Slashdot Mirror


SecuriTeam Posts Paper on Mac OS X Vulnerabilities

ehenning writes "SecuriTeam has posted a paper on some known vulnerabilities in Mac OS X. It lists methods for developing shellcode based on the PowerPC architecture. They note that there are similar vulnerabilities in Mac OS X and Darwin as in IA32 machines."

2 of 85 comments (clear)

  1. Re:Boooring... by Anonymous Coward · · Score: 3, Insightful

    Boot from your OSX install cd. You can change the password there.

  2. Well what do you expect from a Troll by xcarroll · · Score: 5, Insightful

    Not so.

    Let's start with the windowing environment, since that's the first thing most OS 9 users noticed when they first moved to OS X. Except they wouldn't have moved if OS X had started with X Windows because X Windows doesn't run OS 9 apps. Oops, there goes the business...

    Mach-O is not proprietary to Apple. It came via NextStep from Carnagie Mellon's "Mach" project, and is older than Linux. The Mach project and its executable format is published and is generated by gcc. So in what sense exactly is it not 'open'? Oh, you mean, it's not the same as the one you use?

    NetInfo (also inherited from NextStep) does the same thing that NIS+ does on Solaris and yp does on Linux, and for the much the same reasons. Or do you prefer to keep passwords in /etc/passwds where they can be cracked by dictionary attacks?

    So I think we can guess that OS X was not so much an answer to 'how do we lock people into a proprietary format' as 'how do you get a solid, compatible replacement for OS 9 out of the door asap given that we happen to have just bought NextStep'?

    --
    public org.slashdot.Sig getSig() throws NotFunnyEnoughException;