Mac OS X – Epic Fail

changelog — Thu, 19 Jun 2008 12:16:04 +0000

While getting up to speed with Slashdot, I found an interesting article about a security breach on Mac OS X that allows user escalation through AppleScript.

Trying it on the terminal works, but, as they say, the user needs to have physical access to the machine. So, Patrício suggested trying to access through SSH to see if it works, and it did.

Slashdot member gombah99 posted a tip on how to neutralize it non-destructively:

cd /System/Library/CoreServices/RemoteManagement/
sudo tar -czf ARDAgent.app.gz ARDAgent.app
sudo chmod 600 ARDAgent.app.gz
sudo rm -r ARDAgent.app

Here’s to you, Apple Un^H^HSecurity Team!

Digital 9/11… or so they say

changelog — Tue, 27 May 2008 15:21:48 +0000

I just read the latest press release from the European Network and Information Security Agency alerting about a possible digital 9/11. All I can say is that I’m shocked on how these people are so narrow-minded.

Now, the biggest threats on this matter seem to be botnets, spam and computer viruses.

Guys, here’s a free tip: install Linux and switch to Google Apps. Works for me (TM)

A programmer's rants » Security

Mac OS X – Epic Fail

Digital 9/11… or so they say