Welcome to the MacNN Forums.

MindFad · 06:27 PM

Get more secure today (even if it is the 4th)!

Edit: Whoops, sorry, guys! PNG orgy!

hay mods, culd u edit my title thx?

ManOfSteal · Oct 4, 2004, 04:08 PM

Let the "I have to restart" bitching begin!

MindFad · Oct 4, 2004, 04:37 PM

Originally posted by manofsteal:
Let the "I have to restart" bitching begin!

OMFG, I HAD AN 8-DAY UPTIME!

drive-thru · Oct 4, 2004, 04:39 PM

Originally posted by manofsteal:
Let the "I have to restart" bitching begin!

22:37 up 7 days, 8:55, 3 users, load averages: 1.81 1.63 1.44
OMGWTF 4ppl3 15 t3h l33t upt1m3 d3st0y0r

Thanks MindFad

tooki · Oct 4, 2004, 06:15 PM

Why did this need a screenshot at all?

tooki

Kenneth · Oct 4, 2004, 06:20 PM

For me...
16:19 up 7 days, 23:39, 2 users, load averages: 0.64 0.73 1.22

So any weird problem after the patch?

MindFad · Oct 4, 2004, 06:24 PM

Originally posted by tooki:
Why did this need a screenshot at all?

tooki

Who ****in' knows? Mostly to bug people who don't like unnecessary screenshots, I would guess. At least it's not affecting the Internet environment.

utidjian · Oct 4, 2004, 08:29 PM

Originally posted by manofsteal:
Let the "I have to restart" bitching begin!

Heh

Well there is one update that has finally arrived... the fix to the incorrect disable root problem in NetInfoManager Only took them since whenever 10.3 came out.

The CUPS password discovery looks important if you use authentication for printing.

The ServerAdmin looks important also... again, if you use it.

Otherwise just a sundry collection of DoS and buffer overflows.

None of the components from the lsbom should really require a restart IMO except perhaps NetInfoManager.

ApeInTheShell · Oct 4, 2004, 08:38 PM

Pictures are often better than words and give a little more information than a plain:

hey they came out with a security update so prepare to restart your computers and probably back up your data because we all do that, duhhhhhhhhhhhhh,yeah.

Where does all this complaining get us? Send Apple some feedback of your troubles and get on with life.

CharlesS · Oct 4, 2004, 09:33 PM

Originally posted by utidjian:
None of the components from the lsbom should really require a restart IMO except perhaps NetInfoManager.

NetInfo? Yes.

NetInfo Manager? It's just an editor app, for crying out loud!

utidjian · Oct 4, 2004, 09:42 PM

Originally posted by CharlesS:
NetInfo? Yes.

NetInfo Manager? It's just an editor app, for crying out loud!

Oh I agree! But why don't you tell Apple: http://docs.info.apple.com/article.html?artnum=61798

They seem to think it is the NetInfoManager's fault. Isn't it always the "managers" fault?

Angus_D · Oct 5, 2004, 10:22 AM

QuickTime is probably what makes th restart necessary.

Powaqqatsi · Oct 5, 2004, 03:34 PM

Originally posted by tooki:
Why did this need a screenshot at all?

tooki

It adds colour to the thread.

cal6n · Oct 5, 2004, 06:46 PM

Originally posted by utidjian:
Heh

Well there is one update that has finally arrived... the fix to the incorrect disable root problem in NetInfoManager Only took them since whenever 10.3 came out.

The CUPS password discovery looks important if you use authentication for printing.

The ServerAdmin looks important also... again, if you use it.

Otherwise just a sundry collection of DoS and buffer overflows.

None of the components from the lsbom should really require a restart IMO except perhaps NetInfoManager.

IIRC, some security issues involve unencrypted passwords being written to RAM. A restart will flush these. Deal with it!

Siggi_arni · Oct 6, 2004, 01:30 PM

Updating software makes my soooo horny, check out my website at: www.horny-n-up-to-date.com

utidjian · Oct 6, 2004, 02:53 PM

Originally posted by cal6n:
IIRC, some security issues involve unencrypted passwords being written to RAM. A restart will flush these.

The problem, as I recall it, was not only were the passwords written to RAM in plaintext but also swapped to a file as plaintext. Then if one could boot the machine from CD or external disk the swapfile could be grepped for the password. The swapfile is only flushed on bootup, not on shutdown. This was discussed at some length on this forum a few months ago.

If the swapfile is encrypted then that should eliminate the unencrypted-passwords-in-swapfile problem. Encrypted swapfile(s) are a proposed new feature in Tiger.

There is also a far more difficult problem of passwords, in general, being written to RAM. At the same time it is also far more difficult for a cracker to exploit passwords stored in RAM. This would be very difficult to control and avoid unless all app creators that use any kind of passwords also used a secure framework for encrypting passwords in RAM and/or overwriting the place in RAM where they were stored immediately after they were used.

The problem in NetInfo(Manager) that I was referring will not be fixed by any amount of restarting.

Deal with it!

Aye aye, Sir!

FYI I already had "dealt with it"... I had to do some careful NetInfo editing. But, as usual, we had to wait for Apple to "deal with it" to fix it properly. This only took them about almost a year.

Blue Flame · Oct 6, 2004, 06:48 PM

so has everyone installed this without issue? there are some folks on macslash that seem to be having issues with it.....