h00ligan
Apr 20, 10:53 AM
Is there a windows app for reading the data... Or cydia?
munkery
Mar 22, 08:35 PM
Kernel
A privilege checking issue existed in the i386_set_ldt system call's handling of call gates. A local user may be able to execute arbitrary code with system privileges. This issue is addressed by disallowing creation of call gate entries via i386_set_ldt().
Generating a successful malware from that list of vulnerabilities has two requirements:
1) A remote arbitrary code execution vulnerability has to be linked to a local privilege escalation vulnerability.
2) Those vulnerabilities that can be linked together must both be exploitable. Not all vulnerabilities are exploitable.
The only local privilege escalation vulnerability in that update is shown above. To be linked to a remote vulnerability to create a successful malware requires the following:
1) The call function must be used by a process that also has an remote vulnerability so that the vulns can be linked together to install a payload, such as rootkit. It is likely that not all processes will use that call function. Also, that call function is for 32-bit processes and most client side software in Mac OS X that may contain a remote exploit are 64-bit processes.
2) The two vulnerabilities have to be reliably exploitable once linked together as well as being reliably exploitable independently so that they can actually be linked together. Again, not all vulnerabilities are exploitable.
Linking together remote and local exploits is more difficult in Mac OS X than Windows. This is because Windows has far more local privilege escalation exploits than Mac OS X. Another factor is that the different levels of Windows are less insulated from each other than the different levels of Mac OS X. A common method to achieve privilege escalation in Windows is by manipulating registry values.
http://www.exploit-db.com/bypassing-uac-with-user-privilege-under-windows-vista7-mirror/ -> outlines how to exploit win32k.sys vulnerabilities by manipulating registry values.
http://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=win32k -> list of win32k.sys vulnerabilities.
A privilege checking issue existed in the i386_set_ldt system call's handling of call gates. A local user may be able to execute arbitrary code with system privileges. This issue is addressed by disallowing creation of call gate entries via i386_set_ldt().
Generating a successful malware from that list of vulnerabilities has two requirements:
1) A remote arbitrary code execution vulnerability has to be linked to a local privilege escalation vulnerability.
2) Those vulnerabilities that can be linked together must both be exploitable. Not all vulnerabilities are exploitable.
The only local privilege escalation vulnerability in that update is shown above. To be linked to a remote vulnerability to create a successful malware requires the following:
1) The call function must be used by a process that also has an remote vulnerability so that the vulns can be linked together to install a payload, such as rootkit. It is likely that not all processes will use that call function. Also, that call function is for 32-bit processes and most client side software in Mac OS X that may contain a remote exploit are 64-bit processes.
2) The two vulnerabilities have to be reliably exploitable once linked together as well as being reliably exploitable independently so that they can actually be linked together. Again, not all vulnerabilities are exploitable.
Linking together remote and local exploits is more difficult in Mac OS X than Windows. This is because Windows has far more local privilege escalation exploits than Mac OS X. Another factor is that the different levels of Windows are less insulated from each other than the different levels of Mac OS X. A common method to achieve privilege escalation in Windows is by manipulating registry values.
http://www.exploit-db.com/bypassing-uac-with-user-privilege-under-windows-vista7-mirror/ -> outlines how to exploit win32k.sys vulnerabilities by manipulating registry values.
http://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=win32k -> list of win32k.sys vulnerabilities.
ouimetnick
Apr 4, 12:00 PM
Non issue. Just avoid robbing a store.
-Steve
Sent from my iPhone
:D
If someone wants to commit a crime. Then I think there rights should be gone. If they don't want to get shot or arrested, then act like a normal person.
Simple as that.
-Steve
Sent from my iPhone
:D
If someone wants to commit a crime. Then I think there rights should be gone. If they don't want to get shot or arrested, then act like a normal person.
Simple as that.
sinsin07
Mar 23, 05:08 PM
Drunk driver checkpoints are the biggest law enforcement scam being perpetrated on the public at large. These checkpoints do no better than roving patrols but cops do them because they can hassle the public without probable cause and bust them for other minor infractions. They also more likely to have them in poor neighborhoods where people may be late paying their insurance or vehicle fees. They make big money from impounding poor people's cars.
They pad the bottom line of the Law Enforcement Industrial Complex and so that's why they have them. It has NOTHING to do with justice.
LOL You sound bitter. How many times have you been busted?
They pad the bottom line of the Law Enforcement Industrial Complex and so that's why they have them. It has NOTHING to do with justice.
LOL You sound bitter. How many times have you been busted?
miller218
Aug 28, 08:24 PM
of course that would be useful and by all means wait another year if you must, but personally i'd rather just buy now and then upgrade later as if it's really that amazing then the sockets are still compatable and an easy upgrade.
Well, you won't be upgrading laptops because the chip is soldered in
I'm sure there isn't a slot to put the flash memory in
Your old chipset won't support it
It all comes down to if you NEED it.
Well, you won't be upgrading laptops because the chip is soldered in
I'm sure there isn't a slot to put the flash memory in
Your old chipset won't support it
It all comes down to if you NEED it.
deputy_doofy
Sep 14, 08:24 AM
Is there any chance that they'll release the MBPs here?
Funny how we're all looking for that same glimmer of hope. :)
If nothing else, 9-24 is extremely close to 9-27 - the date on which Dell claims to be shipping their (Merom) Core 2's.
Signs look good, but by now, I'm not getting my hopes up.
Funny how we're all looking for that same glimmer of hope. :)
If nothing else, 9-24 is extremely close to 9-27 - the date on which Dell claims to be shipping their (Merom) Core 2's.
Signs look good, but by now, I'm not getting my hopes up.
RMo
Mar 30, 12:17 PM
To those bitching a few threads back about no jobs - well, at least the lawyers and linguists get a job.
This is a bigger deal than people realize: somebody EMPLOYED a linguist! Unfortunately, he has a Ph.D. in English (linguistics concentration), not linguistics itself, so I'm not really sure it counts.
I have to say, I kind of agree with Microsoft on this, much as I like Apple, but I'm interested to see how this plays out.
This is a bigger deal than people realize: somebody EMPLOYED a linguist! Unfortunately, he has a Ph.D. in English (linguistics concentration), not linguistics itself, so I'm not really sure it counts.
I have to say, I kind of agree with Microsoft on this, much as I like Apple, but I'm interested to see how this plays out.
kurtsayin
Oct 12, 11:14 PM
It makes me so happy to know that there are still plenty of stupid people in the world.
Thank you
LOL me too! What is so stupid about solving the problem with total success following my logic? Just because people are not going to follow my advice, does not mean that is somehow sophomoric.
Thank you
LOL me too! What is so stupid about solving the problem with total success following my logic? Just because people are not going to follow my advice, does not mean that is somehow sophomoric.
One Bad Duck
Sep 17, 04:49 PM
OK, so if the apple phone is coming (I bet apple are going to call it anything but iphone) it will certainly rock the boat in the market, however there is one thing the ipod is good for that a cellphone will never be able to reach.
I was thinking the other day as I boarded my flight if all ipods became cellphones we would cease to be able to use them on planes, which is probably not much for some people but if you have one device that handles everything then you are inevitably going to get on a plane with it.
I think i might sugest to apple to put them ahead of the rest of some way of disabling the phone part of the "Nano + Phone" or whatever it looks like so it wont bring the plane down as one listens to one's own trippin hip hop mixin vibes.
what d'you reckon guys?
-1BadDuk-
I was thinking the other day as I boarded my flight if all ipods became cellphones we would cease to be able to use them on planes, which is probably not much for some people but if you have one device that handles everything then you are inevitably going to get on a plane with it.
I think i might sugest to apple to put them ahead of the rest of some way of disabling the phone part of the "Nano + Phone" or whatever it looks like so it wont bring the plane down as one listens to one's own trippin hip hop mixin vibes.
what d'you reckon guys?
-1BadDuk-
vitaboy
Sep 11, 08:27 PM
It's news like this that makes you realize, thank God Apple switched to Intel when it did!
I mean, imagine where we'd be if Steve Jobs didn't have the forsight to develop an Intel version of OS X from the very beginning, 6 years ago?
We'd be stuck with IBM still trying to put out a 3 GHz G5, and notebooks would still be mired in G4 land.
It makes you shudder when you think about what might have been....
But the reality is, Macs are going to be incredibly kick butt scream machines by the time Macworld 2007 rolls around. 2007 looks like it's definitely going to be the year of the Mac!
I mean, imagine where we'd be if Steve Jobs didn't have the forsight to develop an Intel version of OS X from the very beginning, 6 years ago?
We'd be stuck with IBM still trying to put out a 3 GHz G5, and notebooks would still be mired in G4 land.
It makes you shudder when you think about what might have been....
But the reality is, Macs are going to be incredibly kick butt scream machines by the time Macworld 2007 rolls around. 2007 looks like it's definitely going to be the year of the Mac!
mozmac
Sep 14, 08:33 AM
Apple has been stockpiling TONS of great products for the past six months and now we are going to see a barrage of releases. I for one welcome said releases. I really hope they bring out the MBPs.
*LTD*
Apr 30, 03:14 PM
Why do they want OS X users to feel as if we were on an iPad!!!???
If I wanted/needed one, I'd buy one. What the hell !!!???????:mad::mad::mad::mad:
Evolution of the "Operating System."
It has to happen sometime and in some form.
Apple is doing it. if you have any better ideas that *will* raise the bar and represent the Gold Standard for the rest of the industry, please let Apple know. They might be hiring.
If I wanted/needed one, I'd buy one. What the hell !!!???????:mad::mad::mad::mad:
Evolution of the "Operating System."
It has to happen sometime and in some form.
Apple is doing it. if you have any better ideas that *will* raise the bar and represent the Gold Standard for the rest of the industry, please let Apple know. They might be hiring.
DJMastaWes
Aug 29, 07:34 AM
C2D MBPs available for ordering now!
Lol.
Store is still up, i don't think today is the day.
Lol.
Store is still up, i don't think today is the day.
ksgant
Mar 22, 02:47 PM
I'm waiting for the refresh of the Mac Mini myself. We're set for around the middle of May to get the tax refund for our state returns around then and that would be a perfect time for them to come out with the refresh.
cwt1nospam
Mar 23, 06:18 PM
If you cannot "argue" based on all the evidence but just conveniently ignore anything that does not support your argument while attacking with anything that does and then pretending everyone else doesn't exist you've then proven you are not worth conversing with and thus my lack of replies to you.
Are you talking to yourself? You've consistently argued that Mac users are complacent and need to "protect" themselves, presumably by using AV software. We've consistently pointed out that AV software offers no advantage to Mac users, to which you resort to the same tired tactic used by shills for the AV industry since OS X was first introduced: you claim that the sky will fall soon and we'll be sorry. :rolleyes:
Let's take a look at what you need to ignore to do that:
April 26, 2011 4 new Android
oost mobile android phones.
new oost mobile android
oost mobile android phones.
Reacent Post
Are you talking to yourself? You've consistently argued that Mac users are complacent and need to "protect" themselves, presumably by using AV software. We've consistently pointed out that AV software offers no advantage to Mac users, to which you resort to the same tired tactic used by shills for the AV industry since OS X was first introduced: you claim that the sky will fall soon and we'll be sorry. :rolleyes:
Let's take a look at what you need to ignore to do that:
Clive At Five
Sep 19, 02:08 PM
As stated by others already, this bodes very well for Apple signing other studios onto the plan. I would not be surprised one bit if we see it by the end of the month, even.
-Clive
-Clive
nick9191
Apr 14, 03:35 PM
Why doesn't Intel just not support USB 3 and allow Thunderbolt to be used on other manufacturers chipsets? I mean I'm all for competition, but if one port is obviously superior but could potentially fail due to lack of adoption..
Manic Mouse
Sep 10, 05:28 AM
ya, there really appears to be no space for the Conroe chip in Apple's lineup... at least with the decisions they've made so far in updating the iMac to Merom.
arn
A mid-tower between the Mini and Pro seems to be the only possible home for Conroe. And, even though I would love to buy one, I'm not sure if Apple really want to release such a machine.
You never know though, we could be in for a nice surprise sometime soon.
arn
A mid-tower between the Mini and Pro seems to be the only possible home for Conroe. And, even though I would love to buy one, I'm not sure if Apple really want to release such a machine.
You never know though, we could be in for a nice surprise sometime soon.
cr2sh
Sep 5, 01:34 PM
Hah... this is so funny.
Apple sends out invites that seem to indicate a moviestore, rumors abound about new nanos... and what do the forums turn into:
"I hope they release a phone."
"New macbooks please!"
"Apple DVR!"
:confused: :o
Where do they come up with this stuff?
Apple sends out invites that seem to indicate a moviestore, rumors abound about new nanos... and what do the forums turn into:
"I hope they release a phone."
"New macbooks please!"
"Apple DVR!"
:confused: :o
Where do they come up with this stuff?
PaulSorensen
Mar 29, 01:59 PM
no one uses windows phones....and for a good reason too...it sucks, it sucks, oh and it sucks....
That's three good reasons
That's three good reasons
Penfold2711
Apr 11, 05:37 AM
You can bet they are working on a new Firmware/Update to close this loophole Ole Stevie boy will not be a happy bunny today
mi5moav
Sep 14, 09:50 AM
I'm sure it's just an update to aperture along with a new aluminium skinned Apple video camera with 1/3 CCD and 100G HD. The future of video recording is on us and apple more than anyone knows about digital video. Though I'm realing hoping some sort of Leica/Zeiss/Apple announcement.
donlphi
Sep 12, 02:40 PM
Err, can someone please explain what the fascination is over "gapless playback"?:o
<pretty please>
As of now, If I rip my Pink Floyd Dark Side of the Moon Album onto iTunes and put it in my iPOD, there are little gaps in between songs. If you listen to the album on CD, the tracks change, but there are no gaps, one song goes into the next.
The same could be said for other music, classical music that is multiple movements, but THROUGH composed might have track changes, but lead from one section to the next.
Kind of a small thing, but a good thing none the less.
Hooray!!!
<pretty please>
As of now, If I rip my Pink Floyd Dark Side of the Moon Album onto iTunes and put it in my iPOD, there are little gaps in between songs. If you listen to the album on CD, the tracks change, but there are no gaps, one song goes into the next.
The same could be said for other music, classical music that is multiple movements, but THROUGH composed might have track changes, but lead from one section to the next.
Kind of a small thing, but a good thing none the less.
Hooray!!!
MacVault
Sep 19, 03:57 PM
This is great news, however, I still have a hard time talking myself into paying $10 to $15 for a DRM-"infected" movie file.
1) I cannot sell it or give it away as a gift.
2) I can't share it with a friend.
3) Video quality is not that great.
4) It has no special bonus features as does a DVD.
5) etc.
I think there needs to be a big price drop AND/OR some type of subscription model for this movie download stuff. Why pay that much $$ for something I'll watch only once or twice???!!!
1) I cannot sell it or give it away as a gift.
2) I can't share it with a friend.
3) Video quality is not that great.
4) It has no special bonus features as does a DVD.
5) etc.
I think there needs to be a big price drop AND/OR some type of subscription model for this movie download stuff. Why pay that much $$ for something I'll watch only once or twice???!!!
0 comments:
Post a Comment