Skip to main content.

Current Forum Topics

Topic Replies Views Last Poster
23219jmouse888
01388squirrelschool
11857CalBear92
01259lila30
11949Justin
June 8th, 2004

Apple Patches Critical Security Vulnerabilities

Apple has released a fix for recently reported security vulnerabilities in Mac OS X. The description and download links for Security Update 2004-06-07 follow below.

Read the rest of this entry »

Posted at 4:36 PM PDT with these tags: ,

Comments Off

September 30th, 2003

Upgrade OpenSSH to Fix Vulnerabilities

Given Apple’s retraction of the Mac OS X 10.2.8 update, the OpenSSH vulnerabilities present in prior versions of OS X remain unresolved. Thankfully, Mario Diana has put together a guide to upgrading OpenSSH on 10.2.x. Following the provided steps will fix the recently-discovered security problems by installing newer versions of OpenSSL and OpenSSH.

Posted at 11:08 AM PDT with these tags: ,

Comments Off

July 25th, 2003

Secure POP and SMTP Email via SSH

There’s a good tip on MacOSXHints, as well as some informative follow-up comments, about secure POP and SMTP email via SSH. We’ll be covering the topic of secure email servers in more detail in the coming weeks, but in the mean time this thread is worthwhile reading.

Posted at 1:28 AM PDT with these tags: , ,

Comments Off

July 18th, 2003

Webcast Presentation on Mac OS X Client Security

Presenters from Apple, Carnegie Mellon, and the University of Utah participated in a recent webcast about Mac OS X client security. Hosted by macosxlabs.org, the webcast presentation covers Open Firmware password vulnerabilities, handling published exploits, securely modifying the system, securing Classic and non-multi-user friendly applications, and many other topics.

Posted at 2:55 AM PDT with these tags: ,

Comments Off

June 10th, 2003

Better Jaguar Security

Many people still use insecure network tools such as FTP and Telnet that send passwords in cleartext for unscrupulous individuals to snatch and use for nefarious purposes. While perhaps a little more technical than most people would prefer, Chris Cochella’s introduction to SSH is an excellent place to learn more about how a secure shell can protect the integrity of the communication between your workstation and remote servers.

Read the rest of this entry »

Posted at 4:55 PM PDT with these tags: ,

Comments Off

June 2nd, 2003

Auditing Web Site Authentication

SecurityFocus has published a two-part article on Auditing Web Site Authentication. While this article does not have anything specific to do with serving on a Mac, the best practices contained in this important audit guide can help site operators measure the security of their projects and prevent intrusions.

Posted at 11:55 AM PDT with these tags:

Comments Off