Apple

Monday, Apple released Safari 3 Beta for Windows. http://www.apple.com/safari/download/

Just hours later researchers were blogging about bugs, crashes and potential exploits.

Researcher Aviv Raff: Aviv Raff On .NET

Security researcher David Maynor: Errata

Ryan Naraine at Zdnet: Safari on Windows could be big target for malware

Leander Kahney, Cult of Macintosh: Who in Their Right Mind Would Run Safari on Windows?

On the Safari download page:

Security
Apple engineers designed Safari to be secure from day one.

What emerged was mutual respect, humour, and a unique analysis and history of the technology world from the two icons of the computer industry.

The Wall Street Journal has a transcript Gates, Jobs Reminisce of the interview Kara Swisher and Walt Mossberg conducted with Microsoft Chairman Bill Gates and Apple CEO Steve Jobs, at the fifth annual All Things Digital Conference.

Ars Technica
Ken Fisher writes:

Apple embeds your account information in all songs sold on the store, not just DRM-free songs. Previously it wasn’t much of a big deal, since no one could imagine users sharing encrypted, DRMed content. But now that DRM-free music from Apple is on the loose, the hidden data is more significant since it could theoretically be used to trace shared tunes back to the original owner. It must also be kept in mind that this kind of information could be spoofed.

Article

Does Sophos’ Switch Argument Hold Water?
Posted by timothy on Thursday July 06

Wednesday’s press-release-borne message from security firm Sophos that the best way for Windows users to compute untroubled (or less troubled) by malware is to switch to Mac OS X drew more than 500 comments; read on for the Backslash summary of the conversation.

Slashdot

Apple Mac Products Affected by Multiple Vulnerabilities
Original release date: May 12, 2006
Last revised May 16, 2006
Source: US-CERT

Cyber Security Alert SA06-132A
Systems Affected
Apple Mac OS X version 10.3.9 (Panther) and version 10.4.5 (Tiger)
Apple Safari web browser
Apple Mail
Previous versions of Mac OS X may also be affected.
Overview
Mac OS X, Safari web browser, Mail, and other products are affected by multiple vulnerabilites. Apple has released Security Update 2006-003 to address these vulnerabilities, the most serious of which may allow a remote attacker to place and run malicious code on your computer.
Solution
Install an Update

Install Apple Security Update 2006-003 through Apple Update.
Disable “Open ’safe’ files after downloading”

For additional protection, disable the option to “Open ’safe’ files after downloading,” as specified in “Securing Your Web Browser.”

For more technical information, see US-CERT Technical Alert TA06-132A.

Copyright © is the original authors

Apple’s growing market share, new chips said making it more of a target
MSNBC
AP (Associated Press)
Updated: 4:15 p.m. ET April 30, 2006

SAN FRANCISCO - Benjamin Daines was browsing the Web when he clicked on a series of links that promised pictures of an unreleased update to his computer’s operating system.

Instead, a window opened on the screen and strange commands ran as if the machine was under the control of someone — or something — else. Daines was the victim of a computer virus.

Such headaches are hardly unusual on PCs running Microsoft Corp.’s Windows operating system. Daines, however, was using a Mac — an Apple Computer Inc. machine often touted as being immune to such risks.

Story continued:

Updated: 03-01-06

Apple security updates

Sophos in Mac OS X worm false alarm
Cure worse than disease
By John Leyden
Published Thursday 23rd February 2006

Sophos has apologised after releasing a faulty signature update that flagged up legitimate Mac OS X system files as infected with a new low-risk worm, Inqtana-B.

The faulty signature file, issued on Tuesday, February 21, falsely identified a number of component files of Microsoft Office applications as infectious.

The UK-based anti-virus firm issued a new update in short time, two hours after the dodgy signature files went out.®

Third worm hits Mac OS
TechWorld
By Matthew Broersma
22 February 2006

Security researchers have confirmed what may be the worst-yet security flaw for Apple’s Mac OS X, following the appearance of two Mac worms in a single week.

The newly disclosed bug allows attackers to disguise malicious shell scripts as harmless files stored in ZIP archives. The bug is considered particularly dangerous because it can be used to execute malicious code on a system automatically via the Safari web browser, which is set by default to open ZIP archives.

F-Secure

Like Inqtana.A the .B and .C are locked to certain bluetooth addresses and are time limited to 24. February 2006, so they will not be able to replicate on any real environment and will work only in specially crafted lab. However it is possible that some virus author will create similar worms that are not intentionally limited, so please make sure that your OS X is up to date.

Red Herring

Security researchers said Friday they have found a second virus that affects Apple computers running the Mac OS X operating system, further eroding the long-held belief that Mac machines are more impervious to attacks than Microsoft’s Windows-based personal computers.