Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.sys.mac.system > #69223

Re: Linus rant on HFS+

Show all headers | View raw

On 2015-01-28, Electric Comet <electric-comet@mail.invalid> wrote:
> On Tue, 27 Jan 2015 20:52:18 -0800
> Kevin McMurtrie <mcmurtrie@pixelmemory.us> wrote:
>
>> You don't see any problems because you're totally incapable of 
>> researching, or even believing that MacOS bugs exist.
>
> I dunno "Jolly Roger" just posted the info about yoazemite 10.10.2
> and the long list of CVEs. (wow just now apple are fixing the bash
> vulns)

He's trolling, and lying about me. Lame.
 
>> Back when Apple made servers, case insensitivity and numerous unicode 
>> bugs were found to an actively exploited vulnerability.  Most servers 
>> have a blacklist for files that may contain sensitive data in a
>> public access area.  For example, .htaccess, WEB-INF, .git, .svn, and 
>> .DS_Store.  Reading or writing those paths with a different case was
>> all it took to bypass blacklists.  Even when blacklists were made
>> case insensitive, unicode bugs in HFS+ could be exploited with the
>> same outcome.
>
> what a mess, will it only get worse

If anything it will get better, as Apple does make improvements over
time.

> you'd think with 18 Billion profit apple could spend a few to fix some

It boils down to business decisions. How many Mac users do you think are
effected by this issue? I doubt many.

-- 
E-mail sent to this address may be devoured by my ravenous SPAM filter.
I often ignore posts from Google. Use a real news client instead.

JR

Back to comp.sys.mac.system | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Linus rant on HFS+ JF Mezei <jfmezei.spamnot@vaxination.ca> - 2015-01-25 20:46 -0500
  Re: Linus rant on HFS+ Jolly Roger <jollyroger@pobox.com> - 2015-01-26 02:00 +0000
    Re: Linus rant on HFS+ JF Mezei <jfmezei.spamnot@vaxination.ca> - 2015-01-26 12:30 -0500
      Re: Linus rant on HFS+ Jolly Roger <jollyroger@pobox.com> - 2015-01-26 17:40 +0000
      Re: Linus rant on HFS+ Jolly Roger <jollyroger@pobox.com> - 2015-01-26 17:45 +0000
        Re: Linus rant on HFS+ Jolly Roger <jollyroger@pobox.com> - 2015-01-26 17:47 +0000
    Re: Linus rant on HFS+ Kevin McMurtrie <mcmurtrie@pixelmemory.us> - 2015-01-27 20:52 -0800
      Re: Linus rant on HFS+ Electric Comet <electric-comet@mail.invalid> - 2015-01-27 21:11 -0800
        Re: Linus rant on HFS+ Jolly Roger <jollyroger@pobox.com> - 2015-01-28 15:01 +0000
          Re: Linus rant on HFS+ Joanna Shuttleworth <js@example.com> - 2015-01-29 08:14 +0000
            Re: Linus rant on HFS+ Jolly Roger <jollyroger@pobox.com> - 2015-01-29 15:17 +0000
      Re: Linus rant on HFS+ Alan Baker <alangbaker@telus.net> - 2015-01-27 22:39 -0800
      Re: Linus rant on HFS+ Jolly Roger <jollyroger@pobox.com> - 2015-01-28 14:59 +0000
      Re: Linus rant on HFS+ Davoud <star@sky.net> - 2015-01-28 12:21 -0500
        Re: Linus rant on HFS+ Jolly Roger <jollyroger@pobox.com> - 2015-01-28 17:32 +0000
  Re: Linus rant on HFS+ nospam <nospam@nospam.invalid> - 2015-01-25 21:13 -0500
  Re: Linus rant on HFS+ Jerry Bishop <jerry.bishop@nowhere.nohow.com> - 2015-01-26 14:52 -0500
    Re: Linus rant on HFS+ Your Name <YourName@YourISP.com> - 2015-01-27 09:27 +1300
    Re: Linus rant on HFS+ Davoud <star@sky.net> - 2015-01-26 15:36 -0500
      Re: Linus rant on HFS+ Electric Comet <electric-comet@mail.invalid> - 2015-01-28 13:45 -0800
        Re: Linus rant on HFS+ Alan Baker <alangbaker@telus.net> - 2015-01-28 13:52 -0800
        Re: Linus rant on HFS+ Huge <Huge@nowhere.much.invalid> - 2015-01-28 22:14 +0000
          Re: Linus rant on HFS+ Electric Comet <electric-comet@mail.invalid> - 2015-01-28 18:53 -0800
            Re: Linus rant on HFS+ Huge <Huge@nowhere.much.invalid> - 2015-01-29 10:47 +0000
    Re: Linus rant on HFS+ Electric Comet <electric-comet@mail.invalid> - 2015-01-26 16:38 -0800

csiph-web