Apple Macbook pro and other wireless fixes



Do you remember the big bruhaha a month or so back about the “apple wireless vulnerability” that everybody picked apart because in the video taped demonstration they used a third party card…. EVEN though the demonstrators stated that the same vulnerability existed in Apple’s own driver some on the internet tore one reporter up over stating that because Apple denied being shown exploit code (slight semantic issue there…) Well… those driver vulnerabilities that must have not existed, were fixed today by Apple. Brian Krebs has the story, as well as incidents.org


What’s really interesting is that several remote code execution vulnerabilites are fixed in this update, but no credit is given to the company that presented the vulnerability, so it’s either “bad blood” over the issue or a matter of pride for Apple since they’ve not admitted the demonstrated vulnerability was actually in their driver. In fact…. according to the Security Fix post they (Apple) say…

“Basically, what happened is SecureWorks approached Apple with a potential flaw that they felt would affect the wireless drivers on Macs, but they didn’t supply us with any information to allow us to identify a specific problem. So we initiated our own internal product audit, and in the course of doing so found these flaws.”

–Update 10/1/06–

This is still an ongoing controversy. There definitely appears to be bad blood, it’ll continue to be interesting to follow this one.

Related Posts

Blog Traffic Exchange Related Posts
  • Apple Mac OS X updates There are several issues fixed by a bundle of updates for OS X (for 10.4 up to 10.4.6). The new release is 10.4.7 There are a number of issues fixed in addition to at least 3 security related problems. Incidents.org has more details. I know many Mac users feel the......
  • Another update on the 0day Explorer exploit Well, it looks like quite a bit took place while I was out on the "zero day exploit front". It looks as though there is another update at The Sans Institute. The first thing to notice is that they've raised their alert level to Yellow over the impending active exploitation......
  • VMWare's free VMPlayer One of the other things I had hoped to do this weekend was play around with the new VMWare player. VMware is a company that makes virtual machine software, the entry level pricing usually starting at $199 and going up from there. They've recently released a "Player" that can run......
Blog Traffic Exchange Related Websites
  • Ten Problems that Home Inspectors Find When you get your home inspected, any problems that are found mean that you have to fix them and get another inspection, at a greater cost to you. You can prepare to avoid that second inspection by learning what home inspectors consider to be the ten problems they most frequently......
  • Review of Drywall Pro Tips For Hanging and Finishing John Wagner's book on Drywall tips is incredibly useful and is well suited for beginners or those with a modicum of do it yourself experience. Experts probably won't get much out of it, but for its intended audience, it definitely hits all the right notes. Even if you're not planning......
  • Determining the Best Age to Start Social Security Many baby boomers are in the home stretch toward retirement and thinking about what will be the best age for them to claim Social Security retirement benefits.  I have already written about this issue from several different angles but I thought it would make sense to pull all of that......
www.pdf24.org    Send article as PDF   

Similar Posts


See what happened this day in history from either BBC Wikipedia
Search:
Keywords:
Amazon Logo

Comments are closed.


Switch to our mobile site