Slashdot Mirror

← Back to Domains

Domain: dhanjani.com

Stories and comments across the archive that link to dhanjani.com.

Comments · 4

  1. Re:Why can't MS make the radical decision? by mogness · · Score: 0 · on Olympus Digital Camera Ships With a Worm

    Apple would roll out an operating system update and disable Autorun.

    Oh really? Like how they responded to this security issue? After two years I'm pretty sure it's still possible for a website to download and launch arbitrary local applications that handle registered URIs without the user's permission in Safari on OSX.

  2. Source Code is actually here by zukinux · · Score: 0 · on Safari "Carpet Bomb" Attack Code Released

    Hey guys, I've been trying to see the source code, just because it's interesting, but couldn't find it in this links (actually it took me a while to check all the links), so if you're having a problem to see the source code, here's a link :
    Source Code

  3. it's just a local exploit. by Deathlizard · · Score: 0 · on Mac OS X Root Escalation Through AppleScript

    It's a good thing that it's only a local exploit.

    OSX is so secure It's impossible for Safari to go a malicious Website and download a malicious installer to your Mac's "downloads" directory disquised as a legitimate installer (say Firefox 3) and remotely root your box using this local exploit and install a rootkit or virus when you confuse it with the legitimate installer.

    Oh wait...

  4. Re:Dear Apple, Please stop sucking by sootman · · Score: 1 · on Safari "Carpet Bomb" Attack Code Released

    First, I did read the article. In fact I read the first article last month.

    Second, how is "Safari will gleefully download whatever the hell you throw at it" not an Apple issue? IE doesn't do this. Firefox doesn't do this. It only happens with Safari. How again is this not Apple's fault? True, it's up to IE to run the files, but it's Safri that allows them to be put there in the first place. I'd say both are equally to blame.

    Third, it's "old news" but it's still happening and it's still stupid. If there was a murderer loose in your neighborhood for a year, would you tell your wife "Don't worry honey, that's old news"?

    Fourth, nice ad hominem. Let me repeat this: the files wouldn't be there for IE to execute if Apple's product didn't put them there in the first place. Ooh, yeah, Apple devs have to be real fucking miracle workers to make a preference checkbox NOT CHECKED BY DEFAULT. (OK, this isn't a switchable preference, but it would be the very definition of "trivial" to a) not make the app download by default, b) pop up a dialog saying "where do you want to save this file?", and, if they wanted to get really fancy, c) make this a changeable preference.)