Archive for the ‘Security’ Category

Security Update 2010-001 won’t install?

Tuesday, January 26th, 2010

I’ve downloaded Apple’s Security Update 2010-001 for Snow Leopard, but when I try to install the package I get told that

Security Update 2010-001 can’t be installed on this disk. This volume does not meet the requirements for this update.

Anyone else having this problem?

NSW Computer Crime Unit expert recommends not using Windows for internet banking

Thursday, October 8th, 2009

Computer expert Detective Inspector Bruce vad der Graaf from the Computer Crime Investigation Unit told NSW MPs to boot Linux off CD or use an iPhone for internet banking rather than using Windows. Interestingly he quotes the iPhone’s single-application-at-a-time as a plus, on the grounds it can’t be running any other dodgy applications at the same time as you’re banking (although I’m sure someone smart enough could probably get around those restrictions using some unofficial APIs…, given that the phone still runs Apple’s tasks at the same time as 3rd party apps).

This is my iPod, this is my gun…

Friday, April 24th, 2009

…this is for fighting, this is for fun.

Newsweek reports that the US Army are using iPod Touches and some iPhones for translation and other purposes. They’re cheap, rugged and many recruits are already familiar with using them.

Could be quite interesting if integrated with DARPA’s locationally aware wiki TIGR.

Not sure if the users get to upload their own content onto them though.

Obama’s staff faced with White House Windows dark age

Sunday, January 25th, 2009

Apparently Obama’s staffers (being hip Mac kind of folks :) are faced with White House PC’s running 6 year old versions of Windows.
I wonder if anyone’s at Apple’s rung him about doing an iPhone deal on the presidential crackberry yet?

MDJ reveals Safari 3.2 sends URL hashes to Google

Monday, November 17th, 2008

The latest edition of Mac Daily Journal (1st page as PDF here) reveals that Safari 3.2’s anti-phishing technology relies on downloading a database of prefixes of URL hashes from Google to check against your current URL, using the Safe Browsing 2.1 protocol. If the match is positive then a full URL hash is requested from Google.

Not that Apple mentions this anywhere, nor has stated a related privacy policy about what Safari sends to whom.

Installing clamav-0.93 on Mac OS X

Saturday, May 10th, 2008

If you’ve got the latest Apple Developer tools installed, you’ll notice that attempting to ./configure the clamav-0.93 package doesn’t work because of a gcc compiler bug. The way I found around this is to “fink install gcc43″, then retry the configure command after having set the CC to beĀ /sw/bin/gcc-4 and then you can make and make install as per usual.

Common Criteria tools for Mac OS X 10.5

Thursday, May 1st, 2008

Apple has released Common Criteria security tools for Mac OS X 10.5. There’s also an Apple Common Criteria support page with links to whitepapers and the not-yet-updated-for-Leopard Admin guide.

Input Manager hacks are not plugins

Friday, April 11th, 2008

MacJournals has reprinted its article on why Input Managers shouldn’t be considered ‘plugins’, namely because they’re hacks, rather than interacting via a sanctioned plugin API.

Security update breaks ssh?

Thursday, March 20th, 2008

Apple’s Security Update 2008-002 seems to break ssh based utilities, causing them to bus error when run. There is some discussion on the Apple support forum.

Using FireWire to hack your PC, Mac

Monday, March 10th, 2008

A recent article on Slashdot about using FireWire’s direct memory access (DMA) capabilities to rewrite memory on a Windows box reminded me a lot of the 1st place winning 2002 MacHack hack “FireStarter” perpetrated by Quinn, which wrote a QuickTime movie of burning flames on the screen of any Mac you plug in via FireWire. As mentioned on TidBITS at the time.

Some of Quinn’s hacks are here.