munkery
Mar 22, 08:35 PM
Kernel
A privilege checking issue existed in the i386_set_ldt system call's handling of call gates. A local user may be able to execute arbitrary code with system privileges. This issue is addressed by disallowing creation of call gate entries via i386_set_ldt().
Generating a successful malware from that list of vulnerabilities has two requirements:
1) A remote arbitrary code execution vulnerability has to be linked to a local privilege escalation vulnerability.
2) Those vulnerabilities that can be linked together must both be exploitable. Not all vulnerabilities are exploitable.
The only local privilege escalation vulnerability in that update is shown above. To be linked to a remote vulnerability to create a successful malware requires the following:
1) The call function must be used by a process that also has an remote vulnerability so that the vulns can be linked together to install a payload, such as rootkit. It is likely that not all processes will use that call function. Also, that call function is for 32-bit processes and most client side software in Mac OS X that may contain a remote exploit are 64-bit processes.
2) The two vulnerabilities have to be reliably exploitable once linked together as well as being reliably exploitable independently so that they can actually be linked together. Again, not all vulnerabilities are exploitable.
Linking together remote and local exploits is more difficult in Mac OS X than Windows. This is because Windows has far more local privilege escalation exploits than Mac OS X. Another factor is that the different levels of Windows are less insulated from each other than the different levels of Mac OS X. A common method to achieve privilege escalation in Windows is by manipulating registry values.
http://www.exploit-db.com/bypassing-uac-with-user-privilege-under-windows-vista7-mirror/ -> outlines how to exploit win32k.sys vulnerabilities by manipulating registry values.
http://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=win32k -> list of win32k.sys vulnerabilities.
A privilege checking issue existed in the i386_set_ldt system call's handling of call gates. A local user may be able to execute arbitrary code with system privileges. This issue is addressed by disallowing creation of call gate entries via i386_set_ldt().
Generating a successful malware from that list of vulnerabilities has two requirements:
1) A remote arbitrary code execution vulnerability has to be linked to a local privilege escalation vulnerability.
2) Those vulnerabilities that can be linked together must both be exploitable. Not all vulnerabilities are exploitable.
The only local privilege escalation vulnerability in that update is shown above. To be linked to a remote vulnerability to create a successful malware requires the following:
1) The call function must be used by a process that also has an remote vulnerability so that the vulns can be linked together to install a payload, such as rootkit. It is likely that not all processes will use that call function. Also, that call function is for 32-bit processes and most client side software in Mac OS X that may contain a remote exploit are 64-bit processes.
2) The two vulnerabilities have to be reliably exploitable once linked together as well as being reliably exploitable independently so that they can actually be linked together. Again, not all vulnerabilities are exploitable.
Linking together remote and local exploits is more difficult in Mac OS X than Windows. This is because Windows has far more local privilege escalation exploits than Mac OS X. Another factor is that the different levels of Windows are less insulated from each other than the different levels of Mac OS X. A common method to achieve privilege escalation in Windows is by manipulating registry values.
http://www.exploit-db.com/bypassing-uac-with-user-privilege-under-windows-vista7-mirror/ -> outlines how to exploit win32k.sys vulnerabilities by manipulating registry values.
http://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=win32k -> list of win32k.sys vulnerabilities.
Kingsly
Oct 27, 12:09 PM
Grrr. Doesn't greenpeace have something better to deal with, like all these diesel Semi-turcks driving up and down the 5 freeway? Doesn't greenpeace have private jets? Boats? Cars, trucks, etc? Those all pollute the environment far more than a MacBook.
I think something should be done for the environment. I care deeply for the children in china who get to dismantle toxic products (notice my location? You're speaking to a big human rights activist here). I just think the changes should be made by someone who is sane.
People don't understand what freedoms truly are. It doesn't mean you get to say and do whatever you want wherever you want - that's anarchy, and anarchy is bad... unless you're the biggest, strongest and most brutal. Freedom of speech really means you can't be jailed or otherwise punished by the government for saying what you want in a pulic arena.
... even then there are instances where you can be jailed or cited for saying something outrageously obscene or otherwise dangerous to public health/safety.
People need to read the constitution (http://www.archives.gov/national-archives-experience/charters/bill_of_rights_transcript.html) more. The rights guaranteed are surprisingly few, and none of them are absolute.
I think something should be done for the environment. I care deeply for the children in china who get to dismantle toxic products (notice my location? You're speaking to a big human rights activist here). I just think the changes should be made by someone who is sane.
People don't understand what freedoms truly are. It doesn't mean you get to say and do whatever you want wherever you want - that's anarchy, and anarchy is bad... unless you're the biggest, strongest and most brutal. Freedom of speech really means you can't be jailed or otherwise punished by the government for saying what you want in a pulic arena.
... even then there are instances where you can be jailed or cited for saying something outrageously obscene or otherwise dangerous to public health/safety.
People need to read the constitution (http://www.archives.gov/national-archives-experience/charters/bill_of_rights_transcript.html) more. The rights guaranteed are surprisingly few, and none of them are absolute.
bdj21ya
Sep 15, 06:57 PM
Apple being a California based company certainly must know about the new law just signed that prohibits hand held cell phone use while driving a car. (Reasonable law if you ask me) with this new law we can assume the phone will have some kind of "hands free" interface. It would be very hard to sell a high end phone that can't be used in a car in California. Apple must know this, the law has been in the works for some time.
It's a stupid law and not enforced. I talk on my phone all the time, while driving a stick shift with no problems. You just have to be willing to take the phone away from your ear when you need two hands.
That said, I really prefer using my bluetooth headset, and I hope Apple does include bluetooth with the phone, if only just for voice.
Also, Apple should look into the idea of wireless headphones/controllers while ignoring battery problems. Who cares if you have to double the size of the device as long as you're just leaving the device in your pocket or backpack, controlling it with a wireless remote, and experiencing it with wireless headphones. I'm not saying there aren't other problems with this, but I am saying that Apple shouldn't be afraid of the iPod getting bigger again to provide battery life for some new features (e.g. widescreen)
It's a stupid law and not enforced. I talk on my phone all the time, while driving a stick shift with no problems. You just have to be willing to take the phone away from your ear when you need two hands.
That said, I really prefer using my bluetooth headset, and I hope Apple does include bluetooth with the phone, if only just for voice.
Also, Apple should look into the idea of wireless headphones/controllers while ignoring battery problems. Who cares if you have to double the size of the device as long as you're just leaving the device in your pocket or backpack, controlling it with a wireless remote, and experiencing it with wireless headphones. I'm not saying there aren't other problems with this, but I am saying that Apple shouldn't be afraid of the iPod getting bigger again to provide battery life for some new features (e.g. widescreen)
ten-oak-druid
Apr 4, 11:51 AM
If you read the linked article you will see that the guard exchanged gunfire with the 2 male suspects. It's not excessive to try to save your own life...
It still must feel bad knowing you killed someone. I mean the intention was likely to wound to remove the threat rather than kill. Even if all was justified, the guard will likely need counseling or time to get over it. If he actually enjoyed it then he's in the wrong line of work.
It still must feel bad knowing you killed someone. I mean the intention was likely to wound to remove the threat rather than kill. Even if all was justified, the guard will likely need counseling or time to get over it. If he actually enjoyed it then he's in the wrong line of work.
EagerDragon
Sep 10, 08:40 PM
I understand the need for a mid level consumer tower, but right now
50%+/- of the market is looking at notebooks.
The cluttered, wire infested desktop is also none too popular with many people.
That's why the AOI iMac is so popular.
The MacBook is already more powerful than the majority of desktops MOST
average users have in their home.
The mini does a respectable job filling the affordable hassle free niche.
Heck, if you don't count the extra RAM cost, the Xeon powered Mac Pro 2.66 Quad is priced neck and neck with the mid level MacBook Pro.
That's amazing when you really think about it.
Even so, I do see a place for a Max mini of some sort starting
with at least the power of half a Mac Pro Tower for $999.00
If the iMac would come with a top of the line graphic card or as a BTO, it would be even more popular.
But the top gamers want more than one card with SLI and that means a different form factor.
I agree something is coming, but it does not have to be a mini. It could be a modified Mac Pro enclosure with liquid cooling for the graphic cards, CPU(s) and chip set. Mini or Maxi not sure. The system will also need to support overclocking of the CPU and Graphic cards. We will find out soon (prob October) for the holidays.;)
50%+/- of the market is looking at notebooks.
The cluttered, wire infested desktop is also none too popular with many people.
That's why the AOI iMac is so popular.
The MacBook is already more powerful than the majority of desktops MOST
average users have in their home.
The mini does a respectable job filling the affordable hassle free niche.
Heck, if you don't count the extra RAM cost, the Xeon powered Mac Pro 2.66 Quad is priced neck and neck with the mid level MacBook Pro.
That's amazing when you really think about it.
Even so, I do see a place for a Max mini of some sort starting
with at least the power of half a Mac Pro Tower for $999.00
If the iMac would come with a top of the line graphic card or as a BTO, it would be even more popular.
But the top gamers want more than one card with SLI and that means a different form factor.
I agree something is coming, but it does not have to be a mini. It could be a modified Mac Pro enclosure with liquid cooling for the graphic cards, CPU(s) and chip set. Mini or Maxi not sure. The system will also need to support overclocking of the CPU and Graphic cards. We will find out soon (prob October) for the holidays.;)
stainlessliquid
Oct 27, 02:59 PM
Considering that Apple doesnt make jack inside their computers, maybe they should be going after the other companies that provide Apple parts? I think that would embarass Apple more since I dont think Apple likes people to know that inside every Mac is abunch of PC parts.
They could blame Apple for going with those companies, that would put pressure on Apple to switch to a greener company and would put pressure on those companies to be greener themselves so they please Apple.
And yes a computer will never been totally environmentally friendly but people are managing to COMPLETELY miss the point of what they want. Other companies like Dell have stopped using parts that have certain very harmful "ingredients" since there are more than enough substitutes that work just as well and dont harm the environment. The only thing stopping other companies is cost and laziness, and considering the premium people pay on macs its actually rather absurd that Apple refuses to use environmentally friendly parts. They arent asking for the impossible and if it looks like they are singling out Apple then its because Apple is literally one of the last major companies to adopt a policy of not buying parts or recycle the things that contain these things. If Dell and pretty much every other major PC maker can use these parts and recycle then I would love to see someone try to explain why Apple is somehow incapable of doing the same. Its like if people bitched about cars polluting less but getting the same performance and having virtually the same price, do some people just like to screw the environemnt?
They could blame Apple for going with those companies, that would put pressure on Apple to switch to a greener company and would put pressure on those companies to be greener themselves so they please Apple.
And yes a computer will never been totally environmentally friendly but people are managing to COMPLETELY miss the point of what they want. Other companies like Dell have stopped using parts that have certain very harmful "ingredients" since there are more than enough substitutes that work just as well and dont harm the environment. The only thing stopping other companies is cost and laziness, and considering the premium people pay on macs its actually rather absurd that Apple refuses to use environmentally friendly parts. They arent asking for the impossible and if it looks like they are singling out Apple then its because Apple is literally one of the last major companies to adopt a policy of not buying parts or recycle the things that contain these things. If Dell and pretty much every other major PC maker can use these parts and recycle then I would love to see someone try to explain why Apple is somehow incapable of doing the same. Its like if people bitched about cars polluting less but getting the same performance and having virtually the same price, do some people just like to screw the environemnt?
Dr.Gargoyle
Sep 15, 06:26 PM
This doesn't mean they will just re-brand a phone...it might just mean they are buying transmitters/etc. from other sources rather than engineering their own. Depending on what they buying "off the shelf," this only makes sense...why re-create the wheel?
Of course they may end up just re-branding a phone, but that doesn't really seem like the Apple thing to do.
Apple will most likely buy a platform from a manufacturer like SonyEricsson. That doesnt mean it will look or feel like a SonyEricsson. LG has bought platforms from SE and they differ quite a lot from SE's phones.
Of course they may end up just re-branding a phone, but that doesn't really seem like the Apple thing to do.
Apple will most likely buy a platform from a manufacturer like SonyEricsson. That doesnt mean it will look or feel like a SonyEricsson. LG has bought platforms from SE and they differ quite a lot from SE's phones.
longsilver
Sep 2, 04:43 PM
I'm sure there's actually a perfectly reasonable explanation, but it would be fun to indulge in groundless speculation and suggest that declining to bother to go to Paris to give this keynote is a riposte to the French and their recent legislative fiddling with DRM and iTMS.
deputy_doofy
Sep 14, 09:50 AM
My prediction:
Definiantly:
Aperture 2.0 ($299)
MacBook Pro:
2 15" and 1 17" model with 2.16 and 2.33 GHz Merom
1 GB RAM standdard, up to 3 or 4 GB
100 and 120 GB HDD's, up to 160 GB
8x DVD+/-RW DL drives for all
X1600 Pro in low-end 15" and X1800 Pro/XT in hi-end 15" and 17"
FW800 on all models
Magnetic latch (no integrated keyboard)
Expresscard/54 slot on all models
$1899 - $2299 - $2499
Maybe:
iPhone with 3.2 mpx camera by Canon
New displays
PowerBook G5
Unikely:
802.11 n (in MacPro and MacBook Pro)
New iSight with IR reciever
MacBook
I'm thinking 2 of those listed under "maybe" are definites. :p
Definiantly:
Aperture 2.0 ($299)
MacBook Pro:
2 15" and 1 17" model with 2.16 and 2.33 GHz Merom
1 GB RAM standdard, up to 3 or 4 GB
100 and 120 GB HDD's, up to 160 GB
8x DVD+/-RW DL drives for all
X1600 Pro in low-end 15" and X1800 Pro/XT in hi-end 15" and 17"
FW800 on all models
Magnetic latch (no integrated keyboard)
Expresscard/54 slot on all models
$1899 - $2299 - $2499
Maybe:
iPhone with 3.2 mpx camera by Canon
New displays
PowerBook G5
Unikely:
802.11 n (in MacPro and MacBook Pro)
New iSight with IR reciever
MacBook
I'm thinking 2 of those listed under "maybe" are definites. :p
MacNewsFix
Apr 19, 09:20 AM
Samsung also feels the need to depict its products just like Apple's, on a reflective white surface.
http://hopelesslyflawed.files.wordpress.com/2011/03/iphone-galaxy-s.jpg
I wonder how it feels to be a designer for Samsung where you are forced to emulate the competitor's work rather than implement your own vision.
Looking at that image now, I can't believe Samsung missed the opportunity to slap the silhouette of a half-eaten pear on the back. LOL
http://hopelesslyflawed.files.wordpress.com/2011/03/iphone-galaxy-s.jpg
I wonder how it feels to be a designer for Samsung where you are forced to emulate the competitor's work rather than implement your own vision.
Looking at that image now, I can't believe Samsung missed the opportunity to slap the silhouette of a half-eaten pear on the back. LOL
Alcibar
Apr 23, 09:06 AM
Some of us principally us the air for what it was designed for computing on the go i.e. travel. When you travel a lot it is nice to be able to kick back and enjoy a game or two. The ultimate 13 in plays all the recent games pretty well and works as a second laptop with my company provided POS.
Drew n macs
Mar 29, 12:56 PM
I cant downplay a windows phone cause I only had one in my hand for 30 seconds or so, Windows has its work cut out for them against apple eco system of devices and intergration. Best of luck to the competition. Competition is a good thing.
Dr.Gargoyle
Sep 14, 09:32 AM
Aperture update - definite
MacBook Pro C2D - likely
iPod photo accessory - maybe
Cinema displays - not likely
iPhone - no way
Still a bit anemic isnt it?
MacBook Pro C2D - likely
iPod photo accessory - maybe
Cinema displays - not likely
iPhone - no way
Still a bit anemic isnt it?
theelysium
May 3, 04:11 PM
Because the iMac Display mode apparently is Thunderbolt-dependent, not backward compatible with DisplayPort-only systems, I wonder if this means you will be able to daisy-chain iMacs? For example, have one iMac in the center as the master; two iMacs (one on either side) each connected via Thunderbolt to the center, acting as two displays. Then, could you slave two more Cinema Displays (or any DisplayPort monitor, even more iMacs!) from those two 'outer' iMacs for a total of five displays? Apple said in the first generation of ThunderBolt systems that they could support two displays per Thunderbolt port with daisy-chaining, and AMD's chips can support up to 6 displays.
You could just use teleport http://www.abyssoft.com/software/teleport/
You could just use teleport http://www.abyssoft.com/software/teleport/
stewacide
Sep 27, 12:35 AM
If I had to guess as to why Apple would go with an exclusive provider to start, I would say so as to play hardball with the network providers.
Apple doesn't want to gum their pretty phones up with provider ick-ware like other manufacturers have to (just like it didn't want to e.g. 'Intel Inside' its pretty boxes), so they make a deal whereas in exchange for initial exclusivity Cingular agrees to relent control over the phones software and services (so that it say interfaces with the iTunes store for music and tones not Cingular's store: although I'm sure the service provider will charge the full market rate for data transfer). Then when the iPhone becomes a huge hit the other providers won't have any choice if they want to get on board as well.
I don't see why Apple would start a virtual operator, because they have no interest in getting into the service provider game. They can get what they really want - an opt-out of the cruddy operator system in the US especially - through market weight alone.
Apple doesn't want to gum their pretty phones up with provider ick-ware like other manufacturers have to (just like it didn't want to e.g. 'Intel Inside' its pretty boxes), so they make a deal whereas in exchange for initial exclusivity Cingular agrees to relent control over the phones software and services (so that it say interfaces with the iTunes store for music and tones not Cingular's store: although I'm sure the service provider will charge the full market rate for data transfer). Then when the iPhone becomes a huge hit the other providers won't have any choice if they want to get on board as well.
I don't see why Apple would start a virtual operator, because they have no interest in getting into the service provider game. They can get what they really want - an opt-out of the cruddy operator system in the US especially - through market weight alone.
SeniorGato1
Apr 19, 08:23 AM
I think Apple should sue any cell phone manufacturer that uses a screen and buttons.
EagerDragon
Sep 14, 07:52 PM
If you'd followed the dSLR world at all over the past two years, you wouldn't ask this question. :) Canon and Nikon are doing well; most everyone else is dropping like flies. Sony is trying to pick up the pieces that were Konica-Minolta's dSLR business, but at best they're going to be a distant third behind the Big Two. Pentax and Olympus are holding on as far as I know, but they are not doing well.
It would be a very poor move for Apple, and I have no doubt they realize this. You might think Apple has a rabid fan base to draw on - go read any "Nikon vs. Canon" thread on any photo discussion board sometime to see REAL rabidity. :D
I can see why they are not doing that well...... A film SLR is a heck of a lot cheaper and they were harder to make. They are charging way too much. Back in the old times we all had film SLR's for the quality, ability to change lens (not that different from todays lenses), etc. Unless you are a pro the prices are way out of most people budget. You spend 700 to 4000 for a body and every lens is 500. Crazy.
It would be a very poor move for Apple, and I have no doubt they realize this. You might think Apple has a rabid fan base to draw on - go read any "Nikon vs. Canon" thread on any photo discussion board sometime to see REAL rabidity. :D
I can see why they are not doing that well...... A film SLR is a heck of a lot cheaper and they were harder to make. They are charging way too much. Back in the old times we all had film SLR's for the quality, ability to change lens (not that different from todays lenses), etc. Unless you are a pro the prices are way out of most people budget. You spend 700 to 4000 for a body and every lens is 500. Crazy.
FrankySavvy
Mar 22, 01:48 PM
Wirelessly posted (Mozilla/5.0 (iPhone; U; CPU iPhone OS 4_3 like Mac OS X; en-us) AppleWebKit/533.17.9 (KHTML, like Gecko) Version/5.0.2 Mobile/8F190 Safari/6533.18.5)
Psyched! Late April, Early Nay would be perfect timing for me to pick up a brand new iMac. :)
Psyched! Late April, Early Nay would be perfect timing for me to pick up a brand new iMac. :)
macsmurf
Apr 11, 04:20 AM
Want an un-encrypted copy of that iTMS rental movie? Stream it to an airplay-ripper you've downloaded off the 'net, and it'll be re-compressed in non-DRM form for you to play back whenever you wish.
Can't you just do this anyway with some other kind of ripper?
Can't you just do this anyway with some other kind of ripper?
nitynate
Sep 12, 02:53 PM
Dear Apple,
I appoligise for my earlier outburst.
I really do love you.
Well.... In a creepy-ish kind of way. THATS NOT THE POINT!!!!!
I want the 8GB nano in green.
Love,
Nathan
I appoligise for my earlier outburst.
I really do love you.
Well.... In a creepy-ish kind of way. THATS NOT THE POINT!!!!!
I want the 8GB nano in green.
Love,
Nathan
age234
Sep 5, 04:15 PM
I really hope Apple comes out with a new app for this, because video in iTunes completely sucks.
jafd
Apr 25, 02:55 PM
Those who don't want the superdrive have the option of an air. People in the music industry will always have a use for CD's. I just think no superdrive makes it an air varient not a pro.
Ehrrrm, a superdrive is what invariably fails first and gives your laptop almost an extra kilogram of weight you need to carry around. Because taking it off means losing warranty.
A superdrive is not a trait of a "Pro" laptop. The speed and reliability are. Imagine a RAID array of SSDs packed together in a package the size of a superdrive. Imagine a pico projector in that slot � this is what Toshiba is going to do real soon now.
Ehrrrm, a superdrive is what invariably fails first and gives your laptop almost an extra kilogram of weight you need to carry around. Because taking it off means losing warranty.
A superdrive is not a trait of a "Pro" laptop. The speed and reliability are. Imagine a RAID array of SSDs packed together in a package the size of a superdrive. Imagine a pico projector in that slot � this is what Toshiba is going to do real soon now.
AppleScruff1
Apr 25, 05:57 PM
Hopefully they get rid of the sharp needle points where you open the cover. I know a guy who slashed his wrist open on the sharp point.
QCassidy352
Jul 14, 03:18 PM
Actually October 19, 2005 for the 970MP.
the original quote was to "G5/PPC fanboys," not "970MP fanboys." But whatever. My point is that it's hardly surprising that a bleeding edge chip beats an old one. That's kinda the point of technological progress, no?
Now u see why Steve wet his pants when he saw these chips over a year ago. Then Decided to switch , He knew if he had not. Apple's platform would be dead in the water.
So then AMD and IBM are dead in the water? Somebody better call them and tell them.
Believe it or not, the fact that intel is releasing new chips does not mean that the other companies have given up or that intel has "won." IBM's desktop and server chips have been and will continue to be very competitive. Apple switched because PPC was not cutting it for laptops.
the original quote was to "G5/PPC fanboys," not "970MP fanboys." But whatever. My point is that it's hardly surprising that a bleeding edge chip beats an old one. That's kinda the point of technological progress, no?
Now u see why Steve wet his pants when he saw these chips over a year ago. Then Decided to switch , He knew if he had not. Apple's platform would be dead in the water.
So then AMD and IBM are dead in the water? Somebody better call them and tell them.
Believe it or not, the fact that intel is releasing new chips does not mean that the other companies have given up or that intel has "won." IBM's desktop and server chips have been and will continue to be very competitive. Apple switched because PPC was not cutting it for laptops.
No comments:
Post a Comment