Columnist: Safari Security Fails to Learn from Past
July 7th, 2008 at 3:00 PM - News by John Martellaro
Three mistakes in the security design of Safari show that Apple has failed to learn from past mistakes, according to a guest editorial at ZDNet by a security team leader, Aviv Raff.
The mistakes Apple has made were compared to the ways other browsers and OSes handle the issues:
- Automatic file downloading, aka, carpet bombing.
- Browser fuzzing.
- Predictable locations for cache and cookies.
"In conclusion, before porting the Safari browser from Mac to Windows, Apple should have looked at past browser vulnerabilities and design flaws, and really try to avoid them," Mr. Raff, a security team leader for a Fortune 500 company, said. "The examples above show that Apple didn?t learn anything from past mistakes."
What Mr, Raff failed to point out is that no known, in the wild, exploits have been traced to these issues. Even so, a healthy discussion about ways to improve security is always good, especially when it helps keep one step ahead of the bad guys.
Recent Headlines - Updated November 10th
- Mon, 7:20 PM
- Rumor - Apple May Update iPod touch in December
- 6:45 PM
- Product News - MacUpdate Desktop Updated to 5.0.1 with New Features, Bug Fixes
- 5:16 PM
- Apple Releases Mac OS X 10.6.2 - Guest Account Bug Fixed, Much More
- 4:12 PM
- Games - New For iPhone: Star Rangers, Air Force Supremacy, Blood Beach, More
- 2:51 PM
- Apple Stock Watch - Radio Shack Jumps 14% on iPhone Deal, Apple Up 3%
- 2:25 PM
- Games - EA Scoops Up Social Games Publisher Playfish
- 1:51 PM
- Deal Brothers - Western Digital 1TB SATA Intellipower Hard Drive: $84.99
- 10:58 AM
- News - StarHub Signs Singapore iPhone Deal
- 10:36 AM
- Hot Forum Topic - Reader Speculation: What’s in Apple’s Tablet?
- 10:08 AM
- News - Apple Kicks Off New Credit Program
- 9:26 AM
- News - Apple Launches Reserve and Pick Up Program
- 8:49 AM
- News - ikee Worm Rickrolls Jailbroken iPhones
The Mac Observer Reader Specials
- TypeStyler For Mac OS X is Now Shipping! Download The Free Fully Functional 60 Day Tryout at www.typestyler.com
RamJet Memory: Mac Pro 8-core 8GB Kit $199.99, 4GB Kits $109.99! Sale on MacBook and MacBook Pro 8GB kits $549.99! New MacBook DDR3 2GB for $49.99. iMac and Mac mini 4GB Kits for $79.99! 1TB SATA Hard Drives for $109.99! Click here
OWC: Get the Right Memory / Ram for your Mac. Top Quality, Competitive Prices, Lifetime Warranty. Expert Support and Video Installation Guidies too! 4.0GB Matched Sets from $87.99, Options up to 32GB. Click here
If you're using a Mac, then you've gotta check out Full Tilt Poker for Mac. This Full Tilt Poker bonus code does the unthinkable, it actually rewards!For the latest Apple products use Ciao, a price comparison website, to find laptops like MacBook Air. Then find the best prices on MP3 players and use our comparison tool to evaluate mobile phones like the Apple iPhone.
Laptop Hardware Provided by TechRestore - Overnight Mac & iPod Repairs.
J&R ComputerWorld’s Weekend Sale - Sitewide Unbelievable Deals
OWC’s Garage Sale - Lots of New Goodies
Apple Refurbished 24” LED Cinema Display: $599.00 Delivered
Western Digital 1TB SATA Intellipower Hard Drive: $84.99 Delivered
Refurbished Mac Pro 8-core 3.2GHz Intel Xeon: $3299.00 Delivered
