Bugs coming out of the woodwork
Bugs coming out of the woodwork
Not surprisingly, with Leopard just out, a number of Internet security bugs are coming out of the woodwork. Here’s a quick summary:
• Intego is reporting a Mac-specific trojan horse, spread from porn sites. Their claim looks to be correct. Normally this item would merit a whole blog entry, but there’s too much else going on right now.
• A highly critical review of the firewall built into Leopard has been published by security firm Heise Security. It goes well beyond the problems that our internal review of that firewall uncovered. Much more on Leopard’s firewall later too, after we ship ours for Leopard.
• An excellent write-up of the internal security features that have been added to make Leopard even safer has been published by Matasano Security.
• SecurityFocus is reporting multiple vulnerabilities with RealNetworks’ RealPlayer and Real is announcing fixes.
• Even Apple has gotten in on the act, with security updates to a couple of its developer tools.
Thursday, November 1, 2007