Worm Maker Raps Apple On Security

HardOCP News

[H] News
Joined
Dec 31, 1969
Messages
0
According to InfoWorld, the anonymous researcher who claims to have crafted a Mac OS X worm says Apple has a “very long way to go” on security.

Identified only as the researcher behind the Information Security Sell Out blog, he or she on Sunday announced that a still-unpatched bug in mDNSResponder, a component of Apple's Bonjour automatic network configuring service, could be exploited by a worm. Apple's May security update, dubbed 2007-005, included a fix for the mDNS bug.
 
Even though I prefer OSX over any other OS, I think the guy should release the worm and give Apple a wake up call. Apple is too worried about their iPods and iPhones, while not giving enough attention to what attracted me the most to them: OSX. Leopard could've been a way better OS than what it's going to be, but I'm sure that someone took OSX devs away from the Leopard project only to work on the iPhone or a new upcoming iPod. What do you think Leopard got delayed?
 
ROFL! I wish he would actually release the worm, if not to put an end to the idiotic commercials. :p

Wow, who pissed in your cornflakes? ;)

So, I'm confused as the article says Apple released a patch in May and this "researcher" claims the patch left too much open. Then, other researchers stated that the best anyone could do was cause a stack overflow. If thats the case, then this person doesn't have the worm with payload they describe. May explain why he/she/it wont release it for other researchers to review. Sounds as if someone is using the "look at me, give me my 15 minutes of fame" when they have nothing.

Don't worry, the day will come when someone will have a real worm/virus and it won't be from some anonymous researcher but from a European hacker wanted to harvest data or keystrokes.
 
I must agree, if he really has this worm he is describing why not just release it to show that it is vulnerable? Or why not just tell Apple what he did and allow them to fix it? Either way he has not really done anything other than make a claim he has done something.
 
heh, in the Apple store, it is well known fact that Apple products don't get virii. Go ahead, ask one of their employees. At least that is what they say at 12 Oaks Mall in Michigan. :p I wonder what would happen if the worm was released? Would the computers take an iShit and iOwners commit iSuicide?
 
ROFL! I wish he would actually release the worm, if not to put an end to the idiotic commercials. :p

For the sake of the commercials, I hope so too.

I must agree, if he really has this worm he is describing why not just release it to show that it is vulnerable? Or why not just tell Apple what he did and allow them to fix it? Either way he has not really done anything other than make a claim he has done something.

If he releases it, he goes to Jail. If he gives it to Apple, he gets nothing from it and Apple wipes it under the "We don't get worms" rug.

heh, in the Apple store, it is well known fact that Apple products don't get virii. Go ahead, ask one of their employees. At least that is what they say at 12 Oaks Mall in Michigan. :p I wonder what would happen if the worm was released? Would the computers take an iShit and iOwners commit iSuicide?

Apple stores tends to believe that they have an Aura hovering over them or something. I've noticed the same thing with our local Apple stores.
 
Yeah, but what happened to human kindness, even though he might not get anything why not let them know what OR maybe where it is. He does not have to show them the problem just point to the area and let them know. Maybe I am just a nice person, and would let them know if there was a problem or any company if I found a hole.
 
I agree that this guy just sounds like he's trying to get his air time.
I also agree that a rational person would prolly have just told Apple about it, even with the risk of just getting swept under the rug, so to speak.
I also also agree that this sort of Apple user mentality has to go. :D
 
Apple fans are funny if they seriously believe Apple as to the no virus/spyware thing. There's always vulnerabilities in a OS which btw OSX hasn't really got the attention of virus writers because of the small exposure they would get.

OSX is no safer than Linux and it has been proven that there are tons of ways to exploits Linux holes but who really cares to do so? Hell, The US Army, the pentagon and even NASA which uses some form of Unix/Linux got hacked through the years...

Oh yea OSX is impossible to hack. Sure.

Get a iClue.
 
Doesn't suprise me. No one write viruses for Macs because no one uses them. What would be the point? That would be like making scuba gear for fish.
 
If he releases it, he goes to Jail. If he gives it to Apple, he gets nothing from it and Apple wipes it under the "We don't get worms" rug.

Someone should steal it from him then release it. :eek:
 
Yeah, but what happened to human kindness, even though he might not get anything why not let them know what OR maybe where it is. He does not have to show them the problem just point to the area and let them know. Maybe I am just a nice person, and would let them know if there was a problem or any company if I found a hole.

Not many of you good people left in this world.

Doesn't suprise me. No one write viruses for Macs because no one uses them. What would be the point? That would be like making scuba gear for fish.

Like GJSNeptune best said: A suicide bomber doesn't blow himself up in the middle of Siberia

Someone should steal it from him then release it. :eek:

That's one option he does have, to leak it out to others for "learning purposes" and hopefully somone will exploit it.

I would have figured out how to make alot of money on the thing

I think that is why he's going this route, he probably wants apple to offer him money or a job without him asking for it, as that would be blackmail.
 
Color me not at all surprised. :rolleyes:
Little techie crybaby didn't get paid for his loudmouth moment of fame. Darn.
 
That's a little... wrong.
But true. I'm not kidding.

As for the post above about SCUBA and fish (sorry, can't quote a quote :(), your example has a slightly different meaning from what you intended. Fish don't need SCUBA because they can accomplish the same thing without it as if they had it, making the gear redundant. Apple doesn't have all the same functionality as malware built-in... unless you count iTunes itself, and all those really pretty-but-bloated programs that 99% of Apple customers don't actually use: Garage Band, anyone?
 
Back
Top