Discussion in 'OT Technology' started by piratepenguin, Jul 30, 2008.
OS X: no thank you.
you don't say?
It just works.
OS X Server sucks. Everyone knows this. Its a niche product, and you shouldn't rely on it unless you have a really good reason.
Fortunately there is Linux. Or Solaris.
but but but but apple...... just works
The desktop OS has 1% of the problems of Windows. I know that burns, but its true. Which is why you recommend OS X to people.
B b b ut you have a COMPLEX over that fact! OH NOES!
my win-based dns server was patched, negro. good thing i wasn't using os x!
Yes. Because noone says that Mac OS X Server 'Just Works.'
In fact, it JUST SUCKS.
But its not the same product as the desktop OS, is it?
methinks the core is methinks
yawn. who cares? who uses OSX server anyway, especially for running something like DNS? and don't you all realize that this kind of shit is a constant for Winders and has been for years? Windows is a server OS that gets used quite often, yet i'm certain that it has tons of gaping holes just waiting to be exploited right now. shit, that's why every install of Windows, both desktop and server, needs tons of 3rd party software to help plug the security holes. you need personal firewalls and all kinds of virus/adware/spyware/malware scanners to keep Windows alive and well. oh, and now you've found one real flaw for a barely used version of OSX for a job that no one in their right mind would use OSX for? good job.
Apparently the patched BIND isn't stable on OS X Server, so they're sort of stuck for the moment.
This is just the Apple attitude towards security on all of their products and YOU ALL KNOW IT.
Name another instance of this happening, and you might have an argument.
You got starry eyes, my friend.
According to secunia: still not fixed
I believe I've lost the blog post where the hacker (who discovered this flaw iirc) discussed Apple's attitude to security on the whole, and they are useless to sum-up.
There's also an unpatched flaw with ARD agent that allows arbitrary code to execute as root without authentication. Apparently, Apple has known about it for over a year without releasing a patch.
that's the flaw that trojan exploits.
apple has not got security right.
but at least they look purdy
Haha. They've known about it for 4 years.
I forgot the old thread we had about this that got derailed & locked. http://forums.offtopic.com/showthread.php?p=101252929 (actually I remembered it, but I can't search the forums since I have no sub. However, Firefox 3's amazing history search came to the rescue)
Satisfied with your 'other instance' Peyomp?
If not, I would say to you 1. you are a careless dumbass as bad as apple and 2. google apple opener. It shouldn't come to that.
mac-hacking: just works.
i'd just like to see examples of Mac's getting compromised. i'm sure every single person here has anecdotal evidence of Windows PCs being wrecked by adware, spyware, viruses, trojans and the like. Now, Apple computers are getting to the point where most of us should know a few people who are running OSX. Let's hear the actual evidence of people getting their OSX computers fucked up due to any sort of malware. so far all you have posted is hypothetical, possible, someone could, maybe, might hack a vulnerable mac and thus used that to claim that OSX is insecure.
how about this? how about one of you finds a few examples of compromised systems? you can use the internet to find some anecdotal info. go ahead.
i'll start. it isn't completely current, but it is recent enough... your turn.
You're a system admin. You know that the bridge from possible to actual is just effort and ambition. Proof-of-concept is absolutely enough.
Would you feel better if I used the ARD exploit to run a "Hello World" app on all the Macs on my campus? How about I add a dozen lines of code that send an email to an address. How about I have them all send a thousand emails to an address? Maybe I download some plist files and fuck up all the program settings?
Its not "if." Its when.
it's been around for a year. when?
proof of concept isn't enough when you can compare it to the real world of Windows.
People have gone into Apple stores and wrecked havoc on their insecure machines. (some Apple stores have manually fixed one or two of the, er, zero days)
I can tell you: If Apple doesn't get their act together OS X, sir, will be fucked. The introduction of the iPhone could be OS X's downfall, or Apple's. Because they are fooking useless.
If Mozilla had this attitude it would be the same situation for them. It's not about market share numbers (they come into target appeal obviously), it will ultimately come down to the attitude and the CARE. And it looks like OS X is doomed.
Apple have a lot of work to do, but further, they have to get their priorities right.
Proof of concept is a good indication of what would or could happen if OS X ever had the target appeal of Windows.
hmm... this sounds MUCH worse than that DNS problem. it is a Vista vulnerability that theoretically can't be fixed because it is inherent to the architecture of Vista.
Did you guys notice that this was patched?
I heard the day it was patched. What's your point lol?
As for Windows. I would never have called Microsoft security minded, but the last few years I feel they're fighting back (often at the user's expense). Not that I use it or follow it much.
I know one thing: and that is that the number one thing about a product being secure isn't even market-share, it is effort and care. Firefox has about a quarter the market-share of IE or more. You do not want to see the day that OS X has a quarter of the market share of Windows. If Apple weren't to change how they treat security issues, they would probably be sued for negligence 157 times.