apple

[msly]

Originally posted by KillerWabbit


There's some new internet worm out that was just discovered a day or two ago. It's called "Sasser." What sucks about it is it doesn't spread by clicking and opening emails, like most worms, it just spreads on it's own. It only attacks machines running 2000, NT or XP that don't have the latest Microsoft updates. My mom's school was hit by it yesterday. Every single computer in her school crashes and reboots on their own. I think they had to unplug them, LOL.

It is all in prevention. As long as people keep their Windows updated and have some kind of firewall, they're normally in good shape.

I work for a school district the idiot in charge of that network should be shot. What did he have every computer directly connected to the internet....LOL

 

[Arrow]

MY EYES ARE BURNING!!! MY EYES ARE BURNING!!!

*hugs his pc*

 

[HumboldtBlazer]

What about all the great games on a Mac, like Warcraft 3, and um Warcraft 3. Don't forget about Blaster! Gaming on the Mac rules!

All your base belongs to us!

OS X Security Patch Corrects Remote Root Vulnerability
Severity: Medium
4 May, 2004

Summary:
This week, Apple released two security patches to fix various security flaws found in software that ships with OS X 10.2.8 (Jaguar) and 10.3.3 (Panther). The flaws affect applications ranging from AppleFileServer to Apache 2, the worst allowing a remote attacker to gain total control of your OSX machine. If you use Apple OS X, OS X Server 10.2.8, or OS X Server 10.3.3, you should download, test and deploy the corresponding security patches as soon as possible.

Exposure:
In a post to their security update page, Apple released a security update for OS X 10.3.3 and another for 10.2.8. Both updates fix security issues found in various packages OS X utilizes. Apple describes the patch for the most serious of these flaws as a fix to "improve the handling of long passwords." Third party sources clarify that this actually fixes a vulnerability that could allow a remote hacker to gain root -- that is, absolute control of your OS X machine. You'll find more details on these flaws below:

A Buffer Overflow in AppleFileServer (CAN-2004-0430) allows remote hackers to gain root privileges on your OS X machine by send a specially-crafted, overly-long login. For more details see @stake's alert.
A Denial of Service vulnerability in Apache 2 (CAN-2003-0020, CAN-2004-0113 and CAN-2004-0174) that allows hackers to crash your OS X Web server. A second Apache 2 vulnerability also allows hackers to corrupt your logs.
A Denial of Service and Man-in-the-Middle vulnerability in IPSec (CAN-2004-0155 and CAN-2004-0403) that allows hackers to crash IPSec or make unauthorized IPSec connections.
An unspecified flaw in CoreFoundation (CAN-2004-0428). Apple doesn't supply any details concerning this flaw.
An unspecified flaw in RAdmin (CAN-2004-0429). Apple doesn't supply any details concerning this flaw.
Solution Path:
Apple has released separate patches for OS X or OS X Server 10.3.3 and 10.2.8. You should download, test, and deploy these patches to the corresponding OS X machines during your next maintenance cycle:

Security Update for OS X 10.3.3 (Panther)
Security Update for OS X Server 10.3.3 (Panther)
Security Update for OS X 10.2.8 (Jaguar)
Security Update for OS X Server 10.2.8 (Jaguar)
For WatchGuard SOHO, Firebox, and Vclass Users:
Although WatchGuard's firewalls block some of the services, such as the AppleFileServer, by default, Apple has disclosed neither the impact nor the exploitation method of other flaws, so your best course of action is to install Apple's patches.

Status:
Apple released Security Updates fixing these issues.

 

[Error401]

Originally posted by HumboldtBlazer
Severity: Medium

Not severe, like say UPnP. Neither me nor Sky ever claimed that OS X was perfect. I like X better than XP, and we've been over this subject over and over before.

And yes, I do have WC3, but I don't game on the Mac. If I want to play games, I fire up the XP box. My favorite PC game is "WTF?", and I wish I had the manual for it.

 

[HumboldtBlazer]

I wasn't beating an old horse, that above comment was to let people know any OS has security issues, and also that message was to let OSX users know of the new vunerability.

 

[Error401]

True, the system update app in X is pretty good about telling users what fix does what and keeps up with the updates pretty regular. Thanks for the heads up though.

 

[SkyMaxx]

Hmmm...I have played many a decent game on my Mac...UnReal Tournament, Mech Warrior, Quake, Diablo, Myth, the MYST series and the list can go on...but they are hard as heck to acquire around here. However, as Error mentioned, I don't use my Mac for gaming. Many other things but not really into gaming. That is what my Play Stations are for or things like that.

I'm still going to stick by my Macs as my preferred machine. PCs are great but my Macs are my favorites.

 

[Nitro_Freak]

i don't game much, so that's not a big issue in my deciding factor