Impact: Malicious system users can gain elevated privileges.
Description: This is specific to the implementation of Java on Mac OS X. The utility used to update Java shared archives is susceptible to a privilege escalation vulnerability from local system users. This update addresses the issue by performing additional clean-up before launching the utility on behalf of unprivileged users. This issue does not affect systems prior to Mac OS X v10.4. Credit to Dino Dai Zovi for reporting this issue.
They published 2 files, both with the same hash, both postscript files that printed to 2 entirely different things. If you signed the hash, you signed both the documents.
Allchin has scaled back, or at least clarified, expectations for Cairo, the 1996 version of NT Server. To those awaiting the object-oriented operating system they thought they'd heard Microsoft describe, Allchin has a warning: "Cairo isn't the second coming." It's just the next NT revision.
[...]
The key new piece of object technology in Cairo will be its Object File System-an extensible directory of all operating system objects that will function much like a database, permitting searches of object properties, such as the state of all color printers, and extending to documents.
There aren't those harsh penalties for movie theaters, because movie theaters, for the most part, enforce the ratings on films. They do so to keep the government from getting involved.
A recent study showed more compliance to video game ratings than movie ratings. What was that argument again?
AppleScript is effectively COM, you can drive any of the apps that support it, just as you can with COM.
Stupid users are the rule for computers. I could write a perl equivalent to MyDoom that would have the same behavior, and not require user interaction past the original running, and not require a password.
Slashdot Mirror
Is that so? Here's a two'fer
CVE-ID: CAN-2005-2529
Available for: Java 1.4.2
Impact: Malicious system users can gain elevated privileges.
Description: This is specific to the implementation of Java on Mac OS X. The utility used to update Java shared archives is susceptible to a privilege escalation vulnerability from local system users. This update addresses the issue by performing additional clean-up before launching the utility on behalf of unprivileged users. This issue does not affect systems prior to Mac OS X v10.4. Credit to Dino Dai Zovi for reporting this issue.
What they are doing, provided they are willing to suck up and deal with the damages under the law, is the essence of civil disobedience.
And how quickly does it end up on P2P because of those 5%?
No net gain, other than bad publicity.
They published 2 files, both with the same hash, both postscript files that printed to 2 entirely different things. If you signed the hash, you signed both the documents.
It's been done. A story on /. a month or two ago.
[...]
From here
You're right about Cairo, but that's NT 4 (1996), not Win 2k.
So we're only talking 10 years and 4 versions late.
Actually, I think it's sqlite. At least CoreData is anyway, IIRC.
Or that Microsoft hasn't done it already, just not as quickly
Win NT 5.0, Win NT 5.1
Wasn't WinFS originally supposed to be out with NT 4, and they *still* can't make it?
It should be enforced *exactly* the way movie tickets sales are.
Which is by the retailer with no force of law behind it.
And, at the very least, the XBox (possibly the others, don't have them in front of me right now), have parental controls. Use them.
One word to the child:
No.
Repeat as necessary.
DVD's outsell games (as games outsell the theaters). Shouldn't that be the next target?
There aren't those harsh penalties for movie theaters, because movie theaters, for the most part, enforce the ratings on films. They do so to keep the government from getting involved.
A recent study showed more compliance to video game ratings than movie ratings. What was that argument again?
Most publishers aren't going to want to make a game that kids aren't going to be able to play
2/3 of gamers are over 18. What are you going to make, games that 1/3 won't play or games that will alienate 2/3's?
And so did MyDoom, one of the fastest spreading worms ever. Much of the crap circulating for Windows needs human interaction.
AppleScript is effectively COM, you can drive any of the apps that support it, just as you can with COM.
Stupid users are the rule for computers. I could write a perl equivalent to MyDoom that would have the same behavior, and not require user interaction past the original running, and not require a password.
Actually, the firewall is not on by default, at least it wasn't when I got my iMac last year.
However, nothing was listening to an external interface either.
Lesse...
Automator, AppleScript, bash, perl, ruby, python...
I'd say OS X is crammed with more automation than Windows.
They've finally released the specs for Phantom?
Psychonauts (of course, that's by the guy that did Grim Fandango)
Linux is free, therefore it avoids TCO arguments...