Slashdot Mirror

← Back to Stories (view on slashdot.org)

Security Updates Released for Panther and Jaguar

Posted by pudge on from the what-happens-if-everyone-reboots-at-once? dept.

ZackSchil writes "Apple has released security updates for both Mac OS X 10.3.1 and, as promised, 10.2.8. The update to 10.3.1 updates OpenSSL and zlib's gzprintf() function. In addition to those updates, the 10.2.8 update contains changes to gm4, groff, Mail w/CRAM-MD5 authentication, Personal File Sharing, and QuickTime for Java. Run Software Update for more information and to install the updates."

75 comments

  1. i just wanted to say by Anonymous Coward · · Score: -1, Offtopic

    fr0sty p1ss bitches...

    this fp brought to you by my shiny new 12" powerbook..

    snoogans

    kate - i love you :)

  2. Already installed by edalytical · · Score: 1

    I've already installed Security Update 2003-11-19 and QuitTime for Java Update v2.0. No problems so far. Great to see Apple keeping their promise and supporting Jaguar.

    --
    Win a signed Stephen Carpenter ESP Guitar from the Deftones: http://def-tag.com/?r=0008781
    1. Re:Already installed by tuxedobob · · Score: 1

      What?! Jaguar? 10.3 is out! You might as well use OS 9!

      Seriously, though. Expose is cool.

    2. Re:Already installed by edalytical · · Score: 1

      I'm poor. Not really, just haven't bought Panther yet.

      --
      Win a signed Stephen Carpenter ESP Guitar from the Deftones: http://def-tag.com/?r=0008781
  3. seems to work by for_usenet · · Score: 2, Informative

    I tried the update to 10.2.8, and all seems to be well. Thanks to Apple for keeping the older OS's secure. Now if they'd only let us use 3rd party drives with their Disc-recording software in 10.3, it would be golden !! ;-)

    1. Re:seems to work by HTH+NE1 · · Score: 3, Interesting

      Now if they'd only let us use 3rd party drives with their Disc-recording software in 10.3, it would be golden !!

      Not all third-party drives are reliable. I can't burn DVD-Rs with DVD Studio Pro 2 on my DVD-R/-RAM drive because the drive reports its two burn speeds as 1x and 64x (as relayed by Toast). DSP2 presumes to use the highest speed, 64x, with no control to tell it otherwise. It then hangs. I have to have DSP2 create a disk image file instead and then burn that with Toast.

      But at least I got it to run on an underpowered non-AGP Mac. (Blue & White G3 upgraded with 550 MHz G4.)

      --
      Oh, say does that Star-Spangled Banner entwine / The myrtle of Venus with Bacchus's vine?
    2. Re:seems to work by puff+the+barbarian · · Score: 3, Interesting

      It used to be (according to things that I have read on the 'net) that as long as you installed an IDE/ATA DVD recorder internally, then iDVD would use it. Is this no longer the case?

    3. Re:seems to work by for_usenet · · Score: 4, Interesting

      The reason why I mentioned this is some of us would still like the choice of being able to experiment with 3rd party drives. I have the same model Toshiba DVD-ROM/CD-RW drive that Apple uses on its iBooks. However, when I installed it, all of the OS software claimed it was "unsupported." Seems like Apple used a different firmware version.

      However, using the PatchBurn software, I was able to modify some of the system files to get the drive to be recognized by all of the system software (iTunes, Disc Copy, etc). With 10.3, if the drive is no longer supported out of the box, I am SOL, at least till someone else hacks the Disc Recording Framework. I am not asking Apple to give support for all these drives, just to let us be able to try them out for ourselves, and not close up the OS entirely.

    4. Re:seems to work by Anonymous Coward · · Score: 0

      Maybe an investment in some modern hardware would help your problems...

    5. Re:seems to work by tuxedobob · · Score: 1

      They would, but there are licensing issues involved. I'm not exactly sure how it all works, but the MPEG4 codec has something to do with it.

    6. Re:seems to work by bill_mcgonigle · · Score: 2, Interesting

      Yeah, but they don't support a significant number of drives that do not have such failures.

      Patchburn works great on Jaguar for most people. The drive descriptions file in 10.3 is xml-based instead of binary, but after editing the XML file (probably correctly) it still doesn't recognize my drive, so there must still be another step to get the OS to recognize the changes (compile it?).

      Anybody know?

      --
      My God, it's Full of Source!
      OUTSIDE_IP=$(dig +short my.ip @outsideip.net)
    7. Re:seems to work by Anonymous Coward · · Score: 0
      "Now if they'd only let us use 3rd party drives with their Disc-recording software in 10.3"


      MissingMediaBurner 0.6.2


      macosxhints - 10.3: Add support for any third-party CD-R burner

    8. Re:seems to work by Anonymous Coward · · Score: 0

      That is the plan. A new G5. And several Firewire drive bays. Meanwhile, I'm happy to have it working on the B&W G4 (also modded for more internal drive storage).

      BTW, FCP4 and Compressor need the same edit to their Info.plist files as does DSP2. I haven't tested the new updates for these programs which are also out.

    9. Re:seems to work by General+Sherman · · Score: 1

      In panther Apple uses XML files to store data about supported drives. All you have to do is open up something like, say, toast and look at what the drive reports itself as, then dig in /Library/Frameworks/DiscRecording.framework and find the proper XML file and add a new .

      I know this sounds really complicated, but there is an easy how-to guide at www.xlr8yourmac.com. Most drives are supported, but the software doesn't believe so because of a slightly different firmware version or something silly like that.

      --
      - Sherman
  4. Just downloaded and..... by ihatewinXP · · Score: 4, Informative

    Everything still works. I havent seen any killer bugs popping up on macfixit or versiontracker either. Also note that the QT Java update is included - fixed one broken site for me that Panther QT had knocked out.

    Oh and a bluetooth update, but my Sony Ericsson already works flawlessly (and still does post-update).

    And yes, it does require a restart for all of you running the "Show Off" uptime screen saver.

    --
    ---- The real Slashdot is still here. You just have to browse at -1 to read the comments.
  5. Where's Safari 1.1? by Anonymous Coward · · Score: -1, Troll

    I spent 800.00 on an Apple laptop purely to test the websites I create two months ago (I'm a web developer and I take QA seriously). It's a pretty big slap in the face to find out that the investment is worthless.

    1. Re:Where's Safari 1.1? by aristotle-dude · · Score: 1

      "It's a pretty big slap in the face to find out that the investment is worthless." What's wrong with Mozilla? It's free and cross platform and available for 10.1-10.3. If you are impatient, buy the Panther upgrade, otherwise wait for them to rewrite parts of it to use the Jaguar frameworks.

      --
      Jesus was a compassionate social conservative who called individuals to sin no more.
    2. Re:Where's Safari 1.1? by Anonymous Coward · · Score: 0

      Boo fucking woo. Shut the fuck up.

    3. Re:Where's Safari 1.1? by Toraz+Chryx · · Score: 1

      How exactly is he supposed to test the way websites render _in Safari_ using Mozilla?

    4. Re:Where's Safari 1.1? by Anonymous Coward · · Score: 0

      What's wrong with Mozilla?

      As I said, I bought it to test in. Not everyone in the world uses Mozilla. I bought it specifically to test in the most popular browsers for that platform - Mac IE (which has a completely different rendering engine to Win IE) and Safari (which is different enough to Konqueror to warrant testing in).

      If you are impatient, buy the Panther upgrade

      It's not a case of patience, it's a case of being left stranded with a laptop that will be useless for testing in unless I give Apple even more money. I could understand it if this was a five-year-old laptop, but I bought it a couple of months ago.

      otherwise wait for them to rewrite parts of it to use the Jaguar frameworks.

      I think that it's unlikely they will backport it when they could have used the Jaguar libs to begin with and chose not to.

    5. Re:Where's Safari 1.1? by ZackSchil · · Score: 1

      If you bought a laptop for $800, you didn't pay Apple for it, you bought it off someone else used. Also, if it's JUST for testing, why not pick up a used iMac G3? It'll run panther just as well as anything for what you needs and only set you back $300-$400, less than half what you paid.

    6. Re:Where's Safari 1.1? by aristotle-dude · · Score: 1
      I think that it's unlikely they will backport it when they could have used the Jaguar libs to begin with and chose not to.

      They backported iChat AV and iCal to name two. They did not use Jaguar libs because of the performance increase the Panther libs would provide on Panther.

      --
      Jesus was a compassionate social conservative who called individuals to sin no more.
    7. Re:Where's Safari 1.1? by Anonymous Coward · · Score: 0

      whaat's wrong with safari? THAT

    8. Re:Where's Safari 1.1? by Anonymous Coward · · Score: 0

      If you bought a laptop for $800, you didn't pay Apple for it, you bought it off someone else used.

      Nope, I bought it new, direct from the Apple website, for 800GBP. The pound sign disappeared when I posted the comment, Slash probably screws up the character encoding or something.

      Also, if it's JUST for testing, why not pick up a used iMac G3?

      It's simply a matter of space. There's only so much room in my office.

  6. Lockups by Leroy_Brown242 · · Score: 1

    I hope that ome of these patches fixes my lockup issues in 10.2.8

    --
    Pretty Pictures!
  7. QuitTime? by Anonymous Coward · · Score: -1, Troll

    Yet another piece of evidence showing that Apple doesn't care about security OR stability. You motherfuckers were right, I'm switching to Windows.

  8. This just in: THE SKY DIDN'T FALL by mattbot+5000 · · Score: 4, Insightful

    Where are all the people who were crying last week about Apple not supporting Jaguar? Huh?!? WHAT DO YOU HAVE TO SAY FOR YOURSELVES NOW!!!

    Go ahead and mod me +1 Flamebait, just RECOGNIZE that you people are the FISH that took the bait last week!

    So high and mighty with your mod points.

    1. Re:This just in: THE SKY DIDN'T FALL by Anonymous Coward · · Score: -1, Troll

      They changed their minds after the outcry.

      Read the original, unimproved version here (it's a Google cache, not a goatse.cx redirect):

      http://216.239.57.104/search?q=cache:AfvCuUwRG54J: news.com.com/2100-7355_3-5098688.html+confirmed&hl =en&ie=UTF-8

      And the new, improved one, to make it look like they had planned to update all along, and it was a "misunderstanding":
      http://news.com.com/2100-7355_3-5098688.html.

      Note that it was confirmed by @stake, not a rumor. Nice revisionism by news.com.

    2. Re:This just in: THE SKY DIDN'T FALL by aristotle-dude · · Score: 3, Insightful

      They had been saying all along they were going to support Jaguar. Confirmed by @stake? I thought they were the ones that found the bug. What motivation would they have to be impartial when they can generate more publicity for themselves with sensationalism. I see nowhere where Apple said they would not release an update for Jaguar.

      --
      Jesus was a compassionate social conservative who called individuals to sin no more.
    3. Re:This just in: THE SKY DIDN'T FALL by MoneyT · · Score: 2, Interesting

      Indeed, Cnet said it was confirmed, and if you read what the guy at @stake said, he said those he spoke to did not think that Apple would. And as people quite clearly pointed out, it was an anonymous paraphrase, or IOW, nothing more than hearsay

      --
      T Money
      World Domination with a plastic spoon since 1984
    4. Re:This just in: THE SKY DIDN'T FALL by Anonymous Coward · · Score: 0

      David Goldsmith, director of research for @stake, a security company that found four of the vulnerabilities, confirmed that Apple said it wasn't going to patch the flaws in earlier versions of the software.

      It was the director of reasearch from @stake who probably knew exactly who to talk to, not some pimply faced 5Kr1p7 k1dd13 who knows some dork who works in the shipping department at 1 Infinite Loop. Certainly not hearsay, and absent any relevant information, most likely true at the time. I'm sure Mr. Goldsmith knew who to talk to and verify the information, again, most likely not the shipping clerk.

      It's not like Apple doesn't do this sort of thing on a regular basis to force a paid upgrade.

    5. Re:This just in: THE SKY DIDN'T FALL by Anonymous Coward · · Score: 0


      Its not clear that this security update fixes these issues:

      CAN-2003-0895 Long argv[] buffer overflow
      CAN-2003-0876 Systemic Insecure File Permissions
      CAN-2003-0877 Arbitrary File Overwrite via Core Files

      They were fixed in the Panther release but are not listed in this release:
      http://www.securityfocus.com/advisories/ 6081

    6. Re:This just in: THE SKY DIDN'T FALL by sepiachrome · · Score: 1
      "probably knowing" is not good enough. the statement was pure hearsay (as other posters have mentioned), and totally worthless.

      "confirmed that Apple said" is as good as "well, i can confirm that this guy i know said he really didn't steal that car".

      by the way, do you know how titles work? "director of research" could be only a step up from the "pimply faced" dork. or a step down.

    7. Re:This just in: THE SKY DIDN'T FALL by MoneyT · · Score: 1

      Again, it was an anonymous paraphrase. The actual quote could very well have been "I dont' know of any plans." and he interpreted that to mean they don't have any plans.

      And Apple doesn't do this on a regular basis, they have always supported one system version behind current. Always.

      --
      T Money
      World Domination with a plastic spoon since 1984
    8. Re:This just in: THE SKY DIDN'T FALL by Anonymous Coward · · Score: 0

      OK, since we're all about not relying on hearsay, please produce some evidence that Apple planned on supporting 10.2 all along, even before the public outcry over them dropping support.

  9. Why is OSX is so buggy all of a second. by Tuxinatorium · · Score: -1, Troll

    What happened? I'll bet you this was all caused by an incident involving two Apple programmers, hot grits, and Natalie Portman. As Linus Torvalds and the Goatse guy can attest, it's hard to write decent code while blowing your load.

    --
    Repeal the DMCA!
  10. On a related note by Tengoo · · Score: 2, Informative

    I haven't seen this mentioned yet so I'll pass this tidbit along.
    SecurityTracker has information on a new sudo vulnerability. Only laptops are affected.

    1. Re:On a related note by Anonymous Coward · · Score: 2, Informative

      This is a pretty serious issue, but there are a couple of more practical workarounds than the ones mentioned in the link, until the problem is fixed (if this security update doesn't fix it)

      Users running Panther can also set the "Require password to wake this computer from sleep or screen saver" option in the Security preference pane.

      Jaguar users can grab the program sleepwatcher and make it issue the 'sudo -k' command on sleep.

      Remember though, if someone can get unsupervised access to your laptop, they can usually just walk off with it anyway. So if anyone does get caught out by this bug, it's a sign that they're probably too lax with physical security.

    2. Re:On a related note by Enrico+Pulatzo · · Score: 1

      Wow. Maybe they'll finally get around to fixing the clock update routine. It's been bugging me since 10.0.

  11. via terminal by djupedal · · Score: 4, Insightful

    [Zen:~] bmt% softwareupdate -l
    Software Update Tool
    Copyright 2002-2003 Apple Computer, Inc.

    Software Update found the following new or updated software:
    ! SecurityUpd2003-11-19-1.0
    Security Update 2003-11-19, 1.0, 1360K [required] [restart]
    [Zen:~] bmt%

    1. Re:via terminal by Anonymous Coward · · Score: 0

      But "softwareupdate -d" still crashes.

    2. Re:via terminal by djupedal · · Score: 1

      Not for most, apparently. Try running PantherCacheCleaner...see http://www.versiontracker.com

  12. Mmmmm command line... by ellem · · Score: 1

    ~/ $ sudo softwareupdate -i -r

    --
    This .sig is fake but accurate.
  13. 10.3 broke the network gui - fixed soon? by gobbo · · Score: 3, Interesting

    Panther breaks the networking GUI that was pretty good in Jaguar. Now, servers you've connected to through browsing in the Finder don't show up on the desktop, and if they're an SMB share, can't be ejected without throwing your powerbook through a window, er, restarting. To get an icon on your desktop that represents a mounted server, you have to know and type in its IP address and protocol, or its precise network name --browsing doesn't work.

    The Apple Discussion boards are buzzing with this one. The GUI implementation is horribly confusing to newbies especially, but bad enough for those of us who know what smb:// or afp:// or DHCP actually is. They must be getting a ton of feedback from us aggravated types.

    Until this is fixed, no-one I know here at the university will be advised to upgrade to 10.3, despite the many juicy new features and optimization.

    --
    Damn those pesky terrorists
    1. Re:10.3 broke the network gui - fixed soon? by OmniVector · · Score: 1, Informative

      what the hell are you talking about?
      i went to the finder, hit cmd-K, typed in smb://myserver/share, and it instantly mounted on my desktop. i clicked the eject button in the finder's new sidebar and it unmounted just fine.

      --
      - tristan
    2. Re:10.3 broke the network gui - fixed soon? by Golias · · Score: 1
      Whatever. I turned off desktop icons for my local drives. The new Finder window is good enough that putting drives on your desktop is pointless clutter for anybody other than OS9 zealots who just can't bring themselves to let go of their Old School ways.

      (FYI: What gests displayed on the desktop can be controlled via the Preferences in the Finder menu.)

      --

      Information wants to be anthropomorphized.

    3. Re:10.3 broke the network gui - fixed soon? by Shenkerian · · Score: 1
      I actually felt the same way until Panther.

      Now with Expose, it's nice to have instant click'n'drag access to any drive with F11.

      --
      You tell me how "whilst" differs from "while," and I'll stop calling you a pretentious jackass.
    4. Re:10.3 broke the network gui - fixed soon? by gobbo · · Score: 2, Interesting

      "i went to the finder, hit cmd-K, typed in smb://myserver/share, and it instantly mounted on my desktop. i clicked the eject button in the finder's new sidebar and it unmounted just fine."

      RTFP. That's exactly what I'm talking about. You have to type in the smb address, presuming you know it (OK for me, not my newbie interns or tweedy colleagues). Then you'll get the icon showing a mounted share, and an eject button. But that isn't browsing, is it? It's a command line approach with a simple entry form, why not just use Terminal.app?

      Now try that using the Finder's GUI sidepanel... click on the Network icon, drill down to an SMB share that you want, connect, then... just try it, you'll see. Try to disconnect that smb share, if it works, you're one of the lucky ones.

      --
      Damn those pesky terrorists
    5. Re:10.3 broke the network gui - fixed soon? by gobbo · · Score: 3, Informative

      Even if mounted servers don't show on the desktop (one of my user configs obsoletes the desktop anyway, so I personally can understand where you're coming from), they still don't show in the Finder window sidepanel that lists drives and favorites etc. if you've connected using the Network icon. That means no feedback about mounted shares, and no eject button, and even worse behaviour like Finder locking up when you unplug.

      I'd say having to ask someone or look up, then type in ip addresses and protocols is more Old School than (cmd-K, let's see, oh there it is, arrow-right arrow-down-down-down, return key), don't you think? I have more important things to think about than
      smb://obscure-27.someadmincruft.weird-9.domain.con
      and the like.

      Axiom:
      Discovery is better done in the interface than in meatspace.

      Now go and describe how to use this setup to someone who reads Habermas and McLuhan all day and night, and just wants to get to their damn files, or who thinks that Windows was always called XP and Britney is cool.
      [/rant]

      --
      Damn those pesky terrorists
    6. Re:10.3 broke the network gui - fixed soon? by seann · · Score: 1

      I see, yes.

      I dragged /private/var/automount/Network to my dock next to the trash to view activly mounted dirs.

      And yeah, I wrote an applescript to umount those shares on a drop.

      Kewl.

      --
      I'm a big retard who forgot to log out of Slashdot on Mike's computer! LOOK AT ME.
    7. Re:10.3 broke the network gui - fixed soon? by thunderbird46 · · Score: 1

      I"ve found one way to take care of it, at least with a Linux-running Samba server on the other end -- kill the server's smbd process corresponding to that connection. I tried that and then clicked on an item in my SMB-mounted shared folder and the mac was suddenly like "hey there's nothing here anymore." Of course you pretty much have to be root on the other box, so this is only useful for sysadmins and those of us who have personal LANs. I'd have never noticed this flaw if it weren't for these posts here -- I use AFP and NFS pretty much exclusively, only keeping Samba around on the fileserver for when I have a windows machine going (not often.)

    8. Re:10.3 broke the network gui - fixed soon? by Aliencow · · Score: 1

      I haven't been able to mount an NFS export on panther yet, first it didn't work, then it completely crashed and burned.. Anyone's tried that on Panther?

    9. Re:10.3 broke the network gui - fixed soon? by thunderbird46 · · Score: 1
      That means no feedback about mounted shares, and no eject button, and even worse behaviour like Finder locking up when you unplug.

      If there's any behaviour of OS X's that I hate, it's that. Finder attempts to reconnect WAY too long IMO. Now that I make myself disconnect all shares before I shut my iBook's lid I get along with it but I tend to think that on a laptop the OS ought to be able to handle losing a connection to a server a lot more gracefully.

    10. Re:10.3 broke the network gui - fixed soon? by gobbo · · Score: 1

      " wrote an applescript to umount those shares on a drop"

      Care to share? :-)

      --
      Damn those pesky terrorists
  14. Low interest in this item? by AtariAmarok · · Score: 2, Insightful

    Sheesh. There sure is a low amount if interest in this news item. It must have to do with the security reputation of the Apple OS.

    Why bother to put up another new electric fence around Fort Knox :)

    --
    Don't blame Durga. I voted for Centauri.
  15. Siegfried and Roy? by AtariAmarok · · Score: 3, Funny

    Now they put out "Security Updates for Panther and Jaguar". It's just a little late to save Roy from that pain in the neck, but it's a step in the right direction! Make those big cats safer.

    --
    Don't blame Durga. I voted for Centauri.
    1. Re:Siegfried and Roy? by Enrico+Pulatzo · · Score: 1

      I'm impressed that a post managed to refer to both Siegfried, Roy, and Apple without being an "Apple is teh ghey" troll.

      Good work!

  16. OpenSSL? by dema · · Score: 2, Interesting

    I ran the update today, and it appears (naive?) that my OpenSSL was not updated. While the date seems accurate, the version is not the suggested update. I know I read somewhere yesterday (I can't find the link again today) that the fix was to update to 0.9.6j, although this is the output on my "updated" g4 with jag:

    [akira:~] dema% openssl version
    OpenSSL 0.9.6i Feb 19 2003

    Any ideas what's up with that?

    1. Re:OpenSSL? by Anonymous Coward · · Score: 0

      If there are other improvements in 0.9.6j besides the security update, Apple may have decided not to include them--so they may have just patched 0.9.6i without incrementing the version number.

      At least, that's what's happened before.

    2. Re:OpenSSL? by LochNess · · Score: 1

      Well, I ran the update today too, and here's the output on my powerbook:

      [powerbookg4:~] user% openssl version
      OpenSSL 0.9.7b 10 Apr 2003
      [powerbookg4:~] user%

      (This is on Panther)

    3. Re:OpenSSL? by Frequency+Domain · · Score: 2, Informative
      All three of the machines which I updated today report identical results, a newer version than yours:
      shiva:~ freq$ openssl version
      OpenSSL 0.9.7b 10 Apr 2003

      Is it possible you installed your own copy, say in /usr/local/bin, and then forgot about it? Try running "which openssl", and see if it reports something other than /usr/bin/openssl. Alternatively, explicitly run the system's openssl: "/usr/bin/openssl version".

    4. Re:OpenSSL? by dema · · Score: 1

      Only one is in /usr/bin. But I believe the updates are different for Panther and Jag anyway. As a friend of mine updated a Panther machine to that same version you have, but his Jaguar machine also returned the version I got. So maybe (as suggested by an AC in this thread) Apple just patched the current version in jag's case. I suppose I should be looking at technical docs at Apple for the answer to that. Thanks for the tip though. (:

  17. sudo vulnerability? Give me a break! by csoto · · Score: 1

    This is such a non-issue. First, it requires an authenticated sudo event (e.g. someone typed in their sudoers allowed password), the laptop to be put to sleep, then someone to run another sudo command immediately after the system wakes up. This is NOT a critical vulnerability by any standard.

    --
    There exists no way of exchanging information without making judgments. --Bene Gesserit Axiom
  18. Safari Updated (at least on 10.3) by blb · · Score: 2, Interesting

    Note this update also brings Safari up to 1.1.1 (100.1); not sure what changed (still no mention of changes to Safari at the kbase page).

  19. MOD HIM DOWN! by Anonymous Coward · · Score: -1, Flamebait

    How dare you report that Apple may not have patched something, THE NERVE! You must be modded into oblivion, because this is not the place to post anything critical of Apple, no matter how true.

    If they change their minds and fix it after the fact, it becomes "hearsay" as well.

  20. Issue not fixed!! by Anonymous Coward · · Score: 0

    This still doesn't fix the disappearing unattended laptop issue. I've lost 4 notebooks this way!

  21. HAHA by ViperG · · Score: 0, Troll

    I was walking into staples and was talking to one of my friends who works there. He noticed some guy walking in with a printer, then he said to me "shit that is the 4th time he has come back with a printer".. then he said, he has the new mac os, none of them would intall on his panther os.

    --
    Black Sky
    2D Elite Inspired Game
    1. Re:HAHA by Anonymous Coward · · Score: 0

      Good excuse for testing printers at home... Why

      1) It's likely Staples guys doesn't know anything about Apples.

      2) Most non-mac users assume mac hardware will only play with mac hardware.

  22. safari cookie exploit fix not in ?!! by Anonymous Coward · · Score: 0

    insecure.ws: Safari cookies theft+exploit is not fixed!!

    the news about the exploit is like one or two days old, and it's not even on slashdot ?? what a shame ! ;p

    btw: the exploit allows about anyone to steal your cookies, including data about you, passwords, eg online bank accounts etc (or amazon/etc or such) it's quite dangerous there's also a demo here: demo /exploit

  23. Fink? by grocer · · Score: 2, Informative

    I did the same thing on my iBook and get the same output:

    [Adam-Laptop:/usr/bin] user% openssl version
    OpenSSL 0.9.7a Feb 19 2003
    [Adam-Laptop:/usr/bin] user%

    Now, the weird thing is there is openssl command in /usr/bin/ but when I run "which openssl" I get "/sw/bin/openssl" and running "/usr/bin/openssl version" returns "Command not found."

    Now I have to ask why is this?

    1. Re:Fink? by dema · · Score: 1

      Well, if you look closely ours actually aren't the same. Your iBook has 0.9.7a, while my mirrordoor has 0.9.6i. My guess is that fink has installed the very newest version of it on your iBook, so the Apple update saw it was already updated, and did nothing. I would check and see if /usr/bin/openssl is a symlink to /sw/bin/openssl. The command would be "ls -l /usr/bin | grep openssl" (if you didn't know).

    2. Re:Fink? by Anonymous Coward · · Score: 0

      My guess is that fink has installed the very newest version of it on your iBook, so the Apple update saw it was already updated

      Scracth that, if you're running Panther on the iBook that's the output that everyone else gets. But my guess regarding fink would be a symlink.

    3. Re:Fink? by grocer · · Score: 1

      okay, I was totally braindead...I have A) Jaguar and B) everybody else's Panther output...

      It doesn't look like a symbolic link to me...but I can't find the version of the /usr/bin copy...

      [Adam-Laptop:~] usr% ls -l /usr/bin | grep openssl
      -rwxr-xr-x 1 root wheel 935292 Sep 14 20:21 openssl
      [Adam-Laptop:~] user% ls -l /sw/bin | grep openssl
      -rwxr-xr-x 1 root admin 1314372 Oct 31 23:44 openssl
      [Adam-Laptop:~] user%

  24. Wait a few days before installing this by Anonymous Coward · · Score: -1, Troll
    If breaking, deleting and malfunctioning are anything to go by, Apple's track record over the past several weeks is, to put it mildly, less than it has been in the past.

    Let the anti-empiricists do the beta testing before jumping on any OS X updates in the short term.

  25. Pen Drive by tbuhler · · Score: 1

    Does anyone know if this will help with a Pen Drive problem. Everytime I put my in my new Emac it takes 3 trys to get it to work then it wont even let me put anything in it. The finder just freezes. Pen drive worked on an IMac with 10.2.8