Path: csiph.com!v102.xanadu-bbs.net!xanadu-bbs.net!feeder.erje.net!eu.feeder.erje.net!fu-berlin.de!uni-berlin.de!individual.net!not-for-mail
From: Jolly Roger <jollyroger@pobox.com>
Newsgroups: comp.sys.mac.system
Subject: Re: Linus rant on HFS+
Date: 28 Jan 2015 15:01:59 GMT
Organization: People for the Ethical Treatment of Pirates
Lines: 37
Message-ID: <cisbv6F5fp8U6@mid.individual.net>
References: <54c59c6b$0$25069$c3e8da3$92d0a893@news.astraweb.com> <cilld1Fd18aU3@mid.individual.net> <mcmurtrie-6A1E6A.20521727012015@news.sonic.net> <ma9r6m$lne$3@dont-email.me>
X-Trace: individual.net +U6hODUpvxZcLIgnPEOjiwMQsiMIkq1ns9GxvX3sdVfHG3T/vB
Cancel-Lock: sha1:PBdGPxZxnyQX1SJKrzjdwbSmhLE=
X-Face: _.g>n!a$f3/H3jA]>9pN55*5<`}Tud57>1<n@LQ!aZ7vLO_nWbK~@T'XIS0,oAJcU.qLM dk/j8Udo?O"o9B9Jyx+ez2:B<nx(k3EdHnTvB]'eoVaR495,Rv~/vPa[e^JI+^h5Zk*i`Q;ezqDW< ZFs6kmAJWZjOH\8[$$7jm,Ogw3C_%QM'|H6nygNGhhl+@}n30Nz(^vWo@h>Y%b|b-Y~()~\t,LZ3e up1/bO{=-)
User-Agent: slrn/1.0.1 (Darwin)
Xref: csiph.com comp.sys.mac.system:69223

On 2015-01-28, Electric Comet <electric-comet@mail.invalid> wrote:
> On Tue, 27 Jan 2015 20:52:18 -0800
> Kevin McMurtrie <mcmurtrie@pixelmemory.us> wrote:
>
>> You don't see any problems because you're totally incapable of 
>> researching, or even believing that MacOS bugs exist.
>
> I dunno "Jolly Roger" just posted the info about yoazemite 10.10.2
> and the long list of CVEs. (wow just now apple are fixing the bash
> vulns)

He's trolling, and lying about me. Lame.
 
>> Back when Apple made servers, case insensitivity and numerous unicode 
>> bugs were found to an actively exploited vulnerability.  Most servers 
>> have a blacklist for files that may contain sensitive data in a
>> public access area.  For example, .htaccess, WEB-INF, .git, .svn, and 
>> .DS_Store.  Reading or writing those paths with a different case was
>> all it took to bypass blacklists.  Even when blacklists were made
>> case insensitive, unicode bugs in HFS+ could be exploited with the
>> same outcome.
>
> what a mess, will it only get worse

If anything it will get better, as Apple does make improvements over
time.

> you'd think with 18 Billion profit apple could spend a few to fix some

It boils down to business decisions. How many Mac users do you think are
effected by this issue? I doubt many.

-- 
E-mail sent to this address may be devoured by my ravenous SPAM filter.
I often ignore posts from Google. Use a real news client instead.

JR