Path: csiph.com!v102.xanadu-bbs.net!xanadu-bbs.net!feeder.erje.net!1.eu.feeder.erje.net!news-1.dfn.de!news.dfn.de!fu-berlin.de!uni-berlin.de!individual.net!not-for-mail
From: Jolly Roger <jollyroger@pobox.com>
Newsgroups: comp.sys.mac.system
Subject: Re: OS X security tools - trivial to bypass?
Date: 27 Apr 2015 16:34:15 GMT
Organization: People for the Ethical Treatment of Pirates
Lines: 27
Message-ID: <cq76o7F9a10U1@mid.individual.net>
References: <VqKdnStAd-tD2qPInZ2dnUU7-VOdnZ2d@giganews.com> <cq73svF8jgcU1@mid.individual.net> <LIWdneQ7xcVYwKPInZ2dnUU7-SWdnZ2d@giganews.com>
X-Trace: individual.net JnvmLY0Tgukx6bphHXJY4ANv7hemifrm28Sv7Ou5ZLN3EEBt1m
Cancel-Lock: sha1:P007UEFVsMBeoEsE3PbffBfeiYY=
X-Face: _.g>n!a$f3/H3jA]>9pN55*5<`}Tud57>1<n@LQ!aZ7vLO_nWbK~@T'XIS0,oAJcU.qLM dk/j8Udo?O"o9B9Jyx+ez2:B<nx(k3EdHnTvB]'eoVaR495,Rv~/vPa[e^JI+^h5Zk*i`Q;ezqDW< ZFs6kmAJWZjOH\8[$$7jm,Ogw3C_%QM'|H6nygNGhhl+@}n30Nz(^vWo@h>Y%b|b-Y~()~\t,LZ3e up1/bO{=-)
User-Agent: slrn/1.0.1 (Darwin)
Xref: csiph.com comp.sys.mac.system:74341

On 2015-04-27, Alan Browne <alan.browne@freelunchvideotron.ca> wrote:
> On 2015-04-27 11:45, Jolly Roger wrote:
>>
>> My take:
>>
>> *yawn*
>
> That's too dismissive given the claims.  The issue isn't the running of 
> arbitrary code but how that code can be loaded and executed because of 
> defects in the security system.
>
> Don't dismiss this too quickly.

I'm not dismissing it, but it's certainly not anything to panic about
either - hence the *yawn*. And what you call "defects" may be deliberate
design choices, where Apple has implemented a base-level set of
functionality with plans to add more functionality later on. 

I'm betting a few years from now, if we were to revisit this topic in
depth, we'll find that Apple has done just that, which is not at all
uncommon for Apple.

-- 
E-mail sent to this address may be devoured by my ravenous SPAM filter.
I often ignore posts from Google. Use a real news client instead.

JR