main
Report a problem

Mac OS, Linux May Share a Windows Flaw

Slimy   on 13 October 2007 - 17:42 · 20 comments & 12125 views

Advertisement (Why?)
Dear fanboys, I would like to emphasize the presence of the word "may" in the title.

Microsoft Corporation recently announced plans to release a patch to reduce the risk of a new kind of Web-based security vulnerability, but security researchers say that other operating systems are probably at risk too. Nathan McFeters, a security researcher with Ernst & Young Global Limited, is one of the researchers who has been studying the problem most closely. He hopes to present more details on how Linux and Mac OS X may also be susceptible to what are known as Uniform Resource Identifier (URI) protocol handler flaws at the Toorcon hacking conference, being held next week in San Diego. Although McFeters admitted he had not yet found a way to run unauthorized code on Unix-based operating systems, he and his fellow researchers have discovered a number of issues that looked like they could be grounds for further research.

The problem McFeters and others have been researching over the past few months has to do with the URI protocol handling technology, used to launch programs from within Web browsers. Because any software developer can register their own application with the operating system, programs can be effectively launched within the browser without proper checks on the way they are being executed. Microsoft had originally said that it was up to software developers to make sure their programs check the links so that they don't include malicious code, but this week the software giant agreed to put some checks within the Windows operating system as well.

News source: PC World

Post a comment · Send to friend Comments · There are 20 additional comments
(1 reply) #1 Kreuger on 13 Oct 2007 - 17:45
Quote -
He hopes to present more details on how Linux and Mac OS X may also be susceptible to what are known as Uniform Resource Identifier (URI) protocol handler flaws at the Toorcon hacking conference, being held next week in San Diego.
That almost sounds like they dont know if it is and are looking for any way to say it is.
#1.1 LTD on 13 Oct 2007 - 22:04
After which they say this:

In an interview, McFeters said that he had not yet found a way to run unauthorized code on Unix-based operating systems . . .


Last edited by LTD on 13 Oct 2007 - 22:12
(1 reply) #2 Fubar on 13 Oct 2007 - 17:57
i lost intrested of this article at fanboy part , bet it was a good read anyway
#2.1 ecotrojan on 13 Oct 2007 - 20:31
Quote - (Fubar said @ #2)
i lost intrested of this article at fanboy part , bet it was a good read anyway


yup
same here

#3 QuarterSwede on 13 Oct 2007 - 18:15
Quote -
Dear fanboys, I would like to emphasize the presence of the word "may" in the title.

Hahaha, nice.

Otherwise a totally bogus and meaningless article until proven.
(1 reply) #4 Logizomechanophobic on 13 Oct 2007 - 21:44
... and in other news, Microsoft products *may* be vulnerable to hitherto unknown security threats. Probably.

Must be a slow week at Ernst & Young.
#4.1 LTD on 13 Oct 2007 - 21:58
good point

Last edited by LTD on 13 Oct 2007 - 22:12
#5 LTD on 13 Oct 2007 - 21:56
An interesting line from the article:

In an interview, McFeters said that he had not yet found a way to run unauthorized code on Unix-based operating systems, but that he and his fellow researchers had discovered a number of issues that looked like they could be grounds for further research.

Some of us fanboys have our reasons, believe me.


#6 jmmycrackcorn on 13 Oct 2007 - 22:50
So, this might possibly be grounds to begin further research, huh? Wow. Earth-shattering news there, PC World.
#7 bibutteryboy on 13 Oct 2007 - 22:53
Quote -
So, this might possibly be grounds to begin further research, huh? Wow. Earth-shattering news there, PC World.


Thenyou can also say the same for pasting it on the front page of Neowin
(1 reply) #8 sentio on 13 Oct 2007 - 23:22
Quote -
Dear fanboys, I would like to emphasize the presence of the word "may" in the title.


How very professional
#8.1 Mando on 15 Oct 2007 - 11:11
Quote - (sentio said @ #
Quote -
Dear fanboys, I would like to emphasize the presence of the word "may" in the title.


How very professional


+1 It was enough for me to not read the article (and im mainly a windows user) I always thought this kind of name tagging was frowned upon in Neowin.

what a t**t
#9 carmatic on 14 Oct 2007 - 00:53
so is this like, a common OS problem that affects windows, linux and mac, or is this an Internet problem with security implications for the OSes?
(4 replies) #10 Kojacked on 14 Oct 2007 - 05:10
I can't wait to see this one proven on Mac/Linux and return to this forum to hear the fanbois doing the backstroke with such classics as:

Quote -
There's no exploit in the wild for this on Mac/Linux so it doesn't count.

Quote -
I never have to use antivirus/antispyware software on my Mac/Linux box because they are better designed and much more secure than Windows.

Quote -
Vista sux.

Quote -
Microsoft is evil.


So damn predicable.

Here's a couple of my own headlines:

Quote -
Linux May Take the Desktop Market Lead from Microsoft.

Quote -
Apple May Increase It's Market Share Real Soon!

Quote -
Apple/Open Source Fanbois May Return to Reality


"May" works both ways fanbois.

Last edited by Kojacked on 14 Oct 2007 - 05:17
#10.1 ccuk on 14 Oct 2007 - 11:24
The power one has sat behind a keyboard...
#10.2 LTD on 14 Oct 2007 - 13:40
Your gibberish is taking up a lot of space . . .
#10.3 +Dakkaroth on 14 Oct 2007 - 20:38
Quote - (LTD said @ #10.2)
Your gibberish is taking up a lot of space . . .


So does yours, but I don't complain.
#10.4 black_death on 14 Oct 2007 - 22:36
Quote - (Dakkaroth said @ #10.3)
Quote - (LTD said @ #10.2)
Your gibberish is taking up a lot of space . . .


So does yours, but I don't complain.


Pwnt
#11 YaZoR on 14 Oct 2007 - 23:28
<---- Yes
.<---- No
^^
Pointless
#12 whocares78 on 17 Oct 2007 - 08:25
how about Everythign is vulnerable and nothign is secure, there is no "may" about that.

But yeah this article seems to have wsasted all our time.

Commenting has either been disabled on this article or you are not logged in. Click here to login or register, its free!

Note: Anonymous commenting is disabled in order to keep the quality of responses to a high standard.

Advertisement (Why?)