Re: Security flaw in Mac OS X

2004-05-20 Thread Shay Telfer
BTW, does this flaw occur when someone with administrator access is logged in, or when anybody is logged in? I figure deleting anything will require some sort of permissions. I guess at worst you can lose the contents of your home folder - which shouldn't be that much of a concern to those who r

Re: Security flaw in Mac OS X

2004-05-20 Thread Rod
On 20/5/04 2:53 PM, "Shay Telfer" <[EMAIL PROTECTED]> wrote: >>> I followed the links in the slashdot article to MoreInternet >>> >>> http://www.monkeyfood.com/software/moreInternet/ >>> >>> and then changed the help: protocol helper to Safari. When I try >>> Rob's link above, it just annoyingl

Re: Security flaw in Mac OS X

2004-05-20 Thread Shay Telfer
I followed the links in the slashdot article to MoreInternet http://www.monkeyfood.com/software/moreInternet/ and then changed the help: protocol helper to Safari. When I try Rob's link above, it just annoyingly opens another browser window, but doesn't do anything malicious. That should do

Re: Security flaw in Mac OS X

2004-05-20 Thread Mark Secker
Hi Everyone, On Thursday, May 20, 2004, at 05:05 AM, WAMUG Mailing List wrote: It's here if you want to see it in action (promise nothing bad happens) http://www.mactherapy.com/AppleScript.html There is another page linked from the article which does something similar. Apple better fix

Re: Security flaw in Mac OS X

2004-05-20 Thread Paul Mulroney
Hi Everyone, On Thursday, May 20, 2004, at 05:05 AM, WAMUG Mailing List wrote: It's here if you want to see it in action (promise nothing bad happens) http://www.mactherapy.com/AppleScript.html There is another page linked from the article which does something similar. Apple better fix th

Re: Security flaw in Mac OS X

2004-05-20 Thread Rod
On 20/5/04 1:18 PM, "Tim Law" <[EMAIL PROTECTED]> wrote: > Hi, > > My problem may be unconnected, but just in case, others need to be warned... > > Because Rob is a 'trusted person' on the list, I clicked on the link to the > script, as others appear to > have done too. The script ran, and yes

Re: Security flaw in Mac OS X

2004-05-20 Thread Tim Law
hu, 20 May 2004 08:53:29 +0800 > > To: "WAMUG Mailing List" > > Subject: Re: Security flaw in Mac OS X > > > >> Rob,Why put this on the web rather than inform Apple directly? or am > >> I missing something. I will be very interested to hear Shay's &

Re: Security flaw in Mac OS X

2004-05-20 Thread Mark Secker
I thought I better be the first on the block http://apple.slashdot.org/article.pl?sid=04/05/17/1646216 This is actually pretty scary! my business partner wrote a webpage in about 5 minutes to demonstrate the vulnerability. It's here if you want to see it in action (promise nothing bad happens)

Re: Security flaw in Mac OS X

2004-05-20 Thread Shay Telfer
Rob,Why put this on the web rather than inform Apple directly? or am I missing something. I will be very interested to hear Shay's comments Mac I'm sure Apple already knows about it as it's already done the rounds of Macintouch etc. Yes, it's a security hole :) Also relatively easily exploi

Re: Security flaw in Mac OS X

2004-05-20 Thread Rob Findlay
> From: Mark Secker <[EMAIL PROTECTED]> > Date: Thu, 20 May 2004 08:53:29 +0800 > To: "WAMUG Mailing List" > Subject: Re: Security flaw in Mac OS X > >> Rob,Why put this on the web rather than inform Apple directly? or am >> I missing somethin

Re: Security flaw in Mac OS X

2004-05-20 Thread Mark Secker
Rob,Why put this on the web rather than inform Apple directly? or am I missing something. I will be very interested to hear Shay's comments because of a long history of computer companies burying such exploits unless there is a general community (well general technical community) going "we w

Re: Security flaw in Mac OS X

2004-05-20 Thread Malcolm McCallum
Rob,Why put this on the web rather than inform Apple directly? or am I missing something. I will be very interested to hear Shay's comments Mac On 19/05/2004, at 11:49 PM, Rob Findlay wrote: I thought I better be the first on the block http://apple.slashdot.org/article.pl?sid=04/05/17/1646216

Security flaw in Mac OS X

2004-05-19 Thread Rob Findlay
I thought I better be the first on the block http://apple.slashdot.org/article.pl?sid=04/05/17/1646216 This is actually pretty scary! my business partner wrote a webpage in about 5 minutes to demonstrate the vulnerability. It's here if you want to see it in action (promise nothing bad happens)