[litany_of_lies]

Just talked with Apple Tech Support. Two things:
- They are aware and will release a fix ASAP, but won't say when ASAP is.
- The problem is supposedly of much more concern to people operating wirelessly than with wired Ethernet.

[general_re]

They are aware and will release a fix ASAP, but won't say when ASAP is.

According to this guy, their next monthly will have it. December. Dunno when in December that is, though. Maybe it'll be your Christmas present from Apple ;)

The problem is supposedly of much more concern to people operating wirelessly than with wired Ethernet.

Is there an echo in here? ;)

[glorgau]

Basically, if you are Airporting at a Starbucks with an Apple, somebody with the proper tool can "root" you and then do whatever the they want with your computer. But if you just turn off any network authorization services and don't use DHCP, you are fine. However, you probably won't be able to use the network :-)

IMO, This is because of Apple's legacy holdover from Next - NetInfo. They never truly integrated their underlying Users & Groups with the guts of the operating system. It's kind of an early 90's concept tack-on.

They held that piece of junk (NetInfo) over and never converted everything over to the BSD security (probably due to the demands of producing consumer level "friendliness"). Permissions are a mess all over the OS.

This is what happens when the marketing/management suits ignore engineering. Now that it is public, I'm sure they have a crack team of Indians working on the problem as we speak.

Signed - Bitter Ex-Apple Guy That Knows LDAP Intimitely. ;-)))

All that said, I'm still gonna use my Mac laptop with airport in public places. Better than using Windows.