June 2008 Archives

Major Privilege Escalation Bug in Mac OS X 10.4 and 10.5

In case you haven't seen it, any user with an account (admin or not) on Tiger or Leopard can run any command as root. Contrary to some published reports, physical access to the machine is not required; commands can be executed over an SSH or ARD/VNC connection as well.

Overheard at the WWDC Keynote

"That's not a feature, that's a bug!"

— An attendee's reaction to Steve Jobs' announcement that Microsoft Exchange support is the one new feature in Snow Leopard