Getting the Update - There are three separate updates: one for Mac OS X, another for Java for Mac OS X, and a third for Safari 3.2 for Windows. One vulnerability, in the ClamAV package used by Mac OS X to filter viruses out of email, could allow a remote attacker to execute arbitrary code on the server (which is security-speak for “take over your server”).Īs with many Apple security updates, the fixes apply to a range of Apple software and open source tools that are included in Mac OS X, such as ClamAV, file sharing servers, and programming languages. This update also includes some important fixes for users of Mac OS X Server. Some of these vulnerabilities are remotely exploitable over the Web should you visit a malicious Web site. Other Fixes - Security Update 2009-001 also patches a mix of other security issues, including a few that potentially allow an attacker to run any code on your system, or escalate their rights to an administrative user (circumventing an important security feature of Mac OS X). The Safari fix is included in Security Update 2009-001 for Mac OS X users, and is available as a separate download for users of Safari on Windows. The nature of the flaw does appear to be straightforward, and his release of minimal information and a workaround likely resulted in reduced risk for Safari users. Mastenbrook stated he notified Apple six months before making aspects of the flaw public, and revealed the information out of concern that Apple was not patching the flaw and that the vulnerability would be easy for someone else to discover and exploit. Mastenbrook has now posted further information on his blog describing why he released his workaround before Apple issued a patch. Mastenbrook provided some initial workarounds to help users protect themselves that turned out to be ineffective, and then posted a more complex workaround that was both problematic for most users to implement, and sometimes resulted in Programmer Brian Mastenbrook initially disclosed the nature of this vulnerability on his blog without exposing the details (see my article “ Protect Yourself from the Safari RSS Vulnerability,” ). Safari RSS Fix - The most notable vulnerability patched (although not necessarily the most serious) is a flaw in how Safari handled links for RSS feeds that could allow an attacker to run arbitrary code on your system. Apple also released a separate security update for Java for Mac OS X, and a standalone update for Safari for Windows. A complete list of changes is found in the official security note on Apple’s support site. Security Update 2009-001 affects both Mac OS X client and server, and all users are advised to update their systems immediately. #1648: iPhone passcode thefts, Center Cam improves webcam eye contact, APFS Uncertainty PrincipleĪpple has released the first general Mac OS X security update of 2009, patching a series of serious vulnerabilities that could allow an attacker to take over your Mac.#1649: More LastPass breach details and 1Password switch, macOS screen saver problem, tvOS 16.3.3 fixes Siri Remote bug.#1650: Cloud storage changes for Box, Dropbox, Google Drive, and OneDrive quirky printing problem.#1651: Dealing with leading zeroes in spreadsheet data, removing ad tracking from ckbk.#1652: OS updates, DPReview shuttered, LucidLink cloud storage.The only drawbacks are that you can't make basic audio calls, and Chrome always has to be open to use Hangouts. It's got everything you need to easily communicate with friends, with the added bonus of some pretty cool video calling features. Hangouts is the perfect extension if you have a lot of contacts using the service. When making video calls, a larger window opens up, giving you access to all the apps and features associated with the video. ![]() ![]() The main window simply displays a list of your contacts and a search engine so that you can quickly look them up. The Hangouts interface is unobtrusive and minimalist in order to focus on what's most essential: chatting. When not in use, the window can be minimized to the notification area. Once installed, you can access Hangouts from Google Chrome in the right hand corner of the screen above the Windows task-bar. It integrates apps like YouTube and Google Drive, as well as sounds and visual effects, to let you have a little fun during calls. The videoconferencing feature allows you to make video calls with up to 10 people simultaneously, no matter which device they're connected on.
0 Comments
Leave a Reply. |