Slashdot Mirror

← Back to Domains

Domain: insecure.ws

Stories and comments across the archive that link to insecure.ws.

Stories · 2

  1. One More Mac Protocol Handler Exploit

    Apple · Macosx · · posted by pudge · from the yeesh dept. · 76 comments
    There's another exploitable protocol handler, this time, ssh. Daring Fireball has an excellent summary of what you can do to protect yourself, using RCDefaultApp, and if you went that direction, and were wise enough to recognize ssh might be vulnerable too, you are safe. Paranoid Android attacks the problem from a different direction, and if you use that, you are also safe.

  2. Safari Falls Victim to Remote Code Exploit

    Apple · Macosx · · posted by pudge · from the the-most-important-thing-is-to-tell-people-how-to-use-the-exploit dept. · 197 comments
    A user writes, "A new vulnerability has been found in Mac OS X's Safari, which will launch Help.app and run an arbitrary script with a URL like 'help:runscript=...', assuming a known path (which is possible when Safari is set to automount disk images (which is the default)). A nice working demonstration is available on insecure.ws while the incident has been reported on Full-Disclosure."