Jan 17 2005
The iPod shuffle–cheap enough for the entry level digital music lover…cheap enough to be disposable. The folks at AppleMatters, equipped with box cutter knives, have taken apart an iPod shuffle to see how it works…and found no surprises inside.
Note:
By admin • Geek News, hax0r, News • Comments Off • Tags: AppleMatters, Box, box cutter, cutter, digital music, Dissects, Entry, ipod, ipod shuffle, knives, level, lover, Music, music lover, no surprises, shuffle
Dec 17 2004
DrunkenBlog has an intriguing post about a local remote root exploit found for Adobe’s Version Cue which ships with Adobe’s Creative Suite of software. Version Cue is designed to help creative professionals find, share and track multiple versions of files and jobs in progress in a collaborative environment. The problem is, the system is insecure and “could permit a local malicious user to obtain root privileges on the target system”. Beware the freelancer!!
Note:
By admin • General News, hax0r, News • Comments Off • Tags: Bugtraq, collaborative environment, Creative, creative professionals, creative suite, cue, freelancer, hackers, malicious user, post, problem, progress, root, root privileges, Share, software version, Suite, system, target system
Dec 8 2004
MacCentral has posted a little article from NetSec, claiming that the recent “web hole” in OS X has yet to be fixed. According to NetSec, this vulnerability “could allow attackers to exploit URLs to gain access to back-end data structures and carry out website defacement or information theft.” Apple has responded to the vulnerability by patching Apache in Security Update 2004-12-02. According to NetSec, however, this isn’t good enough. Other applications, like WebStar, are still vulnerable. What NetSec doesn’t realize is that this is not Apple’s problem anymore. Apple only supports the default installation of OS X, which includes Apache. Beyond that, the third-party applications are left to themselves. This is similar to the incident in which a massive vulnerability affected all web browsers. Yes, Apple fixed Safari, but they did not have to issue a fix for FireFox, because Apple does not support third-party applications. Sorry, NetSec, it looks like you’ll have to wait for WebStar to pull itself out of the hole this time.
Note:
By admin • General News, hax0r, News • Comments Off • Tags: Apache, data structures, defacement, default installation, fix, information theft, installation, MacCentral, May, NetSec, party applications, theft, time, time note, Update, URLs, web browsers, web hole
