Demoman
Jul 12, 09:36 PM
This thread is getting too funny. Apple has been so far behind on power these past few years and now we get the chance to use Conroe, and suddenly that's not good enough for the Mac snobs. Conroe is an extremely fast chip (especially compared to G5), so I don't get why some people think it's a bad choice for the pro-line up. Sure, it can't do smp, but not everyone needs or want to pay for quad processing.
So, aside from the ability to do multiple processing, what advantages does Woodcrest have that make it mandatory to go in the pro-line? How much "faster" is it going to be over the Conroe? It's my understanding that they are identical in that respect.
SW engineers usually optimize their systems with expectations of the environment they will run in. Pro-level applications often run much better in systems that use SMP, but not all. Sometimes it is better to pipeline a few processes at high speed, rather than do a lot of task swapping. Most of Apples core customer's application seem to benefit from SMP. So, that is what they are going to expect from Pro-level hardware.
So, aside from the ability to do multiple processing, what advantages does Woodcrest have that make it mandatory to go in the pro-line? How much "faster" is it going to be over the Conroe? It's my understanding that they are identical in that respect.
SW engineers usually optimize their systems with expectations of the environment they will run in. Pro-level applications often run much better in systems that use SMP, but not all. Sometimes it is better to pipeline a few processes at high speed, rather than do a lot of task swapping. Most of Apples core customer's application seem to benefit from SMP. So, that is what they are going to expect from Pro-level hardware.
ranviper
Apr 12, 10:04 AM
Actually, I do think this would bug me. I love that I have all of my most used programs (Word, Excel, Photoshop, Lightroom, Notepad, etc, plus one particular folder) right there for easy access with 1 click of the Start button -- yet hidden away completely out of sight (until I click on Start). I also love having quick access to my "Recent Items" list, to quickly open a file I was recently working on.
How are the above 2 things done on a Mac?
eek... I use "alt-tab" and "copy & paste" A LOT! :eek:
Doesn't Mac have these things too? :confused:
Actually the mac dock id essential the same as the windows start menu. The difference is you can put it essentially anywhere on the screen (use an app called deeper to help with this) and you can have as many apps as your heart desires. Folders and stacks as well. AND, you say out of site? Hide the dock. Easy.
Mac OS also has the recent items and "alt" tab and such. Command usually takes place of alt and/or control in mac os however. Or the apple key on older keyboards. Cheers.
How are the above 2 things done on a Mac?
eek... I use "alt-tab" and "copy & paste" A LOT! :eek:
Doesn't Mac have these things too? :confused:
Actually the mac dock id essential the same as the windows start menu. The difference is you can put it essentially anywhere on the screen (use an app called deeper to help with this) and you can have as many apps as your heart desires. Folders and stacks as well. AND, you say out of site? Hide the dock. Easy.
Mac OS also has the recent items and "alt" tab and such. Command usually takes place of alt and/or control in mac os however. Or the apple key on older keyboards. Cheers.
charliehustle
Oct 7, 08:02 PM
Oh so now we have Android. First it was the Palm Pre that was going to kill the iPhone, that did not happen, then it was this or that touch screen phone that was going to kill the iPhone and that did not happen. When Android first came out with the G1 that was going to kill the iPhone, that did not happen and now we have more Android devices killing the iPhone, not going to happen. This is a load of crap from people who don't know what they are talking about. Android is hard to develop for and is at least two years behind Apple at the moment, how is this going to happen? This is the stupidest prediction I have ever heard from people who don't like Apple for some reason that I cannot understand, let's stop predicting which device is going to be King and just see what happens!!! The main reason I say this will not happen is that Android is only being adopted by technophiles and not everyday people, the iPhone is being adopted by apple technophiles and everyday people, it is the everyday people that decide which device is king and they will not adopt Android unless the OS is completely overhauled in a different direction, people like my 63 year old father have an Iphone now and there is no way he would ever want or use an Android based phone. Tech analysts need to think of everyday people when they predict this crap and not techies who hate Apple for some reason or another!!!
no offense, but market share is completely different from "superior product"
they do not go hand in hand, and a company with a larger market share can put out an inferior product (example: Nokia)
more phones with android are going to be sold because there are 40 times the number of handsets android is going to be on..
not a big deal, and apple fans should not be threatened..
the author is just stating simple facts..
no offense, but market share is completely different from "superior product"
they do not go hand in hand, and a company with a larger market share can put out an inferior product (example: Nokia)
more phones with android are going to be sold because there are 40 times the number of handsets android is going to be on..
not a big deal, and apple fans should not be threatened..
the author is just stating simple facts..
Eidorian
Oct 26, 10:31 PM
Exactly
I hope Apple comes out with a single clovertown chip tower in 07 that runs on cheap standard DDR2 memory and maybe just one optical drive bay. I do like the 4 HD bays though.
On a side note, the people arguing that 8 cores is just too much power are pretty damn funny. There are thousands of people like multimedia that need more cores. I'm not one of them but at least I understand their need. Some poeple on here are clueless.I don't think Cloverton will run on standard DDR2. Kentsfield sure but doesn't Xeon REQUIRE ECC/FB-DIMM?
I hope Apple comes out with a single clovertown chip tower in 07 that runs on cheap standard DDR2 memory and maybe just one optical drive bay. I do like the 4 HD bays though.
On a side note, the people arguing that 8 cores is just too much power are pretty damn funny. There are thousands of people like multimedia that need more cores. I'm not one of them but at least I understand their need. Some poeple on here are clueless.I don't think Cloverton will run on standard DDR2. Kentsfield sure but doesn't Xeon REQUIRE ECC/FB-DIMM?
TuckBodi
May 12, 10:12 AM
WTF? Why do people buy phones without knowing if they work in their areas first? If I went by what people say on these boards, I'd have bought a Verizon phone that wouldn't work in my area, and on a phone that's crap....
STOP MAKING PURCHASING DECISIONS BASED ON OTHER PEOPLES OPINIONS!
Maybe you can help me out...I bought my 2G iPhone the day it was released. I did my research and knew I was going to lose a few bars going from T-Mo to AT$T. At home (where I work) I was getting 3 bars, which was 'okay.' A year later it dropped a bar and a year after that it dropped another bar+. I've swapped out phones and etc. AT$T continues to blame me, Apple, my trees, my microwave and even my fridge.
About 2 months ago I was finally creeping up to the 2-3 bar range and was again getting okay service. Then all of a sudden, about a week ago, I'm back to 1 bar and multiple dropped calls a day. What gives?
In the meantime I've been doing my *research* on Verizon and hoping Apple finally makes the jump in June.
STOP MAKING PURCHASING DECISIONS BASED ON OTHER PEOPLES OPINIONS!
Maybe you can help me out...I bought my 2G iPhone the day it was released. I did my research and knew I was going to lose a few bars going from T-Mo to AT$T. At home (where I work) I was getting 3 bars, which was 'okay.' A year later it dropped a bar and a year after that it dropped another bar+. I've swapped out phones and etc. AT$T continues to blame me, Apple, my trees, my microwave and even my fridge.
About 2 months ago I was finally creeping up to the 2-3 bar range and was again getting okay service. Then all of a sudden, about a week ago, I'm back to 1 bar and multiple dropped calls a day. What gives?
In the meantime I've been doing my *research* on Verizon and hoping Apple finally makes the jump in June.
DeepDish
Aug 29, 11:06 AM
Do you have evidence of this just out of interest? I too was surprised to read this, so I'd be interested if you had evidence the other way.
zero evidence, other than my gut feeling.
But come on, Dell more green than Apple? Something is not right here.
zero evidence, other than my gut feeling.
But come on, Dell more green than Apple? Something is not right here.
J71
May 2, 12:20 PM
If this is safari specific, it shouldn't be that big. How many people *really* use it?
Use Safari? Just long enough to download Firefox! ;)
Use Safari? Just long enough to download Firefox! ;)
arkitect
Mar 28, 10:04 AM
And I doubt you'd say, "Hi. I'm Bill McEnaney and I'm heterosexual. Pleased to meet you."
I am not so sure he wouldn't� :p
I am not so sure he wouldn't� :p
Sheebahawk
Aug 29, 02:16 PM
that needs to be accounted for... the lifespan of an apple computer. Its about 3 times that of a dell, at least in my experiance. I've saved all my old macs cuz they still work.
jlc1978
Mar 18, 07:06 AM
They joys of an unregulated mobile industry..... being stuck with only 1 (until recently) choice of carrier, 2 year contracts, paying extra for tethering, PAYING for incoming calls (WTF:eek:).
I'm glad I'm stuck in over regulated EU. On the up side, you yanks get to play with all the new toys first :rolleyes:
Actually, you can buy unsubsidized phones and have no contract lock just as in the EU; plus we don't get charged extra for calling a cell phone from another phone - and given the calling plans and unlimited minutes between the same carrier / friends / evenings using minutes for incoming calls is a non-issue for virtually all US phone users - I'd rather have that then have to pay to call a cell phone.
I'm glad I'm stuck in over regulated EU. On the up side, you yanks get to play with all the new toys first :rolleyes:
Actually, you can buy unsubsidized phones and have no contract lock just as in the EU; plus we don't get charged extra for calling a cell phone from another phone - and given the calling plans and unlimited minutes between the same carrier / friends / evenings using minutes for incoming calls is a non-issue for virtually all US phone users - I'd rather have that then have to pay to call a cell phone.
Multimedia
Sep 26, 06:09 PM
And the wait for 8 Core Mac Pros and Merom MacBook Pros/MaBook is on. Waiting for speed bumps means no one buys a dang thing.It's also not just speed bumps. I want a MBP redesign that includes a better cooling system and an easy access HD Bay like in the MB. Lots of good reasons to be waiting. It's the IN thing to do right now. We're the IN Crowd. :Dat least the educated do not.... Well... it's amazing that now every dual core computer is obsolete, and every single core computer is like an Apple II compared to this.Yes but that 2.7GHz DP G5 of yours is a keeper. The fastest last classic G5 DP on the planet. Kudos to you for hanging on to it. If I were you I would NEVER sell it. Should become a family heirloom. Wish I had one.
benpatient
May 2, 09:18 AM
As I understand it, Safari will open the zip file since it's a "safe" download. But that doesn't mean it'll execute the code within that zip file, so how is this malware executing without user permission?
malware doesn't execute without user permission.
it relies on tricking the user into giving it permission to run, striking at what is typically the weakest link in any computer's security: the user.
any argument that XX isn't a threat, because it requires users to take an action in order to be truly dangerous, is a flawed argument, because in general, users are stupid, or at the very least, careless.
malware doesn't execute without user permission.
it relies on tricking the user into giving it permission to run, striking at what is typically the weakest link in any computer's security: the user.
any argument that XX isn't a threat, because it requires users to take an action in order to be truly dangerous, is a flawed argument, because in general, users are stupid, or at the very least, careless.
Piggie
Apr 28, 01:20 PM
After reading much of this thread's replies, I can honestly say that MANY MR users are living in 2009. The tablet is a PC. Yeah, maybe it can't do 100% of what a MacPro can do, but it does 90% of it. You can use the iPad as a PC and do lots of productivity.
Sure, I wish it was a stronger machine, but it does word processing, it connects to the internet in different ways, it plays video, it plays music, it stores things, it can share things, it can compute, it is personal, it can do spread sheets, it can make movies, it can take photos, it can play games, it can do lots and lots and lots. Why wouldn't it be a PC? Because it doesn't render CGI films? Hell, it's close to having Photoshop already. Sure, it's no iMac, but an iMac is no MacPro.
If you aren't calling it a PC in you will in 2012 or 2013. Get used to it now, Technosaurus Rex'ers.
It would help the iPad, in the manner you are describing it, if, like an Android/Honeycomb tablet it was a machine in it's own right.
If you look at the way it works, and the way Apple have designed the OS, it's obvious that Apple do not see the iPad as an independent PC, and that Apple themselves see it, and have designed it to be just an extension of your "Real" personal computer.
We are having to rely on 3th party apps to get around Apple's official built in limitations for the device, It's linked totally to just one computer running iTunes, you can't even connect it to say your PC, your friends, PC and your works PC to upload and download data to and from the various machines.
The iPad, as designed, with Apples official software is made so that you set thing up and organise things on your PC or Mac, then you dock your iPad (your mobile extension of your PC) you do a few things, then you come back, re-dock the iPad and it get's backed up.
That's the device that Apple made and how they see it.
It's not the iPad's fault. It's how Apple have made it.
The fact that with some 3rd party apps you can extend it's functionality beyond how Apple see the device is neither here nor there.
Personally, I very VERY much hope Apple do allow the iPad to grow into a fully independent device and break it's lock down link to iTunes.
Unfortunately, seeing as the iTunes link is Apple's money making link, I cannot see them allowing this to happen for a long time, meaning it will never grow to it's full potential as a fully independent device.
Sure, I wish it was a stronger machine, but it does word processing, it connects to the internet in different ways, it plays video, it plays music, it stores things, it can share things, it can compute, it is personal, it can do spread sheets, it can make movies, it can take photos, it can play games, it can do lots and lots and lots. Why wouldn't it be a PC? Because it doesn't render CGI films? Hell, it's close to having Photoshop already. Sure, it's no iMac, but an iMac is no MacPro.
If you aren't calling it a PC in you will in 2012 or 2013. Get used to it now, Technosaurus Rex'ers.
It would help the iPad, in the manner you are describing it, if, like an Android/Honeycomb tablet it was a machine in it's own right.
If you look at the way it works, and the way Apple have designed the OS, it's obvious that Apple do not see the iPad as an independent PC, and that Apple themselves see it, and have designed it to be just an extension of your "Real" personal computer.
We are having to rely on 3th party apps to get around Apple's official built in limitations for the device, It's linked totally to just one computer running iTunes, you can't even connect it to say your PC, your friends, PC and your works PC to upload and download data to and from the various machines.
The iPad, as designed, with Apples official software is made so that you set thing up and organise things on your PC or Mac, then you dock your iPad (your mobile extension of your PC) you do a few things, then you come back, re-dock the iPad and it get's backed up.
That's the device that Apple made and how they see it.
It's not the iPad's fault. It's how Apple have made it.
The fact that with some 3rd party apps you can extend it's functionality beyond how Apple see the device is neither here nor there.
Personally, I very VERY much hope Apple do allow the iPad to grow into a fully independent device and break it's lock down link to iTunes.
Unfortunately, seeing as the iTunes link is Apple's money making link, I cannot see them allowing this to happen for a long time, meaning it will never grow to it's full potential as a fully independent device.
jiggie2g
Jul 13, 08:07 AM
Because Conroes are faster, better value for money and competitive with what non-Apple desktops will offer. I don't get the bubble that many Apple fans seem to live in, where Apple can short-change you with crippled hardware at premium prices (which they have done) and get away with it. Would you be happy, as a consumer, if Apple decided to give you a Merom based iMac rather than a Conroe iMac just because they couldn't be bothered designing a new MoBo for the new chip? I wouldn't, which is why I intend to buy a new iMac only if they're Conroe based.
Even the top-end Merom (2.33Ghz) will not be able to keep up with the standard Conroe (2.4Ghz) and costs nearly twice as much. Which would mean the only consumer Apple desktop would not be able to keep up with even bog standard Conroe PC's from DELL (or whoever) and still cost much more. It simply makes no sense for Apple or consumers.
For example, a 2.4Ghz Conroe will cost Apple $316 however a 2.33Ghz Merom will cost Apple over $600 or a 2.16Ghz Merom $423. Now why would Apple pay over $100 more for a 2.16Ghz Merom compared to a 2.4Ghz Conroe? Merom is slower and more expensive, it makes neither logical or financial sense for Apple to use them in the iMac if they have the option of Conroe with a new MoBo. End of.
I am now convinced you have no idea what u are talking about , Merom is not faster per mhz then conore regrardless of FSB crap , and i have seen this 1st hand on xtremesystems , Merom makes perfect sense. This is jjust wishuful thinking from spoild mac brats wanting to measure thier ePenises.
The reason is cost more is because it's a more efficient chip per watt then conore. If apple were to use conore then would have to build a completely diffrernt board , with an even hotter CPU plus lets now add a hotter custom GPU. It would still use a notebook mobo as a standard one would not fit in the enclosure. This was also the case with the iMac G5 , the only thing Desktop about the iMac is the standard Hard Drive and CPU. It will still use an intergrated GPU like a notebook , Slim DVD Burner , and lower FSB for heat restraints. They did this with the iMac G5 as well.
Even the top-end Merom (2.33Ghz) will not be able to keep up with the standard Conroe (2.4Ghz) and costs nearly twice as much. Which would mean the only consumer Apple desktop would not be able to keep up with even bog standard Conroe PC's from DELL (or whoever) and still cost much more. It simply makes no sense for Apple or consumers.
For example, a 2.4Ghz Conroe will cost Apple $316 however a 2.33Ghz Merom will cost Apple over $600 or a 2.16Ghz Merom $423. Now why would Apple pay over $100 more for a 2.16Ghz Merom compared to a 2.4Ghz Conroe? Merom is slower and more expensive, it makes neither logical or financial sense for Apple to use them in the iMac if they have the option of Conroe with a new MoBo. End of.
I am now convinced you have no idea what u are talking about , Merom is not faster per mhz then conore regrardless of FSB crap , and i have seen this 1st hand on xtremesystems , Merom makes perfect sense. This is jjust wishuful thinking from spoild mac brats wanting to measure thier ePenises.
The reason is cost more is because it's a more efficient chip per watt then conore. If apple were to use conore then would have to build a completely diffrernt board , with an even hotter CPU plus lets now add a hotter custom GPU. It would still use a notebook mobo as a standard one would not fit in the enclosure. This was also the case with the iMac G5 , the only thing Desktop about the iMac is the standard Hard Drive and CPU. It will still use an intergrated GPU like a notebook , Slim DVD Burner , and lower FSB for heat restraints. They did this with the iMac G5 as well.
*LTD*
Apr 10, 11:22 AM
Epic is garbage and their engine is garbage.
Six of one, a half dozen of the other.
Big name is big name.
And yeah, really garbage. :rolleyes:
http://en.wikipedia.org/wiki/Epic_Games
Pretty impressive, I'd say. But it won't just be Epic. Others are and will follow. Rest assured.
Six of one, a half dozen of the other.
Big name is big name.
And yeah, really garbage. :rolleyes:
http://en.wikipedia.org/wiki/Epic_Games
Pretty impressive, I'd say. But it won't just be Epic. Others are and will follow. Rest assured.
*LTD*
Apr 28, 08:05 AM
Then they should include it in such #'s when it WILL be one not while it's not don't you think?
2010 Ford Explorer XLT Summit,
2010 Ford Explorer XLT Rancho
2010 Ford Explorer XLT Rancho
Chundles
Mar 11, 01:11 AM
Yeah that tsunami is massive. There were burning buildings floating on the surge as it rolled inland.
Not good at all.
Not good at all.
JoEw
Jan 20, 11:22 PM
i really divided on the matter i think android has a possibility of surpassing iphone market share only because android platform is on more then just 1 smart phone. However iphone is simplistic and has the app store which has way more developer backing then android does at the moment. Mainly because there is money to made from the app store where android simply does not have enough popularity for developers to make money from its store. I think the biggest thing hurting the iphone is the fact that it is locked on ATT. I think it needs to be on all major US cell networks or at least on verizon.
tayldn
Oct 14, 05:38 AM
Completely agree.
Me too. (Gartner know nothing- pure guesses). Having lots of devices is going to be less and less important for Nokia and Android. Apple have shown that form factor is not that important (not as important as it was when everything on the inside was the same)- a good big screen with a thin unit is all most need now that the magic is on the inside. Consumers are not going to want to differentiate with form factor (outside) so much as the cool stuff inside- there's real personalisation going on...inside.
I really used to dislike Apple (broken ipod!). But they know how to treat developers like me. The iPhone is going to take a much bigger share of the market over the next 24 months in the UK where it's coming off exclusivity with o2. The product is better and will stay better for some time. And cheaper untis are going to hit the market very soon making this accessible to everyone. Apple'll let this thing keep growing- in the future, they'll be able to make a loss on the handset...
Reckon they've got 24 months over the other manufacturers. o2 have about 20% of the market. Apple could triple their market share quite quickly simply by going with 2 more operators. Bit rudimentary I know- but why not?
Me too. (Gartner know nothing- pure guesses). Having lots of devices is going to be less and less important for Nokia and Android. Apple have shown that form factor is not that important (not as important as it was when everything on the inside was the same)- a good big screen with a thin unit is all most need now that the magic is on the inside. Consumers are not going to want to differentiate with form factor (outside) so much as the cool stuff inside- there's real personalisation going on...inside.
I really used to dislike Apple (broken ipod!). But they know how to treat developers like me. The iPhone is going to take a much bigger share of the market over the next 24 months in the UK where it's coming off exclusivity with o2. The product is better and will stay better for some time. And cheaper untis are going to hit the market very soon making this accessible to everyone. Apple'll let this thing keep growing- in the future, they'll be able to make a loss on the handset...
Reckon they've got 24 months over the other manufacturers. o2 have about 20% of the market. Apple could triple their market share quite quickly simply by going with 2 more operators. Bit rudimentary I know- but why not?
AppliedVisual
Oct 29, 06:08 PM
[QUOTE=AppliedVisual;2994702]
The bug, of course, is that the programmer allocated space for 4 threads (since he knew that was the max number of CPUs :rolleyes: ).
I guess so... Heh. I guess I should have gave it more than a quick glance (did I even look at the array declaration?) before commenting. Oh, well...
The bug, of course, is that the programmer allocated space for 4 threads (since he knew that was the max number of CPUs :rolleyes: ).
I guess so... Heh. I guess I should have gave it more than a quick glance (did I even look at the array declaration?) before commenting. Oh, well...
aswitcher
Jul 12, 07:10 AM
I'm _sure_ that Apple has a surpise for us wrt the Conroe /Conroe XE CPU.... a nice smallish desktop Mac (we can hope, can't we?) :cool:
And if they back it up fully with software features in Leopard and iLife07, Macs should leap ahead as multimedia machines...dedicated processor for video to avoid any missed frames recordings or playing.
And if they back it up fully with software features in Leopard and iLife07, Macs should leap ahead as multimedia machines...dedicated processor for video to avoid any missed frames recordings or playing.
LethalWolfe
Apr 13, 04:00 AM
I have absolutely no idea what people complaining here about it going non-pro is talking about.
Did you even watch the coverage? Or did you just look at screenshots?
Some pro-style questions that have been left unanswered:
What about XML and EDLs in and out of FCP X?
What about multicam and multi-clips?
Can I turn the �magnetic timeline� off?
Can I turn all the pre-processing that happens on ingest off (if I'm intentionally shaking the camera I *don't* want FCP to auto-stabilize it)?
How does media management work?
Is there a Media Manager tool?
Can I remap the keyboard?
Is there a better title tool?
What about multi-user environments?
Is the app as mouse-centric as it appears to be?
Are all settings global or can I have project specific settings (such as telling FCP that the capture scratch for Project A is in folder A and the capture scratch for Project B is in folder B)?
I could go on but I think I've made my point. Now, all of this stuff is pretty mundane to cover the first time they show off the app so I'm not surprised it wasn't mentioned. FCP X still has a lot more questions than answers right now, IMO. I can't wait to learn more about it though.
Lethal
Did you even watch the coverage? Or did you just look at screenshots?
Some pro-style questions that have been left unanswered:
What about XML and EDLs in and out of FCP X?
What about multicam and multi-clips?
Can I turn the �magnetic timeline� off?
Can I turn all the pre-processing that happens on ingest off (if I'm intentionally shaking the camera I *don't* want FCP to auto-stabilize it)?
How does media management work?
Is there a Media Manager tool?
Can I remap the keyboard?
Is there a better title tool?
What about multi-user environments?
Is the app as mouse-centric as it appears to be?
Are all settings global or can I have project specific settings (such as telling FCP that the capture scratch for Project A is in folder A and the capture scratch for Project B is in folder B)?
I could go on but I think I've made my point. Now, all of this stuff is pretty mundane to cover the first time they show off the app so I'm not surprised it wasn't mentioned. FCP X still has a lot more questions than answers right now, IMO. I can't wait to learn more about it though.
Lethal
Macky-Mac
Mar 26, 08:08 PM
Poor archbishop Tomasi hasn't been able to accept that the public is increasingly appalled with his church's stance on sex and that the public is increasingly offended by his church's continuing attempts to impose its beliefs on the general public.
munkery
May 2, 05:41 PM
What is "an installer" but an executable file and what prevents me from writing "an installer" that does more than just "installing".
My response, why bother worrying about this when the attacker can do the same thing via shellcode generated in the background by exploiting a running process so the the user is unaware that code is being executed on the system.
I don't know of any Javascript DOM manipulation that lets you have write/read access to the local filesystem. This is already sandboxed.
The scripting engine in the current Safari is not yet sandboxed.
Here is a list of Javascript vulnerabilities:
http://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=Mac+OS+X+Javascript
The issue is Safari is launching an executable file that sits outside the browser sandbox.
In the current Safari, only some plugins are sandboxed, so this wasn't execution outside the sandbox.
All that having been said, UAC has really evened the bar for Windows Vista and 7 (moreso in 7 after the usability tweaks Microsoft put in to stop people from disabling it). I see no functional security difference between the OS X authorization scheme and the Windows UAC scheme.
Except this:
Switching off or turning down UAC in Windows also equally impacts the strength of MIC (Windows sandboxing mechanism) because it functions based on inherited permissions. Unix DAC in Mac OS X functions via inherited permissions but MAC (mandatory access controls -> OS X sandbox) does not. Windows does not have a sandbox like OS X.
UAC, by default, does not use a unique identifier (password) so it is more susceptible to attacks the rely on spoofing prompts that appear to be unrelated to UAC to steal authentication. If a password is attached to authentication, these spoofed prompts fail to work.
Unix DAC is turned off in OS X in the root user account.
My response, why bother worrying about this when the attacker can do the same thing via shellcode generated in the background by exploiting a running process so the the user is unaware that code is being executed on the system.
I don't know of any Javascript DOM manipulation that lets you have write/read access to the local filesystem. This is already sandboxed.
The scripting engine in the current Safari is not yet sandboxed.
Here is a list of Javascript vulnerabilities:
http://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=Mac+OS+X+Javascript
The issue is Safari is launching an executable file that sits outside the browser sandbox.
In the current Safari, only some plugins are sandboxed, so this wasn't execution outside the sandbox.
All that having been said, UAC has really evened the bar for Windows Vista and 7 (moreso in 7 after the usability tweaks Microsoft put in to stop people from disabling it). I see no functional security difference between the OS X authorization scheme and the Windows UAC scheme.
Except this:
Switching off or turning down UAC in Windows also equally impacts the strength of MIC (Windows sandboxing mechanism) because it functions based on inherited permissions. Unix DAC in Mac OS X functions via inherited permissions but MAC (mandatory access controls -> OS X sandbox) does not. Windows does not have a sandbox like OS X.
UAC, by default, does not use a unique identifier (password) so it is more susceptible to attacks the rely on spoofing prompts that appear to be unrelated to UAC to steal authentication. If a password is attached to authentication, these spoofed prompts fail to work.
Unix DAC is turned off in OS X in the root user account.
No comments:
Post a Comment