Re: [lopsa-tech] OSX Mavericks root exploit, and Safari

2015-04-21 Thread Edward Ned Harvey (lopser)
> From: tech-boun...@lists.lopsa.org [mailto:tech-boun...@lists.lopsa.org] > On Behalf Of Alexander Lobodzinski > > Well, maybe your friends want to check if the third choice is feasible: > patching OS X Mavericks themselves. See > https://reverse.put.as/2015/04/13/how-to-fix-rootpipe-in-maverick

Re: [lopsa-tech] OSX Mavericks root exploit, and Safari

2015-04-20 Thread Alexander Lobodzinski
> What is annoying a number of OS X users I know is that Yosemite has > broken a fair number of things, including smart card behaviour > (http://ludovicrousseau.blogspot.com/2014/11/os-x-yosemite-and-smart-cards-status.html > http://bioteam.net/2014/10/using-piv-smart-cards-with-mac-os-x-10-10-yose

Re: [lopsa-tech] OSX Mavericks root exploit, and Safari

2015-04-20 Thread Paul Graydon
On 4/18/2015 3:29 AM, Edward Ned Harvey (lopser) wrote: From: Starchy [mailto:star...@gmail.com] Has there been any explicit statement from Apple that it won't be fixed on earlier OSes? What I see right now is a security update that fixes rootpipe for 10.10+ only while some other fixes in the re

Re: [lopsa-tech] OSX Mavericks root exploit, and Safari

2015-04-18 Thread Edward Ned Harvey (lopser)
> From: Starchy [mailto:star...@gmail.com] > > Has there been any explicit statement from Apple that it won't be fixed > on earlier OSes? What I see right now is a security update that fixes > rootpipe for 10.10+ only while some other fixes in the release apply to > 10.8.5+. Apple being Apple, I'd

Re: [lopsa-tech] OSX Mavericks root exploit, and Safari

2015-04-17 Thread Starchy
On 04/17/2015 06:26 AM, Edward Ned Harvey (lopser) wrote: > I'd like to alert people that OSX Mavericks has a root exploit that will > not be fixed. All Mac users must immediately update to Yosemite in order > to maintain any semblance of security. > > http://arstechnica.com/security/2015/04/lates