| 'Apple Bugs' tussle gets snippy |
|
| by Stephen Withers | |
| Tuesday, 09 January 2007 | |
|
Day 8 of the Month of Apple Bugs brings what appears to be a personal attack on one of the team that has voluntarily taken on the task of providing interim fixes.
Featured Whitepaper
5 Best Practices for Smartphone Support
Using Unsanity's Application Enhancer for the proof of concept is an interesting choice. Not only is it the software used by the MoAB Fixes team to deliver several of its patches, but Rosyna Keller - a tech support person at Unsanity - is a member of MoAB Fixes and spoke out against the suggested coordination between the two groups. In a blog posting subtitled "The Month of Trolly Trolls and Trolli Gummy Bears" on Unsanity's site, Keller suggested the Month of Apple Bugs was "being put on by someone with a severe need for attention." In turn, today's MoAB disclosure by LMH and Johnny Pwnerseed states "If the developers [of Application Enhancer] have left a binary executed with root privileges at an user-writable path, they are certainly capable of doing other non-sense" and refers to "a jackass third-party which has no security background at all and spends more time flaming and insulting on a delusional IRC channel than on real work". The workaround suggested by LMH and Johnny Pwnerseed is to "Stay away from Application Enhancer", however that would appear to leave the potential for similar exploits of other applications that put components into /Library/Frameworks. MoAB Fixes offers a more general workaround that changes to privileges on that folder. That change is easily reversed, but no guidance is given about when that might be necessary, and in any case repairing permissions will reset the privileges to their original state.{moscomment} |
| < Next story in category | Previous story in the category > |
|---|






Tags




