jholzner
Oct 25, 10:57 PM
I can't really decide what to think of an 8 core mac pro.
Right now FCP barely uses all four of mine.
It seriously seems that they a) haven't updated software pending an OS update, ie; leopard, to take advavtage of them or b) more cores really only helps the multi-tasking.
In any case I think my mac pro isn't quite as fast as it could be sighting the activity of my cpus during a render.
HDV render = 60% on every core. WTF?
True but that new color correction software Apple just bought has some pretty steep requirements. I bet the next version of FCP will really be able to take serious advantage of their new wares. Also, I bet Leopard is going to be optimized to the limit for this type of hardware. Just my guess.
Right now FCP barely uses all four of mine.
It seriously seems that they a) haven't updated software pending an OS update, ie; leopard, to take advavtage of them or b) more cores really only helps the multi-tasking.
In any case I think my mac pro isn't quite as fast as it could be sighting the activity of my cpus during a render.
HDV render = 60% on every core. WTF?
True but that new color correction software Apple just bought has some pretty steep requirements. I bet the next version of FCP will really be able to take serious advantage of their new wares. Also, I bet Leopard is going to be optimized to the limit for this type of hardware. Just my guess.
AriX
May 2, 09:40 AM
haven't seen this malware first hand, but a zip file can be made with absolute paths, making "unzipping" the file put everything where it needs to be to start up automatically on next log in/reboot.
Who's the brainiac who made zip files "safe" ?
Archive Utility will not extract these type of ZIP files to their system paths. I believe it will force the use of relative paths. I really doubt any reports that this malware can be installed without user interaction.
Who's the brainiac who made zip files "safe" ?
Archive Utility will not extract these type of ZIP files to their system paths. I believe it will force the use of relative paths. I really doubt any reports that this malware can be installed without user interaction.
Mattie Num Nums
May 2, 09:26 AM
So make it unsafe, it's not a rocket science, cowboy.
You're awfully sensitive about this issue, chief.
You're awfully sensitive about this issue, chief.
pdjudd
Oct 7, 11:24 PM
I'm sorry OSX market share would most definitely go up. From a business perspective though it would would be a terrible move, you are right about that. Profits would drop as Apple would get next to nothing from the sale of software only. The market share of OSX would drop once Apple went bankrupt.
Which is kinda the point. Short term improvements are meaningless if they go right back down. I don;t contend that they would go up, but the whole point of increasing sales is to hope that they stay up. Otherwise it�s just a waste of time. You can;t just say �market share will go up�. Their market share goes up the minute a Mac gets sold. We have to look at the long run which you point out, will invariably go down and possibly lower than the base. A net loss kinda contradicts the idea of increased market share.
But this is all conjecture since Apple has already indicated that they are not playing the market share game.
[QUOTE]Allowing greater access to your product almost always leads to larger sales volumes, but it isn't always in your best interest.
Of course that statement is true. But does that require Apple to license their hardware out to others? I argue that it�s not the case. Taking the MS approach fundamentally changes Apple�s business. They don�t have to do that. Of course the Grueber article covers that too. There are tones of ways to increase access to your product. The tough part is making it profitable. Both Microsoft and Apple accomplish that goal just fine without getting into a fight that results in a bad outcome for Apple or MS.
Which is kinda the point. Short term improvements are meaningless if they go right back down. I don;t contend that they would go up, but the whole point of increasing sales is to hope that they stay up. Otherwise it�s just a waste of time. You can;t just say �market share will go up�. Their market share goes up the minute a Mac gets sold. We have to look at the long run which you point out, will invariably go down and possibly lower than the base. A net loss kinda contradicts the idea of increased market share.
But this is all conjecture since Apple has already indicated that they are not playing the market share game.
[QUOTE]Allowing greater access to your product almost always leads to larger sales volumes, but it isn't always in your best interest.
Of course that statement is true. But does that require Apple to license their hardware out to others? I argue that it�s not the case. Taking the MS approach fundamentally changes Apple�s business. They don�t have to do that. Of course the Grueber article covers that too. There are tones of ways to increase access to your product. The tough part is making it profitable. Both Microsoft and Apple accomplish that goal just fine without getting into a fight that results in a bad outcome for Apple or MS.
Chupa Chupa
Aug 29, 11:10 AM
This should be a Page 2 story at best. Let's be clear about what this bit of propaganda is... We know Greenpeace is anti-technology, anti-capitalism. They know Apple is not only a huge success story, but also has a big presence in consumer's minds. Everyone knows Apple and iPods. Clearly Greenpeace, like the iPod labor camp story before it, is USING Apple to forward their own agenda of killing technology and thwarting capitalism and innovation.
FX120
May 2, 01:22 PM
This is partially because due to a design flaw in Windows, many third-party applications won't even run unless they have administrator access (silly, no?).
So outdated software or poor programming = Design flaw in Windows?
Don't get me wrong, I have some legacy applications that won't run without elevated permissions, but they're just that, legacy applications. I suppose Microsoft could just take Apples approach and forcibly antiquate software.
So outdated software or poor programming = Design flaw in Windows?
Don't get me wrong, I have some legacy applications that won't run without elevated permissions, but they're just that, legacy applications. I suppose Microsoft could just take Apples approach and forcibly antiquate software.
belovedmonster
Sep 12, 03:37 PM
I don't want to have to go to my Mac in another room to watch a DVD.
Thats where having your Mac Mini in the living room comes into play. Its basically just a box to interface from a computer to the TV, where you put the computer is up to you, and in this case why not have a Mac Mini in the living room?
Thats where having your Mac Mini in the living room comes into play. Its basically just a box to interface from a computer to the TV, where you put the computer is up to you, and in this case why not have a Mac Mini in the living room?
jayenh
Feb 24, 08:44 AM
This could also be a flaw, I would be really annoyed if I bought the best droid available and then a month later another six of them come out better than mine. A lot of people like buying the best available and then riding it out until the next model is available, but when there phone gets replaced by another 40 phones I am not to sure how people will react.
iphone users are the only people who do this. before the iphone it was pretty well accepted that your new nokia/sony ericson/blackberry/anything is only going to be new for the next 3 months tops until the next model comes out. the mobile industry used to be probably the fastest paced of the tech industries and at it's peak no one gave a crap that there phone manufacturer brought out a new phone every couple of months.
i suppose it was a little easier to swallow with 12 month contracts being the norm until the last couple of years (in the uk at least), but this is the fault of carriers, not the phone manufacturers. they are doing the exact same release cycle they always have done.
edit: not all iphone users, obviously, but probably a larger proportion of iphone users than [insert any phone here] users based on the outrage when the 3gs came out. and that was possibly only because of assumption (the mother of all f... ups) due to the cheap/free (?) upgrade of the 1st gen to 3g. i bet there won't be that outcry this year.
iphone users are the only people who do this. before the iphone it was pretty well accepted that your new nokia/sony ericson/blackberry/anything is only going to be new for the next 3 months tops until the next model comes out. the mobile industry used to be probably the fastest paced of the tech industries and at it's peak no one gave a crap that there phone manufacturer brought out a new phone every couple of months.
i suppose it was a little easier to swallow with 12 month contracts being the norm until the last couple of years (in the uk at least), but this is the fault of carriers, not the phone manufacturers. they are doing the exact same release cycle they always have done.
edit: not all iphone users, obviously, but probably a larger proportion of iphone users than [insert any phone here] users based on the outrage when the 3gs came out. and that was possibly only because of assumption (the mother of all f... ups) due to the cheap/free (?) upgrade of the 1st gen to 3g. i bet there won't be that outcry this year.
macidiot
Jul 12, 04:03 AM
I hate to say it but since I got my macbook black I have been using winxp and not osx. XP runs faster, is compatible with all apps like photoshop and office natively and runs perfectly. I have been very impressed. So impressed that I decided to build a core 2 duo desktop from newegg and I did it for Under $900. Now lets see apple top that pricing. (core 2 duo chip on order from buy.com)
Sorry but I think I have lost hope for OS X. I got the media center edition OS with the new computer I am building with dual tuner TV card. Watching tv via my xbox 360 is a dream. Mac will never be able to accomplish this task. Front row sucks.
If I bought a new mac pro (which I won't because its going to be a rippoff) I would just run XP on it.
For instance, I got two Radeon 16xPCIe X1600xt supporting crossfire with 512mb ram each from newegg for $120 each. Everything is just cheaper.
After a while you get to a point in your work where you realize seeing the neat apple OS is just not that important. Not when you can run crappy XP (which sorry to disappoint never crashes) for 1/3rd the price and 4x the speed.
Comon apple, make a media center mac and figure out a way to use PC graphics cards. After spending $500 on my Radeon 800xt with 256mb ram I wil l NEVER do it again. Not when I can get dual crossfire cards for half the price and 4x the performance.
I guess I am a half reverse switcher. Using macbook pro but XP only. LOL!
Considering I mostly watch hdtv from satellite, neither platform is of any use. And who cares, I have a hdtivo that works like a champ. Let me know when mce can record Deadwood in HD. And let me know how I can hook up an xbox 360 to my hdtv via dvi/hdmi.
And whuteva about building your own comp for a penny. You get a gold star. Apple is going to cost more. So is HP, Dell, Sony, and any other tier 1 manufacturer. Then again, a computer from Apple isn't going to come in a $20 plastic chrome-plated case that looks like a transformer.
Everything is just cheaper? Tell me, in what what intel macs can you toss those x1600xt cards into? Or is pc ram somehow cheaper? Oh wait, must be those pc-only hard drives right? And I'm wondering what core duo laptops you can buy that are 4x faster than a macbook pro and only cost $900. Cause I'll sign up right now and buy one. Hell, I'll buy 2. One for me and one for you. It only has to cost 1/3 the price of a macbook pro and offer 4x the speed, and otherwise be similar (weight, display, main features).
And your running xp on your mac? Is it xp or mce? And your using a pirated copy? Cause if you actually purchased a copy, it sort of explains why you think your comp is expensive... since you spent an extra 100-150 on it...
And finally... you have a black macbook pro? I'm impressed. :P So did you use Krylon?
I believe I just fed the troll... I'm guessing that since you don't seem to know what kind of laptop you have. And considering that most of what you said is not based in fact. It's something a 12yo pc fanboy would say.
Sorry but I think I have lost hope for OS X. I got the media center edition OS with the new computer I am building with dual tuner TV card. Watching tv via my xbox 360 is a dream. Mac will never be able to accomplish this task. Front row sucks.
If I bought a new mac pro (which I won't because its going to be a rippoff) I would just run XP on it.
For instance, I got two Radeon 16xPCIe X1600xt supporting crossfire with 512mb ram each from newegg for $120 each. Everything is just cheaper.
After a while you get to a point in your work where you realize seeing the neat apple OS is just not that important. Not when you can run crappy XP (which sorry to disappoint never crashes) for 1/3rd the price and 4x the speed.
Comon apple, make a media center mac and figure out a way to use PC graphics cards. After spending $500 on my Radeon 800xt with 256mb ram I wil l NEVER do it again. Not when I can get dual crossfire cards for half the price and 4x the performance.
I guess I am a half reverse switcher. Using macbook pro but XP only. LOL!
Considering I mostly watch hdtv from satellite, neither platform is of any use. And who cares, I have a hdtivo that works like a champ. Let me know when mce can record Deadwood in HD. And let me know how I can hook up an xbox 360 to my hdtv via dvi/hdmi.
And whuteva about building your own comp for a penny. You get a gold star. Apple is going to cost more. So is HP, Dell, Sony, and any other tier 1 manufacturer. Then again, a computer from Apple isn't going to come in a $20 plastic chrome-plated case that looks like a transformer.
Everything is just cheaper? Tell me, in what what intel macs can you toss those x1600xt cards into? Or is pc ram somehow cheaper? Oh wait, must be those pc-only hard drives right? And I'm wondering what core duo laptops you can buy that are 4x faster than a macbook pro and only cost $900. Cause I'll sign up right now and buy one. Hell, I'll buy 2. One for me and one for you. It only has to cost 1/3 the price of a macbook pro and offer 4x the speed, and otherwise be similar (weight, display, main features).
And your running xp on your mac? Is it xp or mce? And your using a pirated copy? Cause if you actually purchased a copy, it sort of explains why you think your comp is expensive... since you spent an extra 100-150 on it...
And finally... you have a black macbook pro? I'm impressed. :P So did you use Krylon?
I believe I just fed the troll... I'm guessing that since you don't seem to know what kind of laptop you have. And considering that most of what you said is not based in fact. It's something a 12yo pc fanboy would say.
Rt&Dzine
Mar 12, 11:27 AM
The main island of Japan, the complete land mass, has moved sideways by eight feet (about 2.5 metres). And the earth, the entire planet, has shifted on its axis by about four inches (10cm)... according to geophysicists reported over at CNN. (http://edition.cnn.com/2011/WORLD/asiapcf/03/12/japan.earthquake.tsunami.earth/index.html)
This earthquake ranks 5th for strongest earthquakes accurately recorded.
It shifted the Earth four inches on its axis. If I understand correctly the 2010 Chilean earthquake actually shifted the Earth's axis. I wonder how often either of these events happen.
EDIT: The JPL now thinks that the Japan earthquake shifted the Earth's axis. I've found out this occurrence is somewhat "common".
This earthquake ranks 5th for strongest earthquakes accurately recorded.
It shifted the Earth four inches on its axis. If I understand correctly the 2010 Chilean earthquake actually shifted the Earth's axis. I wonder how often either of these events happen.
EDIT: The JPL now thinks that the Japan earthquake shifted the Earth's axis. I've found out this occurrence is somewhat "common".
danielwsmithee
Sep 12, 03:56 PM
is this iTV thingee going to have wireless router function? then it replaces airport express. if not, then no.yes it will. Probably 802.11n. It will also have a USB port. They could do a lot of interesting things with the USB port. You could connect your or a friend's iPod and gain access to all the content on the iPod. You could connect a printer like the Airport Express, or what I hope most of all is NAS. Imagine being able to connect a USB drive and have a file server for your whole house, anything in the movies, music, or photos folders can be played by iTV.
dante@sisna.com
Sep 12, 07:07 PM
Please explain to me, even hypothetically, how this could be a Tivo killer DVR. As a basis for the argument, consider that TiVo (as of today) can record 2 HD channels simulteously, while watching a third previously recorded show. Plus you can pause live TV.
Elgato and Myth and all of the cable & satellite Co. DVRs haven't been able to compete with TiVo to date, what makes you thik they will be able to going forward?
How does Elgato not compete?
Sure it does:
1) I can pause mine.
2) I have a full software based one-click scheduling system
3) I can record high def content.
4) If I use two cards, I can record two streams via a signal splitter.
5) I can certainly watch a prerecorded show while doing all of the above: my Quad Core easily handles this.
Elgato and Myth and all of the cable & satellite Co. DVRs haven't been able to compete with TiVo to date, what makes you thik they will be able to going forward?
How does Elgato not compete?
Sure it does:
1) I can pause mine.
2) I have a full software based one-click scheduling system
3) I can record high def content.
4) If I use two cards, I can record two streams via a signal splitter.
5) I can certainly watch a prerecorded show while doing all of the above: my Quad Core easily handles this.
jabi
Sep 20, 11:50 AM
iTV is basically a limited Mini with better remote control software, if i can use an Elgato eyeTV on it to record i'm buying for sure. Ideally would be an eyeTV with a USB 2 connection to add a big HD.
Given the form factor, I believe this is designed to sit on top of a Mac mini to gain recording functionality. Apple has no interest in taking away the computer from the equation. They see the Mac as the hub of your digital lifestyle. So, I predict we will see a "Media Center" version of Mac OS X that is designed to go with a specialized version of a Mac mini suited for recording TV, iTunes integration etc. that sits under the iTV.
Given the form factor, I believe this is designed to sit on top of a Mac mini to gain recording functionality. Apple has no interest in taking away the computer from the equation. They see the Mac as the hub of your digital lifestyle. So, I predict we will see a "Media Center" version of Mac OS X that is designed to go with a specialized version of a Mac mini suited for recording TV, iTunes integration etc. that sits under the iTV.
MacCoaster
Oct 12, 09:41 AM
Originally posted by nixd2001
It would be interesting to see the code generated for the loops - it won't change the answers but it might give some of us a bit more understanding on the perfomance differences.
javajedi's Java and Cocoa/Objective-C code has been available here (http://members.ij.net/javajedi) for a couple of days. My C# port is available for examination if you e-mail me.
It would be interesting to see the code generated for the loops - it won't change the answers but it might give some of us a bit more understanding on the perfomance differences.
javajedi's Java and Cocoa/Objective-C code has been available here (http://members.ij.net/javajedi) for a couple of days. My C# port is available for examination if you e-mail me.
wlh99
Apr 6, 11:27 AM
Mac:
cmd-shft-3 to get a screen shot *instantly* on your desktop
Windows:
Opening snipping tool
switching to full screen mode
click
choosing a file name
quit the app
Or press print-screen. It puts the screen capture on the clipboard instead of saving to the desktop, but just as easy. AFAIK there is no simple equiv. to cmd-shft-4. I usually open in Paint and crop.
cmd-shft-3 to get a screen shot *instantly* on your desktop
Windows:
Opening snipping tool
switching to full screen mode
click
choosing a file name
quit the app
Or press print-screen. It puts the screen capture on the clipboard instead of saving to the desktop, but just as easy. AFAIK there is no simple equiv. to cmd-shft-4. I usually open in Paint and crop.
Sydde
Mar 14, 08:01 PM
So, if they have a serious meltdown situation, the whole site could become so contaminated that no one who wants to live more than a few hours will be able to get anywhere near the other cores to keep the hoses on them? It would seem like one meltdown will take the rest of them with it, in a sort of chain reaction.
They are in real trouble now, can only hope the winds keep things blowing out to sea. I was hoping to get home from work to see things finally under control.... not the exact opposite. :(
Yeah, the folks living in the western US are really looking forward to the "divine wind" from Japan.
They are in real trouble now, can only hope the winds keep things blowing out to sea. I was hoping to get home from work to see things finally under control.... not the exact opposite. :(
Yeah, the folks living in the western US are really looking forward to the "divine wind" from Japan.
TimUSCA
Apr 28, 07:55 AM
Well you have a point there. The iPod was a so-called fad too. It took 8 or 9 years for it to wear off and see fickle consumers switch to the next fad, the iPhone and iPad. The iPad-like devices may be a fad but it's likely to die out b/c a it's replaced by a next gen device. Apple is already showing it's cards in melding OS X with hints of iOS.
I disagree. The only reason people stopped buying the iPod was because it was more convenient to have a phone and iPod in a single device. Once people started buying iOS and Android devices, they no longer *needed* an iPod.
So the iPod didn't die down because it was a fad... it died down because technology has replaced it. The need for a PMP such as the iPod is still very much alive, just in a different form.
I disagree. The only reason people stopped buying the iPod was because it was more convenient to have a phone and iPod in a single device. Once people started buying iOS and Android devices, they no longer *needed* an iPod.
So the iPod didn't die down because it was a fad... it died down because technology has replaced it. The need for a PMP such as the iPod is still very much alive, just in a different form.
phalseHUD
Apr 21, 04:38 AM
Its amazing how all those "smart" Android users are still poorer than the average iOS user, and spend less than the average iOS user.
Amazing that all these "smart" people just make so much less money...
I've browsed these forums for a while and used to post under a different name until I started work for a certain company which shall remain nameless! But this has to be one of the most pathetic comments I've ever read on here.
Amazing that all these "smart" people just make so much less money...
I've browsed these forums for a while and used to post under a different name until I started work for a certain company which shall remain nameless! But this has to be one of the most pathetic comments I've ever read on here.
levitynyc
Apr 9, 05:15 AM
I would consider myself a hardcore gamer and I'm not ashamed of it. I went to PAX East the last 2 years and own all 3 home consoles plus a PSP, 3DS, DSi, iPhone and iPad. Gaming kept me away from all the drugs and alcohol that my friends were doing in high school. I'm almost 30 now and I'm married, have a good job, have a beautiful home and a beautiful wife, so lets not get stereotyped.
True, some iPad/iPhone games are "casual time wasters" but there are also some FANTASTIC games. Dead Space iOS is fantastic and guess what, ITS WAS 10 DOLLARS. True, its not as good as the console versions, but those sold for 60 DOLLARS.
Get off your friggin high horse when saying that App store gaming isn't real gaming.
The gaming industry is upset with Apple because Apple is finally giving customers the option to pay what customers think a game is worth, not what a console manufacturer thinks a game is worth. If Pilot Wings 3DS was an App store game, it'd be AT MOST 10 dollars. I bought it, I enjoy it, but I feel ripped off by the price.
This scares the hell out of Nintendo as their mandatory priced 40 dollar games are being compared not only in quality, but in PRICE to iOS games.
Tiger Woods golf is another great game on the consoles, but that game is 60 dollars. The iPad version is very very similar (doesn't have Augusta and online modes and a few other small things) but its only 10 bucks on the iPad and I'm sure it'll be on sale shortly.
Last year I picked up the iPhone version for 99 cents. I had more fun with that than the 60 dollar console version because at any time I could play a hole or 2 when I had a few minutes of down time at work.
EDIT: Sorry for the double post
True, some iPad/iPhone games are "casual time wasters" but there are also some FANTASTIC games. Dead Space iOS is fantastic and guess what, ITS WAS 10 DOLLARS. True, its not as good as the console versions, but those sold for 60 DOLLARS.
Get off your friggin high horse when saying that App store gaming isn't real gaming.
The gaming industry is upset with Apple because Apple is finally giving customers the option to pay what customers think a game is worth, not what a console manufacturer thinks a game is worth. If Pilot Wings 3DS was an App store game, it'd be AT MOST 10 dollars. I bought it, I enjoy it, but I feel ripped off by the price.
This scares the hell out of Nintendo as their mandatory priced 40 dollar games are being compared not only in quality, but in PRICE to iOS games.
Tiger Woods golf is another great game on the consoles, but that game is 60 dollars. The iPad version is very very similar (doesn't have Augusta and online modes and a few other small things) but its only 10 bucks on the iPad and I'm sure it'll be on sale shortly.
Last year I picked up the iPhone version for 99 cents. I had more fun with that than the 60 dollar console version because at any time I could play a hole or 2 when I had a few minutes of down time at work.
EDIT: Sorry for the double post
noahtk
Apr 9, 04:16 PM
Pay off Sony for PSP ports!!!
roland.g
Sep 12, 06:33 PM
That's what I thought when I saw that they weren't specific about WiFi ... simply calling it "802.11 wireless networking" instead of specifically stating it was "802.11 A/B/G".
but that brings up the point of what's sending to it. Doesn't matter that it has new tech to recieve at higher bandwidth if the computer streaming to it only sends out at 802.11g.
but that brings up the point of what's sending to it. Doesn't matter that it has new tech to recieve at higher bandwidth if the computer streaming to it only sends out at 802.11g.
Peace
Sep 12, 05:27 PM
soooo.....milo....:)
Looks like the only thing I had wrong was the hard drive eh? ;)
But it looks like a little of what we were both talking about..
We'll call it even eh? :)
Looks like the only thing I had wrong was the hard drive eh? ;)
But it looks like a little of what we were both talking about..
We'll call it even eh? :)
AppleScruff1
Apr 20, 07:50 PM
You obviously don't work in IT or no anything about how viruses are spread. Windows can get a virus just by being on a network with an infected machine or opening an email in Outlook from someone on an infected machine. I fix these kind of issues for a living and see it all the time. The truth is its insanely easy for viruses to get onto, and hide in Windows. Windows allows the files to completely hide themselves even if hidden and system files are set to show. The only way to see them on an infected machine is to yank the hard drive and plug it into a mac or linux based machine then you can spot hidden infected files if you know where they are located.
So please, don't start with the "as long as users are smart" myth. It can easily happen to anyone, its a flaw in the OS.
I believe you can also pull the hard drive and scan it with another Windows based machine to find the files also.
So please, don't start with the "as long as users are smart" myth. It can easily happen to anyone, its a flaw in the OS.
I believe you can also pull the hard drive and scan it with another Windows based machine to find the files also.
munkery
May 2, 05:41 PM
What is "an installer" but an executable file and what prevents me from writing "an installer" that does more than just "installing".
My response, why bother worrying about this when the attacker can do the same thing via shellcode generated in the background by exploiting a running process so the the user is unaware that code is being executed on the system.
I don't know of any Javascript DOM manipulation that lets you have write/read access to the local filesystem. This is already sandboxed.
The scripting engine in the current Safari is not yet sandboxed.
Here is a list of Javascript vulnerabilities:
http://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=Mac+OS+X+Javascript
The issue is Safari is launching an executable file that sits outside the browser sandbox.
In the current Safari, only some plugins are sandboxed, so this wasn't execution outside the sandbox.
All that having been said, UAC has really evened the bar for Windows Vista and 7 (moreso in 7 after the usability tweaks Microsoft put in to stop people from disabling it). I see no functional security difference between the OS X authorization scheme and the Windows UAC scheme.
Except this:
Switching off or turning down UAC in Windows also equally impacts the strength of MIC (Windows sandboxing mechanism) because it functions based on inherited permissions. Unix DAC in Mac OS X functions via inherited permissions but MAC (mandatory access controls -> OS X sandbox) does not. Windows does not have a sandbox like OS X.
UAC, by default, does not use a unique identifier (password) so it is more susceptible to attacks the rely on spoofing prompts that appear to be unrelated to UAC to steal authentication. If a password is attached to authentication, these spoofed prompts fail to work.
Unix DAC is turned off in OS X in the root user account.
My response, why bother worrying about this when the attacker can do the same thing via shellcode generated in the background by exploiting a running process so the the user is unaware that code is being executed on the system.
I don't know of any Javascript DOM manipulation that lets you have write/read access to the local filesystem. This is already sandboxed.
The scripting engine in the current Safari is not yet sandboxed.
Here is a list of Javascript vulnerabilities:
http://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=Mac+OS+X+Javascript
The issue is Safari is launching an executable file that sits outside the browser sandbox.
In the current Safari, only some plugins are sandboxed, so this wasn't execution outside the sandbox.
All that having been said, UAC has really evened the bar for Windows Vista and 7 (moreso in 7 after the usability tweaks Microsoft put in to stop people from disabling it). I see no functional security difference between the OS X authorization scheme and the Windows UAC scheme.
Except this:
Switching off or turning down UAC in Windows also equally impacts the strength of MIC (Windows sandboxing mechanism) because it functions based on inherited permissions. Unix DAC in Mac OS X functions via inherited permissions but MAC (mandatory access controls -> OS X sandbox) does not. Windows does not have a sandbox like OS X.
UAC, by default, does not use a unique identifier (password) so it is more susceptible to attacks the rely on spoofing prompts that appear to be unrelated to UAC to steal authentication. If a password is attached to authentication, these spoofed prompts fail to work.
Unix DAC is turned off in OS X in the root user account.
No comments:
Post a Comment