Security researchers break out of Apple's sandbox
Researchers claim to have discovered a vulnerability with the sandbox security mechanism used by Apple. The sandbox, which is baked into the kernel of Mac OS X, is designed to apply application restrictions, so that code that has no reason to access a network isn't able to access a corporate LAN or the internet, for example. The …
This topic is closed for new posts.
I remember when Apple pundits branded their systems as immune to any attacks...
.... G'd old times...
Obviously you don't understand what this article is discussing
Re: Tchou
Neither system is immune, unless the weakest link is eliminated - the user. Sandboxed app may ask him to execute sudo rm -rf / for example, citing some urgent reason, like to save the world from imminent disaster
Feature
Isn't this just akin to the standard practice of relabelling a bug a feature and pretending it's not there?
It's not a vulnerability...
...they've written their code wrong...
http://www.loopinsight.com/2011/11/14/core-found-something-but-it-wasnt-a-sandboxing-security-hole/
for another take on what Core found.
So it is safe if hackers act like Apple wants but unsafe if they don't?
This topic is closed for new posts.
