Apple automates bug update for Macs

Andre Kesteloot akesteloot at gmail.com
Wed Dec 24 15:56:06 CST 2014


Mike,

Thanks for the details

The NTP problem had been known for a while, I believe.

It is interesting to note that Apple finally followed the Microsoft
approach, i.e.,  force a remote upgrade,  sometimes followed by a reboot.

Does this upgrade apply to iPhones and iPads too ?

73
André


On Wed, Dec 24, 2014 at 3:17 PM, Mike O'Dell <mo at ccr.org> wrote:

> I believe the Apple update was a bona fide emergency.
>
> It fixed a remotely exploitable bug in NTP and given
> that essentially every Mac either runs that code or at
> least has it on-board even if it's not running, had it been
> my decision, I'm pretty sure I would have agreed to use
> the mechanism which has apparently been there for some
> time now but never used before now.
>
> I suspect there are a lot of Linux boxes out there which
> are vulnerable and will be for quite some time.
>
>     -mo
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://amrad.org/pipermail/tacos/attachments/20141224/337daeb6/attachment.html>


More information about the Tacos mailing list