[central_va]

So without root password how do you install anything? I think this is a hack on the browsers not he OS. I didn’t read the links so I am not sure.

[proxy_user]

Presumably, the dynamic linker runs SUID root itself, or it couldn’t write to other SUID root files.

That is why you have to be very careful coding SUID root utility functions. The history of Unix is full of these sorts of mistakes.

[Jonty30]

I can stop them. I haven’t bought a MacBook, so they are stopped.

[El Cid]

Junkware is useless software that doesn’t directly damage a computer, but doesn’t offer any clear benefits to its user.

Hmmm... sounds like a description of 70+% of our Government workers...

[conservatism_IS_compassion]

Ping.

[MeshugeMikey]

THIS JUST IN

federal prisoner hilary clinton now blames Crapware for her.....Email server hard drive crash!!

[ImJustAnotherOkie]

Sounds like Yosemite only.

More Apple half assed software upgades? No wonder their stock is tanking.

[Swordmaker]

It doesn't rain but it pours. . . DAMN! A vulnerability in the "way Apple OS X version 10.10 logs software errors and can be used by hackers to forcibly install software on MacBooks" (this should apply to iMacs as well — Swordmaker), according to the article. — PING!

Apple Security Ping!

If you want on or off the Mac Ping List, Freepmail me.

[Sergio]

Tech bkmk

[JimRed]

Execute hackers. Or just send them to prison with the general population. No white collar Camp Cupcake.

[TomGuy]

Macbook malware.

{snicker}

[NonLinear]

Can’t be true. There ARE no Apple/Mac viruses or exploits. I read it here all the time.

[BereanBrain]

In other news, Windows 10 IS MALWARE, no need to install anything!

[dennisw]

Apple has been in a death spiral every since Saint Steve left this earthly plane

[Swordmaker]

IMPORTANT 3rd PARTY SECURITY PATCH for OS X.10 Yosemite users ONLY!

A patch that protects OS X.10 installs from this vulnerability has been prepared by Stefan Esser, the Security Researcher who discovered the vulnerability and the exploits in the wild. This patch is merely a stopgap until Apple sends out an official fix at some future time. This patch will prevent the exploit from working.

SUID Guard Patch Software DMG

Download this (it is signed with an official Certificate so it will be safe) and extract the DMG, and click on the installer package. A restart will be required for it to protect your at risk files.

This patch is ONLY for OS X.10 Yosemite! Do not run it on earlier versions of OS X.

SUPPLEMENTAL APPLE OS X.10
SECURITY PING!

I have installed this patch and so far found no problems. — Swordmaker

If you want on or off the Mac Ping List, Freepmail me.

[Mark17]

Bump