The Mac Observer

Skip navigational links

You're viewing an article in TMO's historic archive vault. Here, we've preserved the comments and how the site looked along with the article. Use this link to view the article on our current site:
Editorial - A Month of Continuous Foolishness

Editorial - A Month of Continuous Foolishness

by , 12:35 PM EST, December 20th, 2006

Sooner or later you are going to hear about a project by two fellows to bypass the normal channels of security bug reporting and openly publish previously "undocumented" security bugs in Mac OS X every day for a month. The justification for this appears to be a craze started by H.D. Moore's Month of Browser Bugs and some kind of desire for notoriety.

There are some problems with this approach.

First, not all security bugs can be turned into effective exploits. As we've seen over the last year, many security flaws are proclaimed in Mac OS X, but few see effective exploitation for technical reasons. Second, the idea that using forceful methods combined with a convenient bit of publicity as a justification is unwarranted, even if the security researcher remains anonymous for now. Third, there are appropriate channels to handle these discoveries that are professional and protect everyone. Finally, the supposition that there are some people who take the security of Mac OS X more seriously than the BSD professionals and Apple engineers is stupendously arrogant and self-serving.

There are many technical professionals working behind the scenes to secure Mac OS X. As we've seen with Windows, the reputation of a company can stand or fall on this issue. If a security researcher bangs on Apple about a flaw and doesn't seem to get invited to dinner with Phil Schiller, that's just too bad. In this case the needs of the one are outweighed by the needs of the many.

So when you read about this, the best thing to do is feel sorry for these wannabes and move on to the next story.

Digg!

Recent TMO Headlines - Updated November 19th

Sat, 3:50 AM
Get Free Bitcoins from 56 Faucets That Pay
Sat, 3:09 AM
Photos and Thoughts from Opening Day at Apple Park Visitor Center
Fri, 6:28 PM
Here Are All the Apple-Branded Clothes You Can Buy at Apple Park Visitor Center
Fri, 5:48 PM
Apple vs. the Competition: The Art of Corporate Decision Making
Fri, 5:42 PM
tvOS 11.2 Developer Beta 4 for Apple TV Ready to Download
Fri, 5:37 PM
Join Our Apple Context Machine Facebook Group
Fri, 5:28 PM
Apple Releases watchOS 4.2 Developer Beta 4 for Apple Watch
Fri, 5:18 PM
Apple Rolls Out iOS 11.2 Developer Beta 4 for iPhone and iPad
Fri, 5:04 PM
Disk Drill PRO Lifetime License: $34.99
Fri, 4:05 PM
Get a Free 32GB Apple TV 4K With DirecTV Now
Fri, 3:44 PM
5 Cooking Apps to Help You With Thanksgiving Dinner
Fri, 2:59 PM
Apple Officially Delays HomePod Launch Until 2018
  • __________
  • Buy Stuff, Support TMO!
  • Podcast: Mac Geek Gab
  • Podcast: Apple Weekly Report
  • TMO on Twitter!