Slashdot Mirror
Snow Leopard Missed a Security Opportunity
CWmike writes "Apple missed a golden opportunity to lock down Snow Leopard when it again failed to implement fully a security technology that Microsoft perfected nearly three years ago in Windows Vista, noted Mac researcher Charlie Miller said today. Dubbed ASLR, for address space layout randomization, the technology randomly assigns data to memory to make it tougher for attackers to determine the location of critical operating system functions, and thus makes it harder for them to craft reliable exploits. 'Apple didn't change anything,' said Miller, of Independent Security Evaluators, the co-author of The Mac Hacker's Handbook, and winner of two consecutive 'Pwn2own' hacker contests. 'It's the exact same ASLR as in Leopard, which means it's not very good.'"
All fellow mac users, let's not let facts get in our way. Just like the ads of our truly beloved company over how superior our products are to Microsoft, let's keep on bragging the superiority of macs - even in terms of security. Mac are the best. Windows sucks. Repeat it till you die.
Aaannnd discussion devolves in UAC rants and Microsoft bashing in 3.. 2.. 1...
Oh wait... it's Slashdot. No devolution is required or possible.
The confidence of ignorance will always overcome the indecision of knowledge.
Yes, apple fanboys have to worry more about a different sort of virus.
And the author thinks that Apple is going to license anything from Microsoft?
Ibid.
Yes. Just like all other apple zealots and fanbois, you missed a big gaping hole in the security.
But don't let facts get in your way. Cults have always succeeded.
Likewise, Obama missed an opportunity to make good on his campaign rhetoric and unite this country. Turns out he's weaker than Jimmy Carter. I'll bet Carter is really looking forward to getting rid of the title of "Most Ineffective President Ever."
afaik, smug bastard, rich bastard and of course, more money than sense bastard are not caused by micro-organisms. er, i suppose i should balance that by mentioning that i know people who use macs who are really nice people and they get great work done. none of them post on slashdot, tho.
Please read and understand my comment, per my sig. We covered this here already, and I am not going to go back and find a citation for you. If you were not amazingly lazy you would have found a citation in less time than it takes to ask for one.
Do not expect me to do your homework for you. I am not here to train you. I am not here to teach you. If you would like one of those things, pay me.
"You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
> there is no mono-culture who is interested in making the overall product
Apple fanboy...
If there's a kernel bug or security hole, Linus will certainly fix it within hours. Likewise, for libraries using the linux operating system.
> people don't update their Linux boxes as quickly as Macs or Windows too
Of course not. Server uptimes > 1 year are quite common.
> I have seen Linux Hacked more often then Mac because of that fact
You are talking rubbish!
Does DEP do anything other than make me disable it when it has a false positive on some application that I want to run? I think that the only time I've heard of it was when Windows wouldn't install some driver (and yes, I confirmed that it was a real driver from a valid source) and the website said, "If you have this problem, disable DEP."