One day these people might actually produce a virus or trojan or even a proof of a concept of one for something Apple hasn't already patched.

Until then, still no virus trouble for our Mac OS X. They just HATE that.

Proof of concept information was published that utilizes a vulnerability that was patched a couple of days before. They're getting closer to something significant, but not there yet.

AND requires local access to the machine.

Still not overly significant, even if it were more than a concept.

Quote

hangtown wrote:
AND requires local access to the machine.

Still not overly significant, even if it were more than a concept.

I could see it being a problem in a school situation with their student accessible networks. I am glad that Apple got the fix out before the published vulnerability.

Just a reminder to everyone that most vulnerabilities are not published until a fix has been released. It's in consideration for the company that has the vulnerability. They go through a process of first notifying the company of the vulnerability. The company then fixes said vulnerability and then the company/person that found the vulnerability usually has first rights to publish the vulnerability at that time which is a thank you nod from the vulnerable company for notifying them first and not all the hackers out there.

Problems, big problems arise when company/people notify the public first about the vulnerability, or only wait a little time after notifying the vulnerable company to notify the public. This puts a lot more people at risk then if they would have kept quiet until the company fixed the problem and released a patch.

Ok that was confusing, but hopefully it's clear enough to make the point.

Looks like Apple almost beat this story before it even got out as Apple has already patched this concept with 10.4.7 update. I guess Symantec won't be selling much OSX antivirus software this week.