What is Digg?Sponsored by Dragon Age: Origins
Can't get enough Dragon Age: Origins? Play the flash game. view!
DragonAgeJourneys.com - Play the free companion flash game to Dragon Age: Origins.
81 Comments
- tama00, on 06/16/2009, -3/+48Did you guys even read the article? The story is about the secuity hole being patched.
This problem has been known for a while and has been on Digg a couple of times already. Windows also suffered from the same flaw but patched it much eariler. There is nothing amazing about this. - metalgel, on 06/16/2009, -2/+35When a security hole is found in code, does the developer who wrote it clear his throat at a meeting and be like "*ahem*....my bad"? and then the manager throws his pencil at the table and is like "your bad? YOUR BAD?! GTFO!"
- heyimfromreddit, on 06/16/2009, -4/+37But can you still download the internet?
- suprememilo, on 06/16/2009, -1/+26yay I can click on random links that I don't know where they lead to again!
- heyimfromreddit, on 06/16/2009, -6/+29Well, uh, no software is free of bugs. And this was a security hole in Java. The only issue was that Apple took so long to release the update.
- perogi21, on 06/16/2009, -0/+20No, usually it's the manager telling the developer to ship it out with the bug because he has a deadline to meet in order to make his bonus...
- Kruez, on 06/16/2009, -3/+21There are a lot of security holes infecting all aspects of life, especially software. You're just being a dick by making it sound like it's only Apple who has these problems; especially since it was a bug in all Java implementations, making it more of a Sun issue to begin with.
- heyimfromreddit, on 06/16/2009, -4/+19Java isn't an Apple product
- heyimfromreddit, on 06/16/2009, -2/+16No worries. You didn't realize that "Apple" wasn't an OS either.
- heyimfromreddit, on 06/16/2009, -0/+13No, please don't.
- dremspider, on 06/16/2009, -3/+16The issue comes with how Apple does their patching, and this is just representative of how they are doing it is terribly wrong. My understanding is that Apple does not want Sun to update Java for them. Instead Apple wants to be responsible. This is fine so long as they start to take responsibility for the security of the Java that they support. Sun has offered to supply the packages and has been shot down. Apple wants total control (which seems to be the Apple way) over their whole system and Java is a pretty critical portion of the system. This is a big deal because it is showing a flaw in the development cycle of Apple. Five months is far too long to patch a critical vulnerability. If Apple is going to start saying they are more secure then windows they better start proving it, and for a bit they have been failing.
- heyimfromreddit, on 06/16/2009, -0/+11Welcome to Digg. Your input has been much appreciated. Thank you.
- cmdrNacho, on 06/16/2009, -0/+11there is jdk6 available from apple, just 64bit
- antwan09, on 06/16/2009, -0/+11I'd buy a PC too if Microsoft saw me in the parking lot at Best Buy
- soopafly, on 06/16/2009, -1/+11Already patched!!!
- cygnus2112, on 06/16/2009, -1/+10I'm gonna make this pencil disappear.
- heyimfromreddit, on 06/16/2009, -0/+9I'm a Mac user but you're absolutely right. I'm shocked and disappointed at how long it took for them to release this patch. An easily-modifiable proof of concept was released around 25 days ago. This should have been patched a few days later AT THE LATEST. Or, yknow... SIX MONTHS AGO!
The exploit basically allowed any applet to gain the same privileges on the system as the user.
At least on Windows, this sort of thing can generally be avoided (most of the time) by keeping updated with patches! - fifaigor, on 06/16/2009, -1/+9stupid story, its been patched, why do i give a crap?
- LonelyTylenoL, on 06/16/2009, -0/+8Capitalism at its finest...
- LonelyTylenoL, on 06/16/2009, -9/+16Now if only Apple would just let us download the JDK 6!
- kanningt, on 06/16/2009, -0/+6did you read the article?
- regularsteven, on 06/16/2009, -1/+7thats a good 90% of the problem...
- inactive, on 06/16/2009, -5/+11I've download over a gig of updates from Apple in the past month.
FFFFFFFFFFUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUU - Thomasaka, on 06/16/2009, -3/+8Hmm.. I seem to remember commercials claiming PC's were bad because of this very thing..
- ultrafez, on 06/16/2009, -0/+4Funny how nobody has mentioned that in this article so far...
- KibibyteBrain, on 06/16/2009, -0/+4Actually, this issue has been fixed in all other current JREs except Apple's. Thats part of the cause for outcry in the security community. And this isn't news, this has been on security news sites for weeks now.
- kreatre2007, on 06/16/2009, -2/+5Downloaded and installed. I don't feel any safer than I felt earlier today before the update was released. Was this really THAT big of a deal? Apple probably didn't see this as very important. Otherwise, they would have issued the patch a long time ago.
- thefox84, on 06/16/2009, -9/+12Let the Mac vs. PC flamewars begin!
- KibibyteBrain, on 06/16/2009, -0/+3True, but there is a difference between Safety and Security. Safety is what most customers want. quite frankly, now with new security technologies in Vista/7 Windows has more security features than OSX which mostly just has the basic features of a UNIX system(which are mostly just permissions, and not as granular as the permissions/rights combos in newer windows, leading to catch 22s that lead to insecurity, but I digress), but OSX is still *SAFER* in a no contest way in terms of actual threats in the wild, and the lack of any major worms or threats that don't require user intervention. Of course, this could change fast, so Apple should not push their luck. All the malware for OSX right now are trojans, and no OS right now is really hardened against trojans out of the box.
Compare a house with the front door left unlocked in the middle of the country to a house in the highest crime neighborhood of a major city with a state of the art security system. Not nearly as secure, but much safer. - surferjoemaui, on 06/16/2009, -2/+5123 You crack me up! Looking forward to more on science and programing :)
- LonelyTylenoL, on 06/16/2009, -0/+3Syrup on salad?
DO NOT WANT - Nydendarin, on 06/16/2009, -15/+17Awe.. Mac gots da sniffles.
- 4321234, on 06/16/2009, -1/+3This raises the potential of a big mac attack.
- sybersnake, on 06/16/2009, -0/+232bit version http://landonf.bikemonkey.org/static/soylatte/
- AraleNorimaki, on 06/16/2009, -0/+2Java for Mac OS X 10.5 Update 4
http://support.apple.com/downloads/Java_for_Mac_OS ...
Java for Mac OS X 10.4, Release 9
http://support.apple.com/downloads/Java_for_Mac_OS ... - luke255, on 06/16/2009, -1/+3Your desire to share your opinion > My desire to hear your opinion
- Thomasaka, on 06/17/2009, -0/+1The alleged point was that PC's have security issues and Macs don't. This article proves that ad to be false. I'd say you're the one who missed the point.
- Maraud3r, on 06/16/2009, -1/+2Good point. I'd guess the more adhesive the condiment the better their tongue will bind.
- MattBD, on 06/16/2009, -0/+1Apple don't really have any excuse - most Linux distros will patch something like this in a day or two. And they probably aren't getting paid (maybe for some commercial distros, but certainly not for something completely community-based like Debian), so it's getting done by people in their spare time.
- inkswamp, on 06/16/2009, -3/+4Can you offer some evidence to support that assertion? So far we have one model upon which this assumption rests--Windows. There actually exists a lot of evidence that contradicts what you just said. The assumption is that Windows only has vulnerabilities because it's in such widespread usage. I think it's pretty clear that the poor security in Windows owes a lot to bad decisions and sloppy programming from Microsoft as well as that company's historical lack of attention to security.
- kreatre2007, on 06/16/2009, -7/+8Not likely, jack ass! Have fun with your bug ridden, Windows full of more holes than a slice of Swiss cheese.
- kreatre2007, on 06/16/2009, -2/+3Sick ***** bastard! Reported!
- perogi21, on 06/19/2009, -0/+1Thx Mac, at least someone did :-)
- elipabst, on 06/16/2009, -0/+1Apple in general tends to have a much longer lag in their patch release time than other OSs. I was collating security vulnerability warnings for a mailing list and noticed that Apple was always one of the last vendors to release a warning/patch, regardless of how serious the vulnerability was.
- srg13, on 06/16/2009, -2/+3I love how the article is about an issue being patched, but the Digg headline makes it sound like it's still venerable.. Pure flamebaiting if you ask me...
- 123bucklemyshoe, on 06/16/2009, -4/+5Actually I'm extremely interested in science and programming and based on my research it wasn't really a security hole per say it was more of a thing where people who are stupid with computers sorry no offense just do the wrong thing and then they have a problem. Based on my sources it's actually not Mac's fault that this happened it's just that they fixed it even though the stupid people still haven't learned what they're doing wrong. Sorry if I offended anyone by the way I don't mean to say anyone is specifically stupid I'm just saying but yeah.
- LonelyTylenoL, on 06/16/2009, -1/+2Crap, Ignore the parent comment....what I meant to say was:
I use a Mac computer, as well as a Windows computer. Personally, when I get completely pissed at one OS, I switch to the other. - macplenty, on 06/16/2009, -1/+2@perogi21
For what it's worth, I got your Chris Rock reference. - krisrm, on 06/16/2009, -0/+1Hmm. So do I, I just haven't found myself being completely pissed with Windows, yet.
Maybe I'm too patient. - noahhoward, on 06/16/2009, -0/+1I've seen bug fixes done two ways.
If seen the bug report taken at face value and a quick and dirty fix (band-aid) made up and pushed out the door.
Then I've seen the bug report reviewed, the system reviewed, the source of the problem found and fixed without causing other problems.
I'm glad to see that the indicators show Apple does it right. -
Show 51 - 81 of 81 discussions
© Digg Inc. 2009
— Content created and posted by Digg users is