Follow TG Daily

Most Discussed Articles

More Discussions»

Articles By Tag

3G amd Android antitrust apple ARM blackberry china Dell google Green Dam hp ibm intel iphone microsoft mozilla netbook nintendo nokia PS3 Samsung security smartphone Sony twitter upgrade wii Windows 7 Xbox 360
Read more at
   SmallNetBuilder.com
Try our new and free
Price Comparison Service

Partners

Reviews & Rankings



Safari 3.0 beta hit with six vulnerabilities within hours after launch

PDF Print E-mail
Security
By Wolfgang Gruener   
Tuesday, June 12, 2007 12:13
San Francisco (CA) – Apple may have to start patching security holes in its new Safari browser sooner than expected: Security researchers already have discovered multiple Denial of Service (DoS) and remote execution exploits.  

The first round of vulnerabilities were described on three security blogs, published by security experts Aviv Raff, David Maynor and Thor Larholm. The findings dent Apple’s claim that Safari 3.0 was “designed to be secure from day one.”  

Apple has not yet reacted to these reports; David Maynor of Errata Security saying he does not intend to release the information about the vulnerabilities to Apple and explained this decision by stating “if a vendor answers a vulnerability disclosure with marketing and spin attempts, we no longer report vulnerabilities to that vendor but the information goes into our Hacker Eye View program for customers and will be used in pen-testing. We do not sell the vulnerabilities to any 3rd party.”

It is interesting to note that Apple almost exclusively highlighted the browser’s performance and not on its security capabilities in the product’s press release. However, the firm outlines security features on its website and writes that the software supports “robust encryption (…) that protects all your information from online eavesdroppers.” There is no information on advanced security features that have been available in Microsoft’s Internet Explorer 7 or Firefox 2 – such as an anti-phishing filter. Some Mac-focused websites mentioned that Safari will be receiving this features, but it appears that it won’t be an Apple-developed feature, but an add-on that uses Google’s phishing filter.

Since Safari 3.0 is still in beta, Apple has time to fix vulnerabilities and its relationship with security researchers. Bugs and vulnerabilities should be expected in test versions, but Apple’s decision to provide a Windows browser certainly will expose the software to much more aggressive hackers.

Comments (32)Add Comment
Jun 12, 2007 12:27     
Jun 12, 2007 12:42     
Jun 12, 2007 12:46     
Jun 12, 2007 13:01     
Jun 12, 2007 13:09     
Jun 12, 2007 13:19     
Jun 12, 2007 13:34     
Jun 12, 2007 13:42     
Jun 12, 2007 13:57     
Jun 12, 2007 14:37     
Jun 12, 2007 15:35     
Jun 12, 2007 15:43     
Jun 12, 2007 15:45     
Jun 12, 2007 16:55     
Jun 12, 2007 17:04     
Jun 12, 2007 19:31     
Jun 13, 2007 02:20     
Jun 13, 2007 04:51     
Jun 13, 2007 07:57     
Jun 13, 2007 09:51     
Jun 13, 2007 10:06     
Jun 13, 2007 12:56     
Jun 13, 2007 16:14     
Jun 13, 2007 16:25     
Jun 13, 2007 19:23     
Jun 13, 2007 19:26     
Jun 14, 2007 11:39     
Jun 16, 2007 00:30     

Write comment
This content has been locked. You can no longer post any comment.

busy
Recommend article:
Slashdot
Digg
Delicious
Technorati
YahooMyWeb
Stumble
NewsVine
Ma.gnolia
Subscribe to the TG Daily Newsletter
Email:
 

Shop Keywords: Apple, Safari, browser, security, vulnerability

-view -business -118 --118
Powered By Page_Cache by Ircmaxell
Generated in 1.02458190918 Seconds