Slashdot Mirror

← Back to Stories (view on slashdot.org)

Apple Plugs Software Update Hole

Posted by CmdrTaco on from the plugging-the-holes dept.

hype7 writes "Apple's getting quick! Less than 5 days after the recently reported software update vulnerability was discovered, Apple have a patch plugging the hole. Apparently, packages now presented via the Software Update mechanism are cryptographically signed, and the new Software Update client 1.4.6 checks for a valid signature before installing any new packages."

3 of 181 comments (clear)

  1. Wow...5 days by lucifuge31337 · · Score: 0, Flamebait

    Micrisift is nipping at their heels on turnround time. What a great position to be in.

    (Insert obligtatory Linux plug here)

    --
    Do not fold, spindle or mutilate.
  2. Re:Doesnt MS already do that? by Peyna · · Score: 1, Flamebait

    Probably, and it also checks driver updates to see if they're signed or not, but you can still tell it to install (since not every driver is going to be signed, especially if it was just released).

    --
    What?
  3. Re:Funny by Bobartig · · Score: 0, Flamebait

    Well, then the story comes out that they knew about the security hole before the SW reached the shelves, but it was after GM, so they conveniently "obscured" reports of it until a few months later when the release hoopla has died down, and they can release the patch without too much embarrassment.

    On the flip side of things, 5 days really isn't "that" fast, or newsworthy. But what can you do? M$ is the badguy and any publicity is bad, and Apple's the underdog, and any publicity is good.

    --
    This is where I get my recommended daily allowance of "Foot in Mouth."