[Utilizer]

Not certain it’s worthy of your ping-list, but FYI just in case...

[Swordmaker]

The Apple GateKeeper vulnerability where a trusted developer, one with a Mac Developer Certification, could insert a malicious version of an Apple Library file into one of its Mac Application distributions to somehow also distribute malware that could then steal users' secret stuff, is still around despite Apple blacklisting some of the means that its discoverer showed how it could be done. Ignore that any such developer could be sued out of existence by both its customers and Apple for doing any such thing, the sky-is-falling crowd claim that it's possible a man-in-the-middle attacker could intercept someone downloading an honest developer's disk image, insert the malicious fake Apple library file, and then send it on its way . . . and that is enough of a worry for Apple to be flopping around in abject panic about this very obscure possibility. Uh, no, it isn't. The likelihood of this happening is so obscure as to be almost impossible. -- PING!

Obscure Apple vulnerability
Ping!

The latest Apple/Mac/iOS Pings can be found by searching Keyword "ApplePingList" on FreeRepublic's Search.

If you want on or off the Mac Ping List, Freepmail me

[Swordmaker]

Not certain it’s worthy of your ping-list, but FYI just in case...

It's worth a bit of attention. . . but this has never been seen in the wild because it is so difficult to accomplish, and then the business implications are so dire for a developer to do it which is about the only reasonable way one could think of for any reasonable way for it to work, it couldn't happen that way either.