Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.sys.mac.system > #69223

Re: Linus rant on HFS+

Path csiph.com!v102.xanadu-bbs.net!xanadu-bbs.net!feeder.erje.net!eu.feeder.erje.net!fu-berlin.de!uni-berlin.de!individual.net!not-for-mail
From Jolly Roger <jollyroger@pobox.com>
Newsgroups comp.sys.mac.system
Subject Re: Linus rant on HFS+
Date 28 Jan 2015 15:01:59 GMT
Organization People for the Ethical Treatment of Pirates
Lines 37
Message-ID <cisbv6F5fp8U6@mid.individual.net> (permalink)
References <54c59c6b$0$25069$c3e8da3$92d0a893@news.astraweb.com> <cilld1Fd18aU3@mid.individual.net> <mcmurtrie-6A1E6A.20521727012015@news.sonic.net> <ma9r6m$lne$3@dont-email.me>
X-Trace individual.net +U6hODUpvxZcLIgnPEOjiwMQsiMIkq1ns9GxvX3sdVfHG3T/vB
Cancel-Lock sha1:PBdGPxZxnyQX1SJKrzjdwbSmhLE=
X-Face _.g>n!a$f3/H3jA]>9pN55*5<`}Tud57>1<n@LQ!aZ7vLO_nWbK~@T'XIS0,oAJcU.qLM dk/j8Udo?O"o9B9Jyx+ez2:B<nx(k3EdHnTvB]'eoVaR495,Rv~/vPa[e^JI+^h5Zk*i`Q;ezqDW< ZFs6kmAJWZjOH\8[$$7jm,Ogw3C_%QM'|H6nygNGhhl+@}n30Nz(^vWo@h>Y%b|b-Y~()~\t,LZ3e up1/bO{=-)
User-Agent slrn/1.0.1 (Darwin)
Xref csiph.com comp.sys.mac.system:69223

Show key headers only | View raw

On 2015-01-28, Electric Comet <electric-comet@mail.invalid> wrote:
> On Tue, 27 Jan 2015 20:52:18 -0800
> Kevin McMurtrie <mcmurtrie@pixelmemory.us> wrote:
>
>> You don't see any problems because you're totally incapable of 
>> researching, or even believing that MacOS bugs exist.
>
> I dunno "Jolly Roger" just posted the info about yoazemite 10.10.2
> and the long list of CVEs. (wow just now apple are fixing the bash
> vulns)

He's trolling, and lying about me. Lame.
 
>> Back when Apple made servers, case insensitivity and numerous unicode 
>> bugs were found to an actively exploited vulnerability.  Most servers 
>> have a blacklist for files that may contain sensitive data in a
>> public access area.  For example, .htaccess, WEB-INF, .git, .svn, and 
>> .DS_Store.  Reading or writing those paths with a different case was
>> all it took to bypass blacklists.  Even when blacklists were made
>> case insensitive, unicode bugs in HFS+ could be exploited with the
>> same outcome.
>
> what a mess, will it only get worse

If anything it will get better, as Apple does make improvements over
time.

> you'd think with 18 Billion profit apple could spend a few to fix some

It boils down to business decisions. How many Mac users do you think are
effected by this issue? I doubt many.

-- 
E-mail sent to this address may be devoured by my ravenous SPAM filter.
I often ignore posts from Google. Use a real news client instead.

JR

Back to comp.sys.mac.system | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Linus rant on HFS+ JF Mezei <jfmezei.spamnot@vaxination.ca> - 2015-01-25 20:46 -0500
  Re: Linus rant on HFS+ Jolly Roger <jollyroger@pobox.com> - 2015-01-26 02:00 +0000
    Re: Linus rant on HFS+ JF Mezei <jfmezei.spamnot@vaxination.ca> - 2015-01-26 12:30 -0500
      Re: Linus rant on HFS+ Jolly Roger <jollyroger@pobox.com> - 2015-01-26 17:40 +0000
      Re: Linus rant on HFS+ Jolly Roger <jollyroger@pobox.com> - 2015-01-26 17:45 +0000
        Re: Linus rant on HFS+ Jolly Roger <jollyroger@pobox.com> - 2015-01-26 17:47 +0000
    Re: Linus rant on HFS+ Kevin McMurtrie <mcmurtrie@pixelmemory.us> - 2015-01-27 20:52 -0800
      Re: Linus rant on HFS+ Electric Comet <electric-comet@mail.invalid> - 2015-01-27 21:11 -0800
        Re: Linus rant on HFS+ Jolly Roger <jollyroger@pobox.com> - 2015-01-28 15:01 +0000
          Re: Linus rant on HFS+ Joanna Shuttleworth <js@example.com> - 2015-01-29 08:14 +0000
            Re: Linus rant on HFS+ Jolly Roger <jollyroger@pobox.com> - 2015-01-29 15:17 +0000
      Re: Linus rant on HFS+ Alan Baker <alangbaker@telus.net> - 2015-01-27 22:39 -0800
      Re: Linus rant on HFS+ Jolly Roger <jollyroger@pobox.com> - 2015-01-28 14:59 +0000
      Re: Linus rant on HFS+ Davoud <star@sky.net> - 2015-01-28 12:21 -0500
        Re: Linus rant on HFS+ Jolly Roger <jollyroger@pobox.com> - 2015-01-28 17:32 +0000
  Re: Linus rant on HFS+ nospam <nospam@nospam.invalid> - 2015-01-25 21:13 -0500
  Re: Linus rant on HFS+ Jerry Bishop <jerry.bishop@nowhere.nohow.com> - 2015-01-26 14:52 -0500
    Re: Linus rant on HFS+ Your Name <YourName@YourISP.com> - 2015-01-27 09:27 +1300
    Re: Linus rant on HFS+ Davoud <star@sky.net> - 2015-01-26 15:36 -0500
      Re: Linus rant on HFS+ Electric Comet <electric-comet@mail.invalid> - 2015-01-28 13:45 -0800
        Re: Linus rant on HFS+ Alan Baker <alangbaker@telus.net> - 2015-01-28 13:52 -0800
        Re: Linus rant on HFS+ Huge <Huge@nowhere.much.invalid> - 2015-01-28 22:14 +0000
          Re: Linus rant on HFS+ Electric Comet <electric-comet@mail.invalid> - 2015-01-28 18:53 -0800
            Re: Linus rant on HFS+ Huge <Huge@nowhere.much.invalid> - 2015-01-29 10:47 +0000
    Re: Linus rant on HFS+ Electric Comet <electric-comet@mail.invalid> - 2015-01-26 16:38 -0800

csiph-web