitions.
It still requires that you dismiss the "this file appears to be a file downloaded from the internet from [address], are you sure you want to run it?" dialog box. Plus, with no admin password it's local user only (which is still bad, just not root capable).
Alas, the arms race begins. At least it's only trojans.
Re: (Score:2)
Local user can be mission accomplished very easily. For example, users with admin privs have write access to the /Applications folder. This means that malware can infect programs there with ease.
At least Apple is one step ahead with the App Store. I can see the "file downloaded" dialog be only available to admins only in a future rev of OS X.
Re: (Score:2)
I don't believe so. Looking at random apps in the Applications folder, I don't own any of them. System does. Everyone else has read only access.
Re: (Score:2)
Actually looking a bit deeper, some do show me as owner. It appears all of the system apps are owned by System. Most apps by 3rd parties are also owned by system, but those I packaged myself into DMG files for easier backup/installation are owned by me. I suspect my use of this type of backup isn't all that common though.
Re:And this is surprising why? (Score:4, Interesting)
That's the interesting question, isn't it - the extent to which Apple has committed the resources to block malware effectively on a daily basis. It'll be interesting to see whether they can nip things in the bud sufficiently to dissuade the bad guys.
Re:And this is surprising why? (Score:4, Informative)
Not surprising at all. That's how Windows works too.
Re: (Score:2)
Re: (Score:3)
Sigh. Don't you have a bridge to guard?
The article that is practically on the same page as this one mentions the daily updates to the definitions, and the daily checking by the new tool. Given that it's June 1st at the moment, "next month" is just baseless bashing.
Re: (Score:3)
And I don't guard the bridge, I live UNDER it, you insensitive clod =]
Re: (Score:3)
I believe it does have a leg up, but only in the sense that Unix in general has a leg up because the starting point was so different. Unix, Linux and the like have always had a leg up in that respect just by their nature. It's not trolling, it's simply fact. Windows has got much better in recent years - Win 7 is actually really good, and the instances of viruses is going down.
Yes you are trolling. You are repeating unsubstantiated claims based on hyperbole and wishful thinking. You and others are repeating these claims without ever - like you this time - offering any justification for what it factually *is* that gives it a leg up. Like all good FUD it has a little piece of truth on which it can embellish: DOS and the Windows 9x family were very much single-user in the design mindset. But Windows NT was not built upon DOS and neither Windows 9x. Windows NT was developed ground-up
How long (Score:2)
Re: (Score:2)
Any first hand experience? (Score:3)
the menacing MacDefender malware that has plagued users for nearly a month
My personal laptop is a Macbook pro, and I have only heard of this through the media. Has anyone actually seen this first hand?
Re: (Score:2)
Yes, actually, from a link on Slashdot (national geographic Area 51 article) I knew enough to get rid of it.
Re:Any first hand experience? (Score:4, Informative)
I have seen it attempt to get me to download it - I got hit by a google image search result where it showed me a "Finder" in Safari, with an almost convincing progress bar etc while it "scanned for viruses".
I didn't click the download button though.
Re:Any first hand experience? (Score:4, Interesting)
Same happened to me (Google image search and all, and not even for anything that would take me to the sort of places on the 'net where I'd expect malware to reside), except that it offered no download button and instead downloaded immediately. I have my Safari set up to not automatically open "safe" files, so that's as far as it got, but it was annoying nonetheless.
Re:Any first hand experience? (Score:4, Informative)
Google Image Search is EVIL
I was looking for a certain type of connector, so I google image'd it. While perusing results for something as totally bland as surface mount connectors, I suddenly got a UAC prompt. Even after canceling it, I got an icon in the taskbar. Thankfully the denied UAC kept it from getting its hooks in, and I promptly found and deleted the offending file.
Now, I won't even touch Google Image Search through a remote connection to a virtual machine running Chrome in a sandbox on someone else's network.
Re: (Score:2)
I suppose it was only a matter of time until OS X became a target. Granted this isn't a
Re: (Score:2)
I only heard about this too. I also only heard about Windows viruses and trojans even though I also own a number of Windows machines.
Bottom line - I don't expect my computers to ever be infected, but it's out there.
Seen it three times this month (Score:4, Interesting)
Usually while doing a Google image search. I was searching for everything from ships to aircraft, so this doesn't appear to be just a porn/warez problem.
Still, there's a major difference between this and Windows malware. The "Install me now" routine pops up, but you have to voluntarily enter your username and password for it to infect you on the Mac. You can become infected on Windows just by surfing the wrong website. But I suppose it's only a matter of time before the scumbag malware makers of the world find a way around that.
Re: (Score:2)
Re: (Score:2)
Re: (Score:2, Flamebait)
Translation: I'm a friendless neckbeard living in my mom's basement on Mountain Dew and Cheetos and am jealous of all those "hipster" kids with their friends and "cool" gadgets. Girls don't seem to appreciate I compiled my own kernel!
See, I can generalise too!
(seriously, I cannot see how you got to where you were from the OP's question, which had no grandstanding or platform flaming or anything, just a query about an issue that is apparently "widespread" and "menacing" (according to the article) on OS X.
Thi
Re: (Score:2)
The rabbit... (Score:2, Insightful)
Tommy: What's coursing?
Turkish: Hare coursing. They set two lurchers – they're dogs, before you ask – on a hare. And the hare has to outrun the dogs.
Tommy: So, what if it doesn't?
Turkish: Well, the big rabbit gets fucked, doesn't it?
Tommy: [pauses and thinks] Proper fucked?
Turkish: Yeah, Tommy. Before zee Germans get there.
It's only downhill from he
This just in... (Score:3, Insightful)
Re:This just in... (Score:5, Insightful)
Visiting a website shouldn't be able to install malware on my computer. Neither should opening an email, Flash applet, Java applet, Word document, etc. These are all the faults of the relevant vendors.
Installing random unsigned binaries from the internet? That should be able to do absolutely anything -- it needs to be able to for computers to be general purpose tools. And that includes malware.
TL;DR social engineering is the user's fault, but sec vulns do exist and are not.
Re: (Score:2)
Absolutely true, and I couldn't agree more. Remind me again how any of that applies here? None of those things you talk about have anything to do with this particular piece of malware. This malware doesn't install itself, no security vulnerabilities (aside from the user) are at play here, and Apple has responded by adding a daily auto-updating definitions file which will allow them to respond to these new variants in a timely manner without any further inconvenience to the user.
So...remind me again?
Re: (Score:2)
Re: (Score:2)
Re:This just in... (Score:4, Insightful)
Right, people have been careless enough to go to a thoroughly reputable site that sells ads. People have even been so careless as to open email from frequent correspondents. (Both of those bit my wife, who's far from being ignorant or careless.)
Re: (Score:2)
I have been using computers since the 286 days and I have yet to get a virus of any kind on any of my personal machines
Obviously you don't surf the web while drunk.
Not that I ever...uh...er...
Re: (Score:2)
Re: (Score:2)
Last virus to hurt me would've done the same no matter how careful I'd been. A normally-safe and trustworthy site got hacked (smbc-comics.com, for the record), put a malicious Java applet into the page.
You run Java? In your web browser? And you're surprised your machine gets remotely pwned?
I thought everyone who cared about security deleted the Java and PDF plugins from their web browser years ago.
Re: (Score:2)
>>>I have yet to get a virus of any kind on any of my personal machines
I don't believe you. Even back in the 68000 days, Boot Sector viruses existed. All you needed to do was copy a floppy from a friend and insert it into your drive. I got my first one in 1988 on my Commodore Amiga.
And today it's even easier, since javascripts often download payloads via advertising. You probably have a virus right now, and don't even realize it. Try running AdAware or Spybot. I'm sure they'll find at least o
Re: (Score:2)
Re: (Score:3)
I have been using computers since the 286 days and I have yet to get a virus of any kind.
The only people I ever hear say something like that are people who don't install AV software and thus have no idea they're infected. They rely on the fact that their computer works to tell them that everything's honky dory. Not saying you're one of those people, but if you're not, you're the first, and I'd say your success is more attributable to luck than skill, like avoiding STDs by only having sex with people who a
Yeah, but .. (Score:5, Insightful)
Until that happens, it's not really a security issue, it's still a social engineering hack. And no platform is immune to social engineering hacks because there are always end users dumb enough to unlock the front door for whatever puts on a good show and let it walk right in and take over.
If someone figures out a way to bypass Installer and run unsigned code without at least throwing a warning, then I'll worry
Re: (Score:3)
>If someone figures out a way to bypass Installer and run unsigned code without at least throwing a warning, then I'll worry ..
All it takes is one Flash, PDF or Java exploit. And God knows those are plenty.
Re: (Score:2)
It is inevitable at this point. At the last pwn2own competition, security researchers were able to launch an application and write a file once the user visited a webpage. The article does not say whether or not the file was written to a protected directory or not. They just mention that the browser's sandbox feature was defeated.
http://www.crunchgear.com/2011/03/09/os-x-and-safari-first-casualty-at-pwn2own-hacking-contest/ [crunchgear.com]
Apple has to step up their game. (Score:3)
As Mac OS gains more and more users (and similarly any other platform like IOS, Android, and *gasp* Linux) they become more and more vulnerable because rarer and rarer exploits still result in powerful botnets.
Apple has never been "virus proof," they just never had the numbers to make a lot of exploits worth the coding time.
Re: (Score:3)
Did Apple kind of shoot themselves in the foot with their "No Viruses/Malware" campaign? Yeah. (Nevermind that they never actually claimed you couldn't be infected...)
Is MacDefender a portend of Malware waves upon OS X? Unlikely, and it really has nothing to do with market share. I know this is a tired argument, but the "You're day is coming OS X, just wait until you're worthwhile to hack!" idea just hasn't played out no matter how many times security researchers shout it from their blogs/websites (ofte
Re:Apple has to step up their game. (Score:4, Insightful)
Is MacDefender a portend of Malware waves upon OS X? Unlikely, and it really has nothing to do with market share. I know this is a tired argument, but the "You're day is coming OS X, just wait until you're worthwhile to hack!" idea just hasn't played out no matter how many times security researchers shout it from their blogs/websites (often times alongside links to purchase Macintosh AV software).
Of course it hasn't played out. Mac OS still only has a little over 7% of the market pinned down. Windows collectively (between XP, Vista and Windows 7) controls over 80% of the market. That means that besides smaller proof-of-concept exploits programed for fun, there is still very limited utility for mac malware in the wild.
All I'm saying is that getting from 2% to 8% market share will be much easier than getting from 8% to 32% and now that they're getting to almost an 8% market share, the first signs of malware are popping up.
I'd also like to say that while the 2nd MacDefender is indeed much more of a social engineering hack than anything, the first version did exploit a major bug which allowed root access without any additional permissions. Mac vulnerabilities are out there - and that one was a huge one so it was exploited, but look at the numbers - right now to get similar processing power or informational exploit pools, you'd have to have a hack that's literally 10 times as rampant on Mac than on PC.
It is and always will be a numbers game.
Re:Apple has to step up their game. (Score:4, Insightful)
All I'm saying is that getting from 2% to 8% market share will be much easier than getting from 8% to 32% and now that they're getting to almost an 8% market share, the first signs of malware are popping up.
But by this defintiion of malware, Unix had malware when it had a 0.001% market share.
echo 'Hey, dude, forward this email to everyone you know, then type sudo rm -rf /' | mail bozo@idiotsrus.com
By the definition being used here, that's not just unix malware, it's a unix virus. Yet no-one in their right mind would be worried about it.
Re: (Score:3)
Re: (Score:2)
That's what you get to see when this RogueAV tries to get on the system. There's nothing automatic about it, there is tons of user input, and that's precisely why it's not much to get worried about as a Mac user.
Just two clicks required to install malicious software after you've visited a hijacked site, with none of the usual warnings about downloading software from the internet that most platforms have added - with good reason, I might add? That's definitely a problem. Sure, no matter what you do there'll always be someone daft enough to jump through the hoops required to do something nasty, but making it that easy for websites to convince users to install software - and giving them that much control over the mess
Re: (Score:2, Insightful)
Re: (Score:2)
While that may be true, the original MacDefender did take advantage of a nasty root vulnerability that Mac OS had.
Even with that being said, Trojans are still a class of virus which will also become more popular as the market share increases. Trojans are just a phishing attack with code to allow access to
Re: (Score:2)
If Apple can't adapt to the problems increased market share will bring, they'll have some major problems getting to the top of the OS mar
tempest in a teapot (Score:2, Insightful)
As far as the OS is concerned, this is just another application installer. It's a cinch to modify the installer to circumvent Apple's so-called security update for this. It really comes down to a user stupidity issue. If you're too stupid to avoid software from questionable sources you deserve what you get. No security update can protect you from yourself.
Re: (Score:2)
Which is why Mac OS X is going to be turned into iOS - pretty soon, you'll only be allowed to install signed binaries on Mac OS X. It will resolve the issue of people installing software from "untrusted sources," meaning anyone not paying Apple large sums of money.
How come everybody thinks this is where OSX is heading, while Microsoft runs a 100% closed source desktop OS with rumours of signed code required in the next version, just about invented the appstore-model for an appliance in the form of the Xbox Live Arcade (for the 1st gen Xbox, before it became the Marketplace)? Yet, nobody seems to worry about Microsoft owning >80% of the desktop market while doing exactly the same things Apple did, only years earlier.
There is no protection against stupidity. (Score:4, Insightful)
Re: (Score:2)
No software can protect the user from themselves.
An OS which doesn't allow the user to download and install random executable files can. Of course it's also not terribly useful for most users.
Re: (Score:2)
An OS which doesn't allow the user to download and install random executable files can.
Apple have an App for that - its called iOS.
Re: (Score:2)
Every time you make the system more idiot proof, they invent a better idiot.
Obligatory (new) Star Wars reference: (Score:2)
In Radio Terms, It's 1923 All Over Again (Score:2)
Whenever my wife entertains herself by gripping about the hassles, the bugs, the constant need to update software, I tell her that she (and most users) aren't really the intended users of personal computers. In radio terms, we're still in the early 1920's, when you had to know something about the technology to get more use than frustration out of the device.
Thus, why most people continue to click through the warnings and admin authentications, and wonder why the work of a moment takes so much effort to undo
You can't patch stupid. (Score:3)
Ever.
You can educate, but you can only put in just so many policies to prevent stupid before you turn the computer into a brick.
The only way to stop this is for the user to stop clicking on everything in sight, like dumb Windows users have been doing for the past 15 years.
Some people simply shouldn't have computers at all, for their own safety.
--
BMO
Re: (Score:3)
>For years, computer geeks and the media alike have been hollering that everyone needs antivirus, and warning them of the dire dire dangers of not being protected. So now that malware is exploiting that by warning users (as their trusted Antivirus program!) that "we have detected these threats, you better act now", you want to call them stupid for trying to follow all those warnings?
WE HAVE ALSO BEEN YELLING AT YOU TO STOP CLICKING ON EVERY STUPID THING ON THE INTERBUTT. STOP PUNCHING THE MONKEY. STOP
Yeah... (Score:2, Flamebait)
It should have been something like iProtect, iAntivirus or AppleGuard or something.
What are they coming to when they can't even get their developers to use the proper naming scheme?
Just another proof that Apple is no longer a proper computer business but a shiny-pocket-widget and things-for-your-shiny-pocket-widgets shop.
Or was that a shiny-pocket-widget and things-for-your-shiny-pocket-widgets store?
iDiots and Appletards lack sense of humor. (Score:2)
Film at eleve... Sorry... Film at iLeven.
Re:Mac users, start crying from nostalgia (Score:4, Insightful)
What viruses, as a matter of interest? Or do you mean trojans, which are not the same thing at all - which are an issue for any OS, regardless of security since it's a social engineering issue (less so for Linux I would imagine, since the user base tends to be skewed towards people who can spot a trojan from a mile off).
It's hardly just "security through obscurity" - you make it sound like OS X was designed like a car with the doors and windows unlocked, when it clearly wasn't. It's not perfect, but it is pretty good, and it does receive regular security updates in anticipation of attacks against it, it's just not until now that we've seen anything widespread, and even then it's been pretty limited - an ineffective trojan that is easy to remove (takes about 3 minutes total, or less) that requires you give it your express permission to install (and your admin password). The new one is modified to be local user only, so doesn't even have root.
It's not great, clearly, since any malware targeting your platform is a pain in the ass, but you're painting it like OS X has been sitting here doing nothing for the 10 years it's been around and only escaped by standing behind Windows - the legions of security updates and software policy on the OS itself would beg to differ.
Not that even the very best and most secure OS could stop this malware (having never "seen" it before), since it's entirely a social engineering security bypass. The conman tricked his way past your security guards and is stealing your TV.
Re:Mac users, start crying from nostalgia (Score:4, Insightful)
We know it's not a virus. But whether you like it or not, the word has become a generic term meaning "malware" to the layman.
Traditional, self-replicating, can-spread-through-no-other-means file-infector viruses on Windows are not particularly common these days. They exist, and there's generally one or two in the "top 10 things to watch for" at any given point in time but pure viruses don't represent the majority of malware and haven't done in some time. Typically, you'll find they also act as trojans and worms.
This doesn't stop such things causing harm.
Re: (Score:3)
Ah, so it's ok to be fast and loose with the definitions and so on as long as it makes Apple look bad (vulnerability to viruses and worms is a considerably different kettle of fish to being vulnerable to trojans), but when it comes to Android malware, there's a sudden flood of "it's not that bad" and "it's a trojan, it's not *infecting* apps on the Android Market, how can it do that?!".
Just checking.
I'll concede the point if you'll go and post the same "it's ok to muddy it up" response to all those Android
Re:And for years Mac Users have been telling me li (Score:4, Interesting)
OS X still has 0 viruses, which what I care about. If someone wrote a virus for OS X, something that installs without my intervention and approval, then I would be alarmed. Otherwise, I don't care about the social engineering attacks. Idiots will always fall prey to those.
So yes, I still feel infinitely safer using anything but Windows as far as viruses are concerned.
Re: (Score:2)
Re: (Score:2)
People have been saying this for the entire life of OS X, and I say "put up or shut up" - the claims are that it's just not worth it, or that no one cares, but that it's really a ripe, low-hanging fruit that is so vulnerable... yet no one has bothered, in 10 years , to even *try*? Not even to "stick Mac users' noses in it" (with the sort of "HAHAHA!" crowing that we've seen from slashdot users over this simple trojan).
You're telling me that *no one* in over 10 years has decided to prove this supposed "commo
Re: (Score:2)
While I'm not real impressed with what I know of Apple's security, this is a relatively small threat that relies entirely on social engineering that works or not regardless of OS, and is getting an immediate and effective response. It's too early to gloat yet.
Re: (Score:2)
At most? Apple had exploited Java vulnerabilities that were patched by Sun for more than a year. What makes you think they can update things in a day, even if the capability is there?
Re: (Score:2)
People use Java?
Re: (Score:2)
At least 2 millions minecraft users beg to differ!
Re: (Score:3)