Apple to Fix Security Holes in Jaguar

Simon Cozens writes "Yesterday's unsubstantiated report that Apple is refusing to supply security upgrades to Jaguar turns out to be untrue; Apple told MacCentral they will be fixing the bugs turned up by @stake. Next conspiracy, please!"

Comments

Damn straight

[admiralfrijole]

Of course Apple is going to fix them, they still support the 10.2 Server, so they have to...

Damn Windows zealota making shit up...

Re:Yesterday's bickering only mindless speculation

[Trigun]

I don't think that Apple deserves more or less credit than any other company. The same goes for the benefit of the doubt. The only thing that they deserve is us to wait for verification before villianizing the company.

Apple has not signed up as a Templar knight any more than Microsoft has sold its collective soul to the devil.

This might not be good news.

[EvilStein]

Apple rolled several security updates into that thing called 10.2.8, which has caused many people no end to troubles, especially those with older hardware.

Yes, I have a beige G3. Yes, I've put a much faster ZIF processor in it. It's a small OS X Server. 10.2.8 screwed up all *kinds* of things.

Can Apple please release the security updates individually so we can apply them as needed instead of bundling them into a dot-whatever release?
That's all I ask, Apple. I'll buy a shiny new G4 (or G5) when I can actually afford it. (No, they're not too expensive, I'm just flat broke. :P)

Almost certainly...

[Trillan]

I doubt they told @stake they weren't going to fix them. I doubt they told @stake they were going to fix them. In fact, I doubt they even told @stake that the flaws didn't affect Panther... @stake probably found that out and told Apple.

Apple doesn't talk details in unreleased products.

There's a couple reasons we're seeing this press release:

• @Stake acted unethically and went to the press early to get their name seen.
  Ethical reporting of security flaws involves going to the company and giving them time to get a patch out. Then, one or both companies announces the flaw... and includes details of the patch. @stake jumped the gun and did not use white hat practices.
• ZDNet engaged in wild speculation with typical bias.
  ZDNet decided that @stake's announcement meant Apple wasn't going to fix the problem, and decided to give it a spin. As they actually indicated in their story, they did not wait for a comment from Apple before rushing the thing to press.

Hopefully, @stake will do better next time. But I doubt their role in this will be examined very carefully.

I know ZDNet will do the same thing next time. They smell any blood around Apple, they're the first to paint a picture of mass destruction, mayhem and cats and dogs sleeping together.

If @stake hadn't jumped the gun, we'd have seen a press release some time next week on Apple's site about the security flaws, with a fix, and with credit to @stake for finding them. How do I know this? Because it's what they've done every other time, including with 10.1 after 10.2 was released!

Re:Apple DID NOT initially plan to patch Jaguar

[MoneyT]

One person's "initial conversations" That could have been as simple as him calling tech support and asking the question. Or asking one of the employees at the apple store. Not everyone in Apple knows everything that's going on at every minute.