Leopard with kinks in its armour

[Envying]

http://www.heise-security.co.uk/articles/98120

[bxsci(macuser)]

say kinks lol - chink is a derogatory term for a chinese person

[Envying]

say kinks lol - chink is a derogatory term for a chinese person

 

Thanks for reminder!

[Ayanami]

That's re-assuring.

 

The verdict

 

The Mac OS X Leopard firewall failed every test. It is not activated by default and, even when activated, it does not behave as expected. Network connections to non-authorised services can still be established and even under the most restrictive setting, "Block all incoming connections," it allows access to system services from the internet. Although the problems and peculiarities described here are not security vulnerabilities in the sense that they can be exploited to break into a Mac, Apple would be well advised to sort them out pronto.

 

Apple is showing here a casual attitude with regard to security questions which strongly recalls that of Microsoft four years ago. Back then Microsoft was supplying Windows XP with a firewall, which was, however, deactivated by default and was sometimes again deactivated when updates were installed. It was also the case that system services representing potential access points for malware were accessible via the internet interface by default. Despite years of warnings from security experts, the predominant attitude was that security must not get in the way of the great new networking functions.

 

Then along came worms such as Lovsan/Blaster and Sasser, which rapidly infected millions of Windows computers via security vulnerabilities in system services, causing millions worth of damage. Even today, an unpatched Windows system with no active firewall will be infected within a matter of minutes. However, Microsoft has since learnt its lesson -- a serviceable firewall, activated by default, has been included since Service Pack 2. With the standard configuration, no services are accessible from the internet on a Windows system. (ju)

[Soündless]

i might see if i can port the firewall from 10.4 to 10.5, this doesnt sound good

[CLiDE FTW!!1]

Like I said before, Leopard feels incomplete. Apple had to rush Leopard out on-time.

[Special-K]

I see either 10.5.1 coming very soon, or an update coming even sooner.