UBB.threads PHP Forum Software Community Forums General Off Topic Apple Releases Safari 3.1

Apple Releases Safari 3.1

I have it installed for testing, and do kinda like it. Not sure I notice it being twice as fast as Firefox, though. And until Safari includes third party plugins like Adblock, I won't use it as my default browser. But it is a very nice browser in general. And not only does it check spelling, but grammar, too! lol

Does this just install with out any conflicts with other browsers.
As i may have to be installing this.

( Jgeoff, where's that post about the flashing pm icon,
does yours still work < not blank > )

Mark, I haven't had any problems w/ Firefox after installing Safari...

As for the PM indicators, I have had no problems at all since creating the new one to loop indefinitely. (I see that thread has been tagged with [FIXED for 7.3b5] so I assume Rick is using the new icon now )

cheers

I thought there were all kinds of issues with the safari browser.

Like ??

I have no idea, I've never used it, but just from what I've read most mac users preferred any browser over safari - these were mostly internet developers so maybe it had to do with javascript or standards or something similar.

An Argentinian security researcher has discovered two flaws in Apple's Safari for Windows browser

But they keep telling us it's so safe and it's the best?

...and that's never happened with IE?? lolz

tried the new safari -- it's excellent browser..


but.... i'll still stick with FF for now

Has happened with EVERY browser known to mankind. Just a part of computing.

Exactly my point, Doc.

And SD, I'm sticking with FF for now, too. It's still the best. But I'd certainly choose Safari over IE any day of the week!

I chose FFox over IE/Opera; Safari doesn't meet my requirements at this point...

I'm looking forward to FFox3 though

I thought you were looking forward to Lynx

Safari could not open the page “http://www.apple.com/startpage/” because the server is not responding

Good start LOL

Keywords being... THE SERVER is not responding.

Apple's server. Likely because they duped millions of users into installing a browser they didn't ask for and were unprepared for these millions of users making page requests to this server.

Serves 'em right.

hehe, they tried to get me to install it with an update to itunes, no thanks - 2 browsers (IE and FF) are enough

IE doesn't count as a viable browser.

Maybe I'm a little biased... I used Macs at work for at least 3 years -- enough to permanently place my Start menu bar on the top of my screen even in Windows for the past decade!

C'mon, admit it -- "pull-down" menus and all -- you know it makes much more sense to pull-down, not drag-up! Freakin' M$ copycats trying the opposite B.S....! Put your Start menu on TOP! You'll love it, cuz it makes more sense -- trust me

Anyway, I pretty much hated iTunes til I got the iPhone last Summer. Now, it's okay. I hardly ever use it at all beyond synching, but, it functions. :shrug:

And I wasn't trying to push Safari, just relate the news. It may have some good things going for it, and some bad things, I don't know -- I still use Firefox as my default. But it's always good to test with the Top Four. (No, I don't yet have the "100/100" Opera browser installed... lol)

I tried the start menu on top; anoyed me... Though I do have a seperate menu up top in Aston... I'll show you a SS some time ...

It's not a DRAG UP on Windows, it's a click. The way you have to HOLD the mouse button down on the Mac is annoying. MAC is a great system, so is Linux, so is Windows - they're all great and each has pros and cons and each of us work differently.

Safari browser allows Mac to be easily taken over at hacker convention, Vista, Ubuntu machines survive the day

It has not been a good couple weeks for Apple and Safari. First Opera knocked it from its position as sole 100 percent compatible Acid3 browser. Then it tried to force iTunes users to unintentionally download the browser as part of an iTunes update, which included a pre-checked install option for Safari. The move was met with broad criticism, including from Mozilla's CEO, who commented that Apple was bordering "on malware distribution practices." Finally, Safari users who updated to v3.1 reported many bugs and crashes.

Now the browser, which Apple CEO Steve Jobs once called the "most innovative browser in the world and the most powerful browser in the world", has had more bad news. At the CanSecWest Show, an annual security conference, it was found that the Safari browser was surprisingly insecure, allowing successful attacks on Mac computers.

CanSecWest sponsors an annual hacking contest, which seeks to recognize vulnerabilities and give a comparative analysis of OS security. A Mac, Vista machine, and Ubuntu box survived the first round, which only allowed pre-authentication attacks – a successful attack would have yielded a $20,000 prize. However, on the second day, the flood gates were opened and hackers were allowed to use default-installed client applications.

The Mac fell within minutes, hijacked by security researcher Charlie Miller. Miller compromised the computer through security flaws in the new Safari 3.1 browser, which he declined to make public. For his takeover via the new vulnerability, Miller netted a sweet prize of $10,000. Surprisingly, the hackers were unable to gain control of the Vista or Ubuntu machines that day.

On the third day, hackers were allowed to exploit popular third-party applications. Hackers found the Vista machine surprisingly hard to crack in what they thought would be an "easy pickings" day. The improved security is likely owing largely to SP1, perhaps because of NX support for heap memory. In the end it was taken down by a cross-platform Flash Player attack. The Ubuntu machine survived the day.

Some point that the Mac and others may be even more vulnerable than the show indicates as some have noted that a pre-authentication vulnerability might command a price of $50,000 or more elsewhere, making an exploit at the show unprofitable. According to eWeek's security analysts, "Safari is prone to a remote code-execution vulnerability because it fails to adequately handle regular expressions with large, nested repetition counts. Inaccurate compilation lengths are calculated, and an overflow results."

Miller didn't even have to use new vulnerabilities also known for Safari. The first is a simple overflow attack using zip files. The second attack allows injection of content in a window belonging to a trusted site.
A recent independent analysis confirmed that Apple patches its vulnerabilities slower than Microsoft. The analysis followed a controversial Microsoft report by Jeff Jones, known for trashing Firefox for its bugs. The report indicated that 36 vulnerabilities in Vista were fixed over a total of nine patching events, and 30 unpatched vulnerabilities remained, while a total of 116 vulnerabilities were fixed in OS X over 17 patching events, with 41 unpatched vulnerabilities.

Apple's patches last year indicated Apple's slower than acceptable patching pace. It included patches for four vulnerabilities known since 2006 and two known since 2005. The oldest of these, a vulnerability in Apache, had a fix released by Apache in 2005.

Security experts point out that despite Apple's poor security, its machines remain less attacked than Windows machines. Many believe this is simply a matter of market share. With Mac sales on the rise, there may soon be a large increase in Apple-targeted malware and takeovers with the Safari browsing taking the brunt of the attacks.


Sourced from Daily Tech

The first part is, to me, a matter of "if it's connected to the internet, someone eventually will find a way to hack it". The last 3 paragraphs are what's bothersome - fix the issues as quickly as possible when they are found.


Odd that we don't hear about this in the Mac commercials...

Well it's not really a PULL DOWN, literally, either. Both are just clicks. I was just using opposite terminology. Every other menu on Windows works from the top/down except the Start menu. Why is that? They're just trying to be different and not look like total copycats.

I never did like the Mac's 1-button mouse much, but got used to it. At this point, though, I cannot live without a 3-button scroll mouse!

I cannot live without a cordless trackwheel ...

I have this mouse at home Lachesis

Crazy mouse...