Tag Archives: apple

Safari Vulnerability: Now a Blended Flavor

I blogged “previously”:http://blogs.stopbadware.org/articles/2008/05/19/safari-security-questioned-sbw-encourages-action about a Safari vulnerability noted by Nitesh Dhanjani. He found that Safari automatically downloads items to a default location, which happens to be the desktop on both Apple and Windows machines. By itself, this vulnerability can be … Continue reading

Tagged , , , | Comments Off

Safari Security Questioned; SBW Encourages Action

You may recall that StopBadware.org recently “played a role”:http://blogs.stopbadware.org/articles/2008/04/17/apple-responds-to-community-concerns in successfully encouraging Apple to improve its disclosure in pushing the Safari web browser to users through its Apple Software Update application. Now, Nitesh Dhanjani, a security researcher, “writes”:http://www.oreillynet.com/onlamp/blog/2008/05/safari_carpet_bomb.html about his … Continue reading

Tagged , , , , , | Comments Off

Apple Responds to Community Concerns

A few weeks ago, the blogosphere raised concerns about the Windows version of Apple Software Update for offering new software installations (e.g., Safari) disguised as product updates. At the time, we “blogged about it”:http://blogs.stopbadware.org/articles/2008/03/24/apple-updates-raise-eyebrows and said we were looking into … Continue reading

Tagged , , | Comments Off

Mac hacked via web

According to the Mac Observer, a “MacBook Air was compromised”:http://www.macobserver.com/article/2008/03/28.1.shtml via what sounds like a drive-by download style attack in a hacking competition: bq. On the first day of the event, contestants unsuccessfully attempted to remotely hack into the Mac, … Continue reading

Tagged , , , , | Comments Off

Apple updates raise eyebrows

Bloggers have recently reported that the current version of the Apple Software Update tool for Windows, which is bundled with some of Apple’s current products, such as QuickTime and iTunes, offers the user “updates” for applications (e.g., the Safari web … Continue reading

Tagged , , | Comments Off

Apple Users May Need to Focus on Security

Apple traditionally has not been a target of hackers, yet that may be changing. Two articles this week note that increased popularity and some specific security holes in programs pose potential weaknesses. Jeremy Kirk, at PC World, “explains”:http://www.pcworld.idg.com.au/index.php/id;1308570884 that increased … Continue reading

Tagged , , | Comments Off

Watch out for rogue anti-spyware (even on the Mac!)

According to security vendor F-Secure, MacSweeper is a new player to avoid in the rogue security software game, and is likely the first fraudulent anti-spyware product targeted to Mac users. Rogue security software coerces users into downloading supposedly beneficial software … Continue reading

Tagged , , , , | Comments Off

Badware targeting Macs

At StopBadware, we often talk with regular internet users, from the novice to the sophisticated, about internet security and precautions users can take. One comment we hear again and again is the belief that some operating systems – such as … Continue reading

Tagged , , , , , | Comments Off