Apple patches Mac OS X flaws

[Nomad559]

Apple patches Mac OS X flaws

Apple Computer has released nearly a dozen fixes for flaws in its Mac OS operating system, including a script for preventing phishers from fooling users of its Safari browser.

The script, released Monday, tackles a pernicious phishing problem in browsers. The loophole could allow an attacker to use certain characters from different languages to create legitimate-looking Web addresses that actually send victims to malicious Web sites. The security problem affected all browsers that supported Internationalized Domain Names, or IDN, and is not Apple-specific.

"For example, the Cyrillic letter 'a' could be used in place of the Latin letter 'a,' making it difficult for a user to tell if they are at www.apple.com or a malicious imposter website that's designed to look like the real one," the company said in an advisory discussing the problem. "These sites can be used to collect account numbers, passwords and other personal information."

[democracyindanger]

1. B-b-but Apple is perfect...

[Wonk]

2. "The security problem affected all browsers that supported

Internationalized Domain Names, or IDN, and is not Apple-specific."

[democracyindanger]

3. B-b-but "Apple has moved to a regular release schedule

"publishing fixes every month."

I'm just rattling your cage.