[for-q-clinton]

Wow this sounds really nasty. But Apple will eventually patch this massive security hole which allows hackers to get admin access to your Mac without being prompted for admin rights permission.

Swordmaker...what do you advise your ping list to do?

1) Stop using OS X until it's patched 2) Unplug all external devices until it's patched 3) Boot to Windows 10 4) Get Malwarebytes to detect malware on OSX 5) Don't worry about it because security isn't a big deal

[for-q-clinton]

ping

[Ghost of SVR4]

6) Grab a linux distro.

[Red Badger]

Still, it’s probably best not to install anything from untrusted sources.

Like Apple?....................

[kevkrom]

Why you shouldn't freak out about this week's scary-sounding Mac exploits

Short version: yeah, these are serious flaws and should be patched ASAP, but as long as you're practicing good normal security and don't install untrusted applications, you won't be hit by them unless someone gains physical access to your machine and intentionally tries to inject it.

As always, I suggest (regardless of OS) that you have separate admin and user accounts and never be logged in as admin except to do those things you absolutely must be admin for. (Which are almost none.) Don't install software downloaded from the internet unless you have made sure you can trust it.

The big danger with the firmware bug is the infected devices. I would not plug a new or borrowed device into my Mac until this is patched.

[kevkrom]

allows hackers to get admin access to your Mac without being prompted for admin rights

Misleading. The exploit requires piggy-backing off some other payload, and that payload would require the user to affirmatively install as admin. The exception being infected firmware, which exploits a vulnerability in all x86 computers unless it's been patched.

[Swordmaker]

Another post on The Safari vulnerability. The discoverer of this vulnerability has published a temporar fix that prevents it from working on all the OS X.10 Yosemite Macs that it will effect. — PING!

SUIDGuardNG for OS X.10 Yosemite ONLY!

Apple Security
with Temporary FIX for OS X.10 Yosemite users
Ping!

If you want on or off the Mac Ping List, Freepmail me.