Cybercrooks add QuickTime, WinZip flaws to arsenal

TalkBack 1 of 10:

Next »

• Thread View
• Flat View

Vista users are safe, OSX users are not

Since the Quicktime flaw affects all OSX users (it is installed by default) and only some Vista users (not installed by default), let's compare what happens when a Vista user and an OSX user visit a "malicious" web site:
- The OSX user opens the page in Safari which is running with full user permissions. Quicktime is loaded with the same permissions as Safari, the vulnerability is exploited, and all of your personal files get deleted. Gone. Vanished.

- The Vista user opens the page in IE7 which is running in Protected Mode and does not have the ability to overwrite any system or user files. Quicktime, if it is present, is loaded with the same, limited set of permissions as IE7, the vulnerability is exploited, and the exploit gets a big "PERMISSION DENIED" error. All your user files are safe. They are still there. Ahhhhh.

It is obvious that any security model that gives the browser full user permissions, like OSX does, is flawed by design. OSX has a long way to go when it comes to security.

Get a Mac - Just Make Sure You Back Up All Your Files Before You Surf The Web.

Posted by: NonZealot   Posted on: 05/10/07 You are currently: a Guest | Members login | Terms of Use

Alert moderator to an offensive message

Subscribe to this discussion via Email or RSS

SponsoredWhite Papers, Webcasts, and Downloads

• Using Red Hat Enterprise Linux AS to Achieve Highly Available, Load-Balanced Clusters Dell The Red Hat Enterprise Linux AS operating system integrates Cluster ... Download Now
• Three Steps You Need to Know to Stop Data Loss Varonis Sensitive data exposed to misuse or loss... it is the stuff of nightmares ... Download Now
• Five Steps to Determine When to Virtualize YourServers VMware Server virtualization isn't just for big companies. Entry-level ... Download Now