Are there no safe attachments?

Over at Ars Technica, Eric Bangeman points out a Safari vulnerability worth taking note of. “The widely reported Trojan horse for Mac OS X may be a dud. However, a security flaw in Apple’s Safari browser is something to be concerned about.” It looks like Apple made the poor decision of depending on the file extension to determine how “safe” a document is to open — even if the document also has metadata making it an executable script. Tsk, tsk. Wise advice in the article: turn off the Safari option to “Open “safe” files after downloading.” Even Apple puts “safe” in quotes — that should be a hint!

No comments yet.

Leave a Reply

Powered by WordPress. Designed by Woo Themes

This work by Ted Roche is licensed under a Creative Commons Attribution-NonCommercial-ShareAlike 3.0 United States.