[n8910]

Link removed as of recent developments.

Paranoid Android looks the best so far, see: http://www.unsanity.com/haxies/pa

Unfortunately it is not an easy deployment for 400 some macs.

[Kristoff]

In light of the issue, I don't think very many people will be clicking on that link.

[Person Man]

Originally posted by Kristoff:
In light of the issue, I don't think very many people will be clicking on that link.

Agreed.

One should NEVER use a security exploit to fix a security exploit. Under ANY circumstances.

[n8910]

[Person Man]

Originally posted by n8910:
It's a dang shot better than the people who posted examples of how the exploit works, but still left your mac unprotected.

Actually, it isn't. There is plenty of potential for something to go wrong.

[Brass]

Originally posted by Person Man:
Actually, it isn't. There is plenty of potential for something to go wrong.

Yeah, like the Windows virus that was supposed to fix another windows virus, but caused more problems than the original.

[n8910]

[Person Man]

Originally posted by n8910:
There is plenty of potential for things to go wrong if one does nothing.


I am open to a better solution. Lets hear it.

Do it manually, or use one of the many programs that has already been written or wait for Apple to fix it themselves.

Just DON'T use the exploit itself to fix the exploit.

[n8910]

Originally posted by Person Man:
Do it manually, or use one of the many programs that has already been written or wait for Apple to fix it themselves.

Just DON'T use the exploit itself to fix the exploit.

Revel in the beauty of the internet. I did write it, and I think disk:// urls are the way to go. No servers to mount, no files to download and then delete. help uri's are also good things, but they should ask before running blindly.

I edited step 3 just for you which, btw never ran automatically anyhow.


wire send is an excellent cd btw.

[Sarc]

I just tried the link, so far, using Opera has saved me some headaches.

[n8910]

Originally posted by Sarc:
I just tried the link, so far, using Opera has saved me some headaches.

It doesn't run by itself.

[theolein]

This is really not the way to go, I think. While you can be proud of yourself for having written a script that modifies the one instance of OpnApp.scpt mentioned in the original thread (please read it), the actual vulnerability is far more serious than that, in that not only are there very many instances of OpnApp.scpt on the disk, but that it is not even needed to exploit this vulnerability. Anyone can create their own protocol, say owned://, write an app that does some damange, place it in a .dmg (even this is not needed on local network shares, such as in a school or university) and write a webpage directing both the disk image to mount and execute the protocol without the user doing anything.

In short, your app does not solve anything, sadly.

[n8910]

Originally posted by theolein:
This is really not the way to go, I think. While you can be proud of yourself for having written a script that modifies the one instance of OpnApp.scpt mentioned in the original thread (please read it), the actual vulnerability is far more serious than that, in that not only are there very many instances of OpnApp.scpt on the disk, but that it is not even needed to exploit this vulnerability. Anyone can create their own protocol, say owned://, write an app that does some damange, place it in a .dmg (even this is not needed on local network shares, such as in a school or university) and write a webpage directing both the disk image to mount and execute the protocol without the user doing anything.

Ack. I see there are quite a few new discoveries since last night.

BTW - my fix uses the locate database to find all occurrrences of the script, and fix them all. In patching the macs at work I came across a few laptops that did not have a locate database because /etc/weekly had never been run, and in those cases the script falls back and only patches the main help app. Thing is you need to run weekly as sudo, as well as the locate update command, and I didn't feel comfortable asking for those permissions via applescript.

I could use authorization services in obj-c, and call a shell script, but I didn't.

[Dale Sorel]

Originally posted by n8910:
Paranoid Android looks the best so far, see: http://www.unsanity.com/haxies/pa

I've tested PA, and it seems to do the trick