An alleged “security researcher”, whose real name and credentials are still unknown, was allowed by the owner of a Mac mini to create his own account in an LDAP directory and given shell access. The “security researcher” then exploited an unpublished vulnerability (that he somehow knew about, even though it’s unpublished) to gain root access to the machine, which he then used to deface a web page. The “security researcher” hasn’t divulged what vulnerability he took advantage of, and he hasn’t divulged what process he used to deface the web page. The owner of the machine hasn’t revealed what OS version and patch level the Mac mini was running, nor what other modifications were made to the machine, if any. Specifics are totally lacking.
From these lacking facts, ZDnet decides that OS X is inherently insecure and can be hacked in 30 minutes. For whatever unfathomable reason, they want the Mac to be as insecure as possible to support some childish notion that, ha ha!, Mac users are just as bad off as the rest of us. To borrow some phrasing, the drive-by media has already come to the conclusion that the Mac is security swiss cheese that nobody has noticed yet, and it’s about to be avalanched with viruses and hack attacks. The evidence says otherwise, but the evidence doesn’t forward the action line of their story - that the Mac is about to get blasted. Only news that supports their preconceived conclusion is worth publishing.
Before I’m accused of having my head in the sand, I’m obliged to say that no operating system is invulnerable. Mac users know that. We don’t claim invulnerability, we claim greater resistance than others.
Two “viruses” that require the user to purposely download and execute malicious code, and one alleged hacker attack for which no specifics are available do not a crisis make.


My .Mac Web Gallery
Recent Comments