Slashdot Mirror

← Back to Stories (view on slashdot.org)

Apple Fixes Safari "Carpet Bomb" Windows Vulnerability

Posted by kdawson on from the no-more-carpet-tax dept.

Titoxd writes "Apple has released a new version of Safari that fixes the carpet bomb vulnerability in Safari 3.1 for Windows. This comes in the heels of Microsoft recommending against using Safari in Windows, as well as the release of code exploiting this vulnerability."

6 of 99 comments (clear)

  1. You mean? by Centurix · · Score: 5, Funny

    You think the carpet bombers did this?
    Face it man, that rug really tied the room together...

    --
    Task Mangler
  2. But did they fix the real bug? by rustalot42684 · · Score: 5, Insightful

    Did they fix the bug where Safari installs as an iTunes update? I'd say that that is a fairly severe bug right there.

    1. Re:But did they fix the real bug? by tokul · · Score: 5, Informative

      Did they fix the bug where Safari installs as an iTunes update?
      New (released more than one month ago) Apple Software Update has two sections. One for updates and other for new software. When Safari was introduced, Software Update had only one section.
    2. Re:But did they fix the real bug? by torchdragon · · Score: 5, Insightful

      Yes.

      Recently, the Java update software has begun asking for the Open Office installer to be installed on the system during an update for Java. Several users at my company have clicked straight through and added more crap to their desktop/registry/uninstall information.

      Can we blame the users for not reading every detail and not unchecking a checkbox? Yes.
      Can we also blame software vendors who are relying on the aforementioned user behavior to add their software to your computer on the sly? Yes.

      Its a bad practice and it needs to stop.

      If something is required for the operation of a software package, default to selected.
      If something is optional or not required for the operation of a software package, default to unselected.

      Why are we allowing marketing to override good engineering?

      --
      "Don't feel bad for me child; I'm the monster that hides under your bed."
    3. Re:But did they fix the real bug? by lusiphur69 · · Score: 5, Insightful

      The real question is why are you defending Apple's unethical bundling - when the same is performed by Microsoft we criticize it. Call a spade a spade or you look foolish. Face it, this kind of practice is unacceptable, whether or not it comes from your favorite company.

      Is it so difficult for you to uncheck that box if you're performing an update? For me, no. For millions of uneducated end users, it is. Get it?
  3. Hmm? by koinu · · Score: 5, Insightful


    Safari downloads files (e.g. dynamic libraries) in user directories where the Internet Explorer could autoload them on start. Isn't the bigger problem within Internet Explorer? Why did Microsoft setup a library path to a user's directory at all?