Slashdot Mirror

← Back to Stories (view on slashdot.org)

Apple Adds Memory Randomization To Leopard

Posted by kdawson on from the shuffling-the-wormholes dept.

.mack notes a ZDNet blog outlining some of the security features added to OSX Leopard (10.5). Here's Apple's brief description of all 11 new security features. "Apple has announced plans to add code-scrambling diversity to Mac OS X Leopard, a move aimed at making the operating system more resilient to virus and worm attacks. The security technology, known as ASLR (address space layout randomization), randomly arranges the positions of key data areas to prevent malware authors from predicting target addresses. Another new feature coming in Leopard is Sandboxing (systrace), which limits an application's access to the system by enforcing access policies for system calls."

5 of 311 comments (clear)

  1. Cool, but even better... by Just+Some+Guy · · Score: 5, Interesting

    From the changelog:

    CalDAV Group Scheduling
    Schedule a meeting with colleagues, check availability, and book conference rooms when using iCal with a compatible CalDAV server like iCal Server.

    Reserve Rooms and Equipment
    Reserve meeting rooms and equipment as you create your meeting invitations. If your calendar is administered through a CalDAV server, iCal automatically displays availabilities when you add a room or resource to your meeting.

    It sounds like a high-level player finally decided to take on Exchange. My biggest questions: are there Windows programs that support these features via CalDAV, and is there a CalDAV server in FreeBSD's ports?

    --
    Dewey, what part of this looks like authorities should be involved?
  2. Re:Woo! by Corwn+of+Amber · · Score: 3, Interesting

    I, for one, am going to buy Leopard, the day it's out.
    Then I'll put it on in a drawer.
    Then I'll download the ISO of the version I'll install on my PC.

    And I'll be a happy Apple customer :)

    (I'm NOT going to buy a Mac unless I win the lottery or something. But I can spend $139 on the company that's produced the best OS for my use.)

    --
    Making laws based on opinions that stem up from false informations leads to witch hunts.
  3. crash logs (was Re:ASLR == Windows Feature...) by WillAdams · · Score: 4, Interesting

    When I first started using Quark XPress 6.5 in Mac OS X here at my new job, it took a while to work out the kinks for a rather complex project (doing layout for a journal w/ a 24 hr. turn-around), to the point that I actually put up a ``crash log'' outside of my cubicle, so that people could gauge my mood before entering. It's been a year now, and while I've gotten the project in question worked out (had to train myself _never_ to undo re-sizing a text box &c.), the totals might be interesting to people:

    2006:
    Quark XPress: 207 crashes (as many as 9 per day)
    Adobe Illustrator: 25
    InDesign: 35
    PhotoShop: 15
    Acrobat: 65
    Microsoft Word: 23
    Macromedia FreeHand: 9
    Mac OS X: 14 (this includes Mac OS X apps like Mail.app and Safari.app)

    The totals for this year are a bit more reasonable --- Quark XPress v6.5: 26, v7: 46 (I had to move the afore-mentioned journal over to Quark 7 after a re-design and that involved a new set of things to work-around) --- but I find Mac OS X overall reliable and workable as an environment (thought not as nice, consistent and synergistic as NeXTstep).

    William

    --
    Sphinx of black quartz, judge my vow.
  4. Re:ASLR == Windows Feature Since 3.1 by Tony+Hoyle · · Score: 3, Interesting

    When mac software crashes it usually just vanishes, with no user feedback at all. When the OS crashes it blackscreens (like, say, plugging in a firewire drive into Tiger, which they *still* haven't fixed) but I wouldn't say the information it gives is useful at all.. about as useful as a bluescreen.

    Then there's the spinning beachball of death crashes which are a sore point with me.. they happen every time it decides it can't access a network resource* and the only way out is to pull the power cord (since if finder is dead you can't even power off or run the kill application). Got rather sick of doing that last night...

    * Which happens rather a lot if you decide to use NFS. NFS under Tiger is broken on intel macs but works OK on ppc macs.. same OS version (allegedly), same NFS share, even the same damned cables.. different result every time.

  5. Re:Woo! by kestasjk · · Score: 3, Interesting

    Safari asks. Most modern browsers have security settings that can do this. No as in any foreign executable, including executables downloaded via network shares, are flagged as foreign. This isn't the same as your browser asking "are you sure you want to download this executable file?"

    It is called Little Snitch. It works great. Okay, but it wasn't part of the OS. We're talking about the OS here, not applications for the OS.

    Nice feature, but if you were really concerned with security you would have memory encryption enabled anyhow. No problems with this when using encrypted memory. Encrypted memory? Can you elaborate on this? I'm guessing you're talking about encrypted swap files, but that doesn't make it any harder for foreign code to know where in the address space useful libraries are.

    Public Key signing anyone? This has been around for decades - even on OSX! Manual public key signing isn't the same as automatic digitally signed binaries. Manual public key signing means that the user has to know to download the digital signature separately and check the executable, which is a big hassle and pretty unrealistic for most users.

    These are not things that weren't available on OSX. They weren't gaping holes. Apple just decided to make them easier for the average user by including them out of the box and beefing them up a bit where necessary (like the memory randomization). They were already available? Where in Tiger is memory randomization, digitally signed binaries, flagged-as-new binaries, and the built in application-level firewall?
    --
    // MD_Update(&m,buf,j);