Thread Tools
Old October 29, 2003, 16:40   #1
Asher
Apolytoners Hall of Fame
President of the OT
 
Asher's Avatar
 
Local Time: 05:31
Local Date: November 2, 2010
Join Date: Nov 1999
Location: Calgary, Alberta
Posts: 40,843
Slew of OS X vulnerabilities found, Apple says to fix you must buy Panther for $129..
What an incredibly rational policy. Not only do you charge $129 each year for an incremental upgrade, you force them to upgrade if they want their machines ot stay secure. Brilliant.

http://news.com.com/2100-1016_3-5098...l?tag=nefd_top
Quote:
Will Apple just patch Panther?
Last modified: October 29, 2003, 12:27 PM PST
By Robert Lemos
Staff Writer, CNET News.com

Apple Computer's latest version of its Mac OS X operating system, Panther, patches security flaws that affect previous versions of the operating system, leaving security experts wondering if users will have to pay the $129 upgrade fee to be secure.

On Tuesday, Apple released an advisory indicating that the Mac OS X 10.3 upgrade includes more than a dozen "security enhancements," none of which appears to have been applied to previous versions of the software. Apple's Security Updates Web page doesn't list the fixes for previous versions of the operating system.

"It is not a friendly thing to tell your customers to shell out a lot of money to stay secure," said Thor Larholm, senior researcher for software security firm PivX Solutions. "It would be a dangerous precedent, if they did."

Apple declined comment.

Typically, companies that charge for software provide security updates for the software for a certain period of time. Microsoft provides support for its products for about five years and releases service packs every year that include all the enhancements to the software. Microsoft doesn't charge for the service packs.

"Imagine if Microsoft tried to charge for security fixes--people would go crazy," Larholm said.

Linux vendors typically work things bit differently, as so much of the software they distribute is produced by developers outside the companies. Red Hat, for example, charges about $40 for its desktop edition and provides a year of updates for free. After that, users either have to pay $60 a year to join the company's Red Hat Network and receive updates or subscribe to a free service, such as Ximian's basic Red Carpet service. (Ximian is now owned by Novell.)

Apple's plan falls between the two models, offering bug fixes for free but charging $129 for the update to the operating system--the third time the company has released a new version since Mac OS X debuted in March 2001.

The current set of vulnerabilities include a flaw in the operating system that causes applications to be installed with insecure file permissions. Other vulnerabilities could let a local or remote user crash the system.

Security firm @Stake found four of the vulnerabilities and worked with Apple to fix them in time for the release of Panther. The advisories seem to indicate that Apple doesn't plan to release fixes for earlier versions of the Mac OS X. Each advisory says that users should either upgrade to Panther or turn off the affected software component.

PivX's Larholm said that Apple would have to release some patches or risk angering its users.

"They have stated that they want to release a new version of OS X every year, but this is the first time they have hinted that they will not be supporting any particular OS X version for more than that year, and that they expect all their customers to upgrade their operating system on a yearly basis," he said.
__________________
"I'll never doubt you again when it comes to hockey, [Prince] Asher." - Guynemer
Asher is offline  
Old October 29, 2003, 17:04   #2
muxec
Prince
 
muxec's Avatar
 
Local Time: 14:31
Local Date: November 2, 2010
Join Date: Jun 2002
Location: Mingapulco
Posts: 688
Is it just warez propaganda or real legalization of extortion??
__________________
money sqrt evil;
My literacy level are appalling.
muxec is offline  
Old October 29, 2003, 17:09   #3
Q Classic
Emperor
 
Q Classic's Avatar
 
Local Time: 06:31
Local Date: November 2, 2010
Join Date: Apr 1999
Location: The cities of Orly and Nowai
Posts: 4,228
hey! they're just like microsoft now with security updates!

gotta love apple. trying to beat bill at his own game, after being so thoroughly quashed trying to play his.
__________________
B♭3
Q Classic is offline  
Old October 29, 2003, 17:13   #4
ixnay
Civilization II Democracy GamePtWDG Lux InvictaPtWDG Gathering StormInterSite Democracy Game: Apolyton TeamPtWDG2 Cake or Death?C3C IDG: Apolyton TeamApolytoners Hall of FameCivilization IV CreatorsAge of Nations Team
Emperor
 
ixnay's Avatar
 
Local Time: 05:31
Local Date: November 2, 2010
Join Date: Dec 1998
Posts: 3,215
Quote:
Originally posted by Q Cubed
hey! they're just like microsoft now with security updates!

gotta love apple. trying to beat bill at his own game, after being so thoroughly quashed trying to play his.
Except that Microsoft doesn't charge $129 for each security patch.
ixnay is offline  
Old October 29, 2003, 17:20   #5
Q Classic
Emperor
 
Q Classic's Avatar
 
Local Time: 06:31
Local Date: November 2, 2010
Join Date: Apr 1999
Location: The cities of Orly and Nowai
Posts: 4,228
i know! that's why job's method is better! he could get lots more money for patching than gates could.
__________________
B♭3
Q Classic is offline  
Old October 29, 2003, 17:27   #6
Asher
Apolytoners Hall of Fame
President of the OT
 
Asher's Avatar
 
Local Time: 05:31
Local Date: November 2, 2010
Join Date: Nov 1999
Location: Calgary, Alberta
Posts: 40,843


Jobs knows how to milk money out of a blindingly loyal fanbase, he's one of the best there is for that. Coupled with a brilliant marketing department, Apple users gloat about the privledge of paying $130 each year for an OS.
__________________
"I'll never doubt you again when it comes to hockey, [Prince] Asher." - Guynemer
Asher is offline  
Old October 29, 2003, 17:30   #7
gunkulator
Prince
 
gunkulator's Avatar
 
Local Time: 06:31
Local Date: November 2, 2010
Join Date: Feb 2003
Posts: 434
Hmm, I notice a complete lack of details regarding these vulnerabilities. Note that Apple doesn't actually admit to any security holes in OS X. Instead we find out that a consulting firm scared Apple into paying them to "help" fix these alleged vulnerabilities. They wouldn't be very successful consultants if they found nothing, now would they?

Quote:
"Imagine if Microsoft tried to charge for security fixes--people would go crazy," Larholm said.
Only because there have been so many, even MS doesn't have that much nerve.
gunkulator is offline  
Old October 29, 2003, 17:34   #8
Asher
Apolytoners Hall of Fame
President of the OT
 
Asher's Avatar
 
Local Time: 05:31
Local Date: November 2, 2010
Join Date: Nov 1999
Location: Calgary, Alberta
Posts: 40,843
Quote:
Originally posted by gunkulator
Hmm, I notice a complete lack of details regarding these vulnerabilities. Note that Apple doesn't actually admit to any security holes in OS X.
Duh.
Apple doesn't provide technical details like MS does, they shove everything under the rug and label patches as "Security Enhancements" and they get to count them as one of the "150 new features in Panther!!!"

The security vulnerabilities no doubt exist, and they are no doubt fixed in Panther, but Apple seems to assume everyone pays $130 a year to upgrade.
__________________
"I'll never doubt you again when it comes to hockey, [Prince] Asher." - Guynemer
Asher is offline  
Old October 29, 2003, 18:01   #9
mrmitchell
Civilization III Democracy GamePtWDG RoleplayCall to Power Democracy GameInterSite Democracy Game: Apolyton TeamNationStatesPtWDG2 Tabemono
King
 
mrmitchell's Avatar
 
Local Time: 05:31
Local Date: November 2, 2010
Join Date: Sep 2002
Posts: 2,394
Who the hell wants to ruin a Macintosh owner's day? They're all arteests, connected with the gay mafia, or Asher-fighters. Don't they suffer enough as it is?

And who's going to attack an arteest? That would be like mugging a mime. It would be an easy buck but one without any dignity.
__________________
meet the new boss, same as the old boss
mrmitchell is offline  
Old October 29, 2003, 18:11   #10
Asher
Apolytoners Hall of Fame
President of the OT
 
Asher's Avatar
 
Local Time: 05:31
Local Date: November 2, 2010
Join Date: Nov 1999
Location: Calgary, Alberta
Posts: 40,843
CNet updated the story half an hour after I posted this, adding:
Quote:
David Goldstein, director of research for @Stake, a security company that found four of the vulnerabilities, confirmed that Apple said it wasn't going to patch the flaws in earlier versions of the software.

"In my initial conversations with them, they said they weren't going to fix 10.2, but I wouldn't be surprised if they change that," he said.
__________________
"I'll never doubt you again when it comes to hockey, [Prince] Asher." - Guynemer
Asher is offline  
Old October 29, 2003, 18:24   #11
Giancarlo
King
 
Giancarlo's Avatar
 
Local Time: 08:31
Local Date: November 2, 2010
Join Date: Apr 2000
Location: Los Angeles
Posts: 1,886
Isn't this extortion?
__________________
Lets face it. We flamiing queers have more appeal then Pat Robertson and other religious wackos. We have shows that are really growing in popularity. We have more channels (Q TV, Logo Channel). And we help people in their style issues (Queer Eye for the Straight Guy). The last thing I saw a religious preacher did was ask for $5 in a "generous pledge" to help his bank account in Zurich, erhm, some starving kids in Zimbabwe.
Giancarlo is offline  
Old October 29, 2003, 19:09   #12
monolith94
Mac
Emperor
 
monolith94's Avatar
 
Local Time: 07:31
Local Date: November 2, 2010
Join Date: Dec 1969
Location: New England
Posts: 3,572
"Apple users gloat about the privledge of paying $130 each year for an OS."

The last time I paid for an OS was probably OS 9. Right now I'm running Jaguar.
__________________
"mono has crazy flow and can rhyme words that shouldn't, like Eminem"
Drake Tungsten
"get contacts, get a haircut, get better clothes, and lose some weight"
Albert Speer
monolith94 is offline  
Old October 29, 2003, 19:12   #13
chequita guevara
ACDG The Human HiveDiplomacyApolytoners Hall of Fame
Emperor
 
chequita guevara's Avatar
 
Local Time: 07:31
Local Date: November 2, 2010
Join Date: Jun 2000
Location: Fort LOLderdale, FL Communist Party of Apolyton
Posts: 9,091
I would imagine that isn't legal.
__________________
Christianity: The belief that a cosmic Jewish Zombie who was his own father can make you live forever if you symbolically eat his flesh and telepathically tell him you accept him as your master, so he can remove an evil force from your soul that is present in humanity because a rib-woman was convinced by a talking snake to eat from a magical tree...
chequita guevara is offline  
Old October 29, 2003, 19:16   #14
monolith94
Mac
Emperor
 
monolith94's Avatar
 
Local Time: 07:31
Local Date: November 2, 2010
Join Date: Dec 1969
Location: New England
Posts: 3,572
But it IS cheap.
__________________
"mono has crazy flow and can rhyme words that shouldn't, like Eminem"
Drake Tungsten
"get contacts, get a haircut, get better clothes, and lose some weight"
Albert Speer
monolith94 is offline  
Old October 29, 2003, 19:50   #15
Q Classic
Emperor
 
Q Classic's Avatar
 
Local Time: 06:31
Local Date: November 2, 2010
Join Date: Apr 1999
Location: The cities of Orly and Nowai
Posts: 4,228
technically, a lot of people could say that as well.

the most i've ever paid for an ms operating system is $15, which i plunked down at uchicago. because of the academic license there, everything is heavily discounted: visual studio for 30, office xp for 15, office 2k for 10.
__________________
B♭3
Q Classic is offline  
Old October 29, 2003, 19:54   #16
Kuciwalker
Deity
 
Kuciwalker's Avatar
 
Local Time: 07:31
Local Date: November 2, 2010
Join Date: Feb 2001
Posts: 21,822
I've never paid for an operating system, other than buying the computer

Once, when I was eight, I tried to upgrade my 95 computer to 98. That experience left me horribly scarred for life
__________________
[Obama] is either a troll or has no ****ing clue how government works - GePap
Later amendments to the Constitution don't supersede earlier amendments - GePap
Kuciwalker is offline  
Old October 29, 2003, 20:35   #17
Wiglaf
Never Ending Stories
Emperor
 
Wiglaf's Avatar
 
Local Time: 06:31
Local Date: November 2, 2010
Join Date: Dec 2000
Location: Washington, DC
Posts: 7,000
$130 isn't that much money. The security holes are vague at best, anyway. They certainly haven't affected anyone yet. How do you know Apple isn't planning to release a patch anyway? Just because their PR guy had no comment? Come on.

The whole idea of free patches is hokey, you know. If there's no money involved then there's no motivation involved. I'd rather plunk the big bucks and know I'm getting a (stylish,) secure product.

You're missing the big picture anyway. Microsoft has the most insecure products I've ever seen, despite their patches. Explorer can infect your whole computer just because you go to certain websites (source: http://www.siena.edu/antivirus/viruses/realphx.htm).

On the other hand, if there's $130 involved per user if they find a fix to all these massive glitches, maybe an updated, stable OS would be on the horizon.

Asher, you simply don't know what you're talking about.
Wiglaf is offline  
Old October 29, 2003, 21:31   #18
mrmitchell
Civilization III Democracy GamePtWDG RoleplayCall to Power Democracy GameInterSite Democracy Game: Apolyton TeamNationStatesPtWDG2 Tabemono
King
 
mrmitchell's Avatar
 
Local Time: 05:31
Local Date: November 2, 2010
Join Date: Sep 2002
Posts: 2,394
So if GM sells a car that lets a Ukrainian get your credit card information, should they charge you to fix it?
__________________
meet the new boss, same as the old boss
mrmitchell is offline  
Old October 29, 2003, 23:12   #19
Asher
Apolytoners Hall of Fame
President of the OT
 
Asher's Avatar
 
Local Time: 05:31
Local Date: November 2, 2010
Join Date: Nov 1999
Location: Calgary, Alberta
Posts: 40,843
I love you Wiglaf.

Between you, Agathon, and Mr Nice Guy/Cloud9 -- you guys are certainly helping to establish a new stereotype to replace the current Mac stereotype of starving artists.
__________________
"I'll never doubt you again when it comes to hockey, [Prince] Asher." - Guynemer
Asher is offline  
Old October 29, 2003, 23:15   #20
monolith94
Mac
Emperor
 
monolith94's Avatar
 
Local Time: 07:31
Local Date: November 2, 2010
Join Date: Dec 1969
Location: New England
Posts: 3,572
"you guys are certainly helping to establish a new stereotype to replace the current Mac stereotype of starving artists."

And I'm helping to reinforce the old stereotype of the starving artist! I am so HUNGRY right now!!!
__________________
"mono has crazy flow and can rhyme words that shouldn't, like Eminem"
Drake Tungsten
"get contacts, get a haircut, get better clothes, and lose some weight"
Albert Speer
monolith94 is offline  
Old October 29, 2003, 23:33   #21
Urban Ranger
NationStatesApolyton Storywriters' GuildNever Ending Stories
Deity
 
Urban Ranger's Avatar
 
Local Time: 19:31
Local Date: November 2, 2010
Join Date: May 1999
Location: The City State of Noosphere, CPA special envoy
Posts: 14,606
Quote:
Originally posted by Asher
Apple doesn't provide technical details like MS does, they shove everything under the rug and label patches as "Security Enhancements" and they get to count them as one of the "150 new features in Panther!!!"
At least Apple fixs theirs, while MS tries to sweep everything under the rug. That's why you see the technical details, because impatient third party researchers discloses them in an effort to force MS to do something.
__________________
(\__/) 07/07/1937 - Never forget
(='.'=) "Claims demand evidence; extraordinary claims demand extraordinary evidence." -- Carl Sagan
(")_(") "Starting the fire from within."
Urban Ranger is offline  
Old October 29, 2003, 23:46   #22
Asher
Apolytoners Hall of Fame
President of the OT
 
Asher's Avatar
 
Local Time: 05:31
Local Date: November 2, 2010
Join Date: Nov 1999
Location: Calgary, Alberta
Posts: 40,843
Quote:
Originally posted by Urban Ranger
At least Apple fixs theirs
Hello UR, welcome to this thread.

Incase you haven't noticed, the entire point is they're not fixing them.

Have a nice day ,

Quote:
while MS tries to sweep everything under the rug. That's why you see the technical details, because impatient third party researchers discloses them in an effort to force MS to do something.
MS does fix them, the vast majority of them are fixed and the discoverers cited in a MS TechNet bulliten with a detailed description and link to a free ( ) patch.

There's no need for "dirty underhanded tactics" like this, UR.

Especially when they're absurd claims like MS doesn't fix things until a third party "researcher" (which, more often than not, are *nix twerps out to grind an axe) reveals them...
__________________
"I'll never doubt you again when it comes to hockey, [Prince] Asher." - Guynemer
Asher is offline  
Old October 30, 2003, 00:37   #23
Nubclear
NationStatesCall to Power II Democracy GameInterSite Democracy Game: Apolyton TeamRise of Nations MultiplayerACDG The Human HiveNever Ending StoriesACDG The Free DronesACDG The Cybernetic ConsciousnessGalCiv Apolyton EmpireACDG3 SpartansC4DG Team Alpha CentauriansCiv4 SP Democracy GameDiplomacyAlpha Centauri PBEMCivilization IV PBEMAlpha Centauri Democracy GameACDG Peace
PolyCast Thread Necromancer
 
Nubclear's Avatar
 
Local Time: 11:31
Local Date: November 2, 2010
Join Date: Jul 2002
Location: We are all Asher now.
Posts: 1,437
Quote:
Originally posted by Wiglaf
$130 isn't that much money.


Anyway.... This is....beyond words
Nubclear is offline  
Old October 30, 2003, 08:15   #24
ghen
King
 
ghen's Avatar
 
Local Time: 06:31
Local Date: November 2, 2010
Join Date: Aug 1999
Location: Delaware
Posts: 2,459
Of course we see more Windows bugs, its used on 95% of the home computers in the world with 10x the software, usually freeware or shareware thats poorly coded. If the MacOS was in the same position we'd suddenly see huge gaping holes in its security that it would need to fix as much as Microsoft. The fact is, hardly anyone bothers writing Mac viruses, so why bother looking for security flaws?
__________________
I dont see "Markos can suck my *****" threads here...
--MarkG sarcastically on another Ming flaming thread.
ghen is offline  
Old October 30, 2003, 11:22   #25
Spiffor
Civilization III Democracy GamePtWDG LegolandApolytoners Hall of Fame
 
Spiffor's Avatar
 
Local Time: 13:31
Local Date: November 2, 2010
Join Date: Nov 2001
Location: jihadding against Danish Feta
Posts: 6,182
I suppose Steve Jobs has given up the idea of increasing his marketshare?
__________________
"I have been reading up on the universe and have come to the conclusion that the universe is a good thing." -- Dissident
"I never had the need to have a boner." -- Dissident
"I have never cut off my penis when I was upset over a girl." -- Dis
Spiffor is offline  
Old October 30, 2003, 11:28   #26
Q Classic
Emperor
 
Q Classic's Avatar
 
Local Time: 06:31
Local Date: November 2, 2010
Join Date: Apr 1999
Location: The cities of Orly and Nowai
Posts: 4,228
no, see, because you have to pay for these apple updates, they're that much better than the free microsoft ones.

i mean, we all know how much free stuff can suck. look at lindows.

shrewd move.
__________________
B♭3
Q Classic is offline  
Old October 30, 2003, 11:30   #27
monolith94
Mac
Emperor
 
monolith94's Avatar
 
Local Time: 07:31
Local Date: November 2, 2010
Join Date: Dec 1969
Location: New England
Posts: 3,572
You don't pay for just the update, though - you get the whole new revamped OS. Also, iirc, this OS is supposed to make more efficient use of the new G5 chip, so it is quite an important OS.
__________________
"mono has crazy flow and can rhyme words that shouldn't, like Eminem"
Drake Tungsten
"get contacts, get a haircut, get better clothes, and lose some weight"
Albert Speer
monolith94 is offline  
Old October 30, 2003, 11:30   #28
chequita guevara
ACDG The Human HiveDiplomacyApolytoners Hall of Fame
Emperor
 
chequita guevara's Avatar
 
Local Time: 07:31
Local Date: November 2, 2010
Join Date: Jun 2000
Location: Fort LOLderdale, FL Communist Party of Apolyton
Posts: 9,091
Kinda reminds me how people with Windows 5.0 had to pay $100 to upgrade to Windows 5.1, aka, Win2K and WinXP respectively.
__________________
Christianity: The belief that a cosmic Jewish Zombie who was his own father can make you live forever if you symbolically eat his flesh and telepathically tell him you accept him as your master, so he can remove an evil force from your soul that is present in humanity because a rib-woman was convinced by a talking snake to eat from a magical tree...
chequita guevara is offline  
Old October 30, 2003, 11:31   #29
Q Classic
Emperor
 
Q Classic's Avatar
 
Local Time: 06:31
Local Date: November 2, 2010
Join Date: Apr 1999
Location: The cities of Orly and Nowai
Posts: 4,228
see! that's why they're better than those microsoft updates.

you get what you pay for! just imagine how much money bill--er, how much better windows would be if you had to pay for service packs!
__________________
B♭3
Q Classic is offline  
Old October 30, 2003, 13:40   #30
Asher
Apolytoners Hall of Fame
President of the OT
 
Asher's Avatar
 
Local Time: 05:31
Local Date: November 2, 2010
Join Date: Nov 1999
Location: Calgary, Alberta
Posts: 40,843
Quote:
Originally posted by chegitz guevara
Kinda reminds me how people with Windows 5.0 had to pay $100 to upgrade to Windows 5.1, aka, Win2K and WinXP respectively.
Huh? They didn't have to upgrade.

Windows 2000 is still supported and will still be supported for years.
__________________
"I'll never doubt you again when it comes to hockey, [Prince] Asher." - Guynemer
Asher is offline  
 

Bookmarks

Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is On

Forum Jump


All times are GMT -4. The time now is 07:31.


Design by Vjacheslav Trushkin, color scheme by ColorizeIt!.
Powered by vBulletin® Version 3.8.2
Copyright ©2000 - 2010, Jelsoft Enterprises Ltd.
Apolyton Civilization Site | Copyright © The Apolyton Team