Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.sys.mac.system > #74008

Re: Hidden backdoor API to root privileges in Apple OS X

Show all headers | View raw

On Thu, 23 Apr 2015 12:10:19 +1200
dempson@actrix.gen.nz (David Empson) wrote:

> Malcious software would need some other vulnerability to attack the
> computer remotely, or a trojan horse or similar to trick the user into
> running it (at which point it is running locally, and this exploit is
> applicable).

the key unlocks the door but the door's not open because you didn't
turn the knob

> I certainly don't have a disdain for users. I'm frequently helping
> them.

you said if the user's not smart enough
the user is at the mercy of the hardware/software
how smart does the user need to be
the programmer is not smart enough and they should remind themselves
constantly

the user disdain runs deep
but call them not smart enough if that suits you

> That was more of a sad comment on the reality of the situation - too
> many people have been tricked into opening malcious attachments, or
> downloading executable code from fake web sites, or believing scam
> callers claiming their computers are infected and asking for remote
> control.

taking advantage of people's good will is wrong
users are enticed and they don't know better
sure it helps to educate but really the current reality is that
software and OSs especially need to be rethought and redone

> I can only hope that if that does happen to someone, the damage is not
> serious, they learn from the experience, and are more careful in
> future.

hope's no good and is a bad habit
being careful presumes knowledge and discernment
that's hard with computers due to complexity and the fact that it's
hard to tell good from bad

not like if you go into a sketchy downtown where you know quickly

> Nobody seems to achieved that yet, without sacrificing all external
> connectivity.

the right "nobody" hasn't care enough

> Turning those off makes too many web sites unusable. Keeping your web
> browser up to date should minimise the risk of those as potential
> attack vectors. In any case, they are nowhere near as dangerous as an
> outdated version of Flash or Java as a web plugin.

it should but doesn't
how many times has flash updated in the past 6 mos. and why does
it even still exist

sad indeed and no blame on the user










 

Back to comp.sys.mac.system | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Hidden backdoor API to root privileges in Apple OS X tmo1138 <tmo1138@tmo1138.org> - 2015-04-09 21:14 -0700
  Re: Hidden backdoor API to root privileges in Apple OS X Oregonian Haruspex <bob_davis_retired@yahoo.com> - 2015-04-09 23:29 -0700
  Re: Hidden backdoor API to root privileges in Apple OS X billy@MIX.COM - 2015-04-10 08:47 +0000
    Re: Hidden backdoor API to root privileges in Apple OS X dempson@actrix.gen.nz (David Empson) - 2015-04-19 18:05 +1200
      Re: Hidden backdoor API to root privileges in Apple OS X Tim Streater <timstreater@greenbee.net> - 2015-04-19 10:07 +0100
        Re: Hidden backdoor API to root privileges in Apple OS X Lewis <g.kreme@gmail.com.dontsendmecopies> - 2015-04-19 09:56 +0000
        Re: Hidden backdoor API to root privileges in Apple OS X dempson@actrix.gen.nz (David Empson) - 2015-04-19 22:02 +1200
          Re: Hidden backdoor API to root privileges in Apple OS X Tim Streater <timstreater@greenbee.net> - 2015-04-19 13:11 +0100
          Re: Hidden backdoor API to root privileges in Apple OS X Electric Comet <electric-comet@mail.invalid> - 2015-04-22 08:59 -0700
            Re: Hidden backdoor API to root privileges in Apple OS X Tim Streater <timstreater@greenbee.net> - 2015-04-22 17:33 +0100
              Re: Hidden backdoor API to root privileges in Apple OS X Electric Comet <electric-comet@mail.invalid> - 2015-04-22 09:40 -0700
            Re: Hidden backdoor API to root privileges in Apple OS X dempson@actrix.gen.nz (David Empson) - 2015-04-23 12:10 +1200
              Re: Hidden backdoor API to root privileges in Apple OS X Electric Comet <electric-comet@mail.invalid> - 2015-04-24 13:42 -0700
                Re: Hidden backdoor API to root privileges in Apple OS X dempson@actrix.gen.nz (David Empson) - 2015-04-25 12:50 +1200
                Re: Hidden backdoor API to root privileges in Apple OS X Electric Comet <electric-comet@mail.invalid> - 2015-04-27 09:36 -0700
  Re: Hidden backdoor API to root privileges in Apple OS X Electric Comet <electric-comet@mail.invalid> - 2015-04-22 09:01 -0700

csiph-web