Comments on: Major Flaw Found in Apple’s Safari Browser http://www.digitaltrends.com/computing/major-flaw-found-in-apples-safari-browser/ Digital Trends is your home for technology news, CE product reviews, mobile app reviews and daily videos. Wed, 15 Feb 2012 00:50:27 +0000 hourly 1 http://wordpress.org/?v=3.3.1 By: online seo service http://www.digitaltrends.com/computing/major-flaw-found-in-apples-safari-browser/#comment-230217 online seo service Wed, 22 Dec 2010 08:34:25 +0000 http://www.digitaltrends.com/?p=273527#comment-230217 Nice for this tips !! <br /><a href="<a rel="nofollow" href="http://onlineseoservice19.blogspot.com"">http://onlineseoservice19.blogspot.com"</a> rel="nofollow">online seo service </a> Nice for this tips !!
http://onlineseoservice19.blogspot.com“ rel=”nofollow”>online seo service

]]> By: online seo service http://www.digitaltrends.com/computing/major-flaw-found-in-apples-safari-browser/#comment-230216 online seo service Wed, 22 Dec 2010 08:33:03 +0000 http://www.digitaltrends.com/?p=273527#comment-230216 Nice for this tips !! <br /> Nice for this tips !!

]]> By: puremetal http://www.digitaltrends.com/computing/major-flaw-found-in-apples-safari-browser/#comment-150506 puremetal Tue, 27 Jul 2010 15:23:45 +0000 http://www.digitaltrends.com/?p=273527#comment-150506 Gizmodo and the BBC also reported on this Safari/WebKit vulnerability, and IIRC the issue was that via the auto-fill feature a malicious website could gain access to your entire address book, and not just any auto-fill fields you have set up for general use. So it is a little more of an issue than you make out. <br /> <br />And please... blaming Adobe for not working with Apple is calling the Kettle black just a little. Adobe works with other OSes and vendors, most of whom (unlike Apple) don't try to ruin them. Gizmodo and the BBC also reported on this Safari/WebKit vulnerability, and IIRC the issue was that via the auto-fill feature a malicious website could gain access to your entire address book, and not just any auto-fill fields you have set up for general use. So it is a little more of an issue than you make out.

And please… blaming Adobe for not working with Apple is calling the Kettle black just a little. Adobe works with other OSes and vendors, most of whom (unlike Apple) don't try to ruin them.

]]> By: Mike http://www.digitaltrends.com/computing/major-flaw-found-in-apples-safari-browser/#comment-150504 Mike Tue, 27 Jul 2010 15:00:19 +0000 http://www.digitaltrends.com/?p=273527#comment-150504 I love to see the Apple owners act like someone put sand in their vagina every time something negative is said about Apple. Look, the article took a shot at Apple, they didn't call your mom a slut, stop acting like such babies. I love to see the Apple owners act like someone put sand in their vagina every time something negative is said about Apple. Look, the article took a shot at Apple, they didn't call your mom a slut, stop acting like such babies.

]]> By: DrSteveBrule http://www.digitaltrends.com/computing/major-flaw-found-in-apples-safari-browser/#comment-150487 DrSteveBrule Tue, 27 Jul 2010 12:22:22 +0000 http://www.digitaltrends.com/?p=273527#comment-150487 Just uncheck the autofill options, ya dingus. <br /> <br />For your computer! Just uncheck the autofill options, ya dingus.

For your computer!

]]> By: Mike http://www.digitaltrends.com/computing/major-flaw-found-in-apples-safari-browser/#comment-150448 Mike Tue, 27 Jul 2010 09:32:55 +0000 http://www.digitaltrends.com/?p=273527#comment-150448 just turn autofill off just turn autofill off

]]> By: BonoboBoner http://www.digitaltrends.com/computing/major-flaw-found-in-apples-safari-browser/#comment-150433 BonoboBoner Tue, 27 Jul 2010 07:46:08 +0000 http://www.digitaltrends.com/?p=273527#comment-150433 Your browsing in the wrong way. <br /> <br />Steve <br /> <br />sent from my iPho Your browsing in the wrong way.

Steve

sent from my iPho

]]> By: Agent Smith http://www.digitaltrends.com/computing/major-flaw-found-in-apples-safari-browser/#comment-150429 Agent Smith Tue, 27 Jul 2010 07:10:10 +0000 http://www.digitaltrends.com/?p=273527#comment-150429 "Fanboy" is in fact, when all others fail, the last "argument" (some argument...) they can come up with. <br /> <br />Moreover: "Safari — Apple’s browser software — has oft seen releases so buggy to the point that they were unusable": I really don't know what alien version of Safari that guy's been using. "Fanboy" is in fact, when all others fail, the last "argument" (some argument…) they can come up with.

Moreover: "Safari — Apple’s browser software — has oft seen releases so buggy to the point that they were unusable": I really don't know what alien version of Safari that guy's been using.

]]> By: RedHatLives! http://www.digitaltrends.com/computing/major-flaw-found-in-apples-safari-browser/#comment-150408 RedHatLives! Tue, 27 Jul 2010 05:04:15 +0000 http://www.digitaltrends.com/?p=273527#comment-150408 Way to write an unbiased article... NOT! Way to write an unbiased article… NOT!

]]> By: ioman http://www.digitaltrends.com/computing/major-flaw-found-in-apples-safari-browser/#comment-150397 ioman Tue, 27 Jul 2010 03:41:09 +0000 http://www.digitaltrends.com/?p=273527#comment-150397 The article came from Dailytech, republished on DT..... The article came from Dailytech, republished on DT…..

]]> By: dpri http://www.digitaltrends.com/computing/major-flaw-found-in-apples-safari-browser/#comment-150396 dpri Tue, 27 Jul 2010 03:39:29 +0000 http://www.digitaltrends.com/?p=273527#comment-150396 lol mac users always give me a laugh, they get so offended haha lol mac users always give me a laugh, they get so offended haha

]]> By: tripe http://www.digitaltrends.com/computing/major-flaw-found-in-apples-safari-browser/#comment-150385 tripe Tue, 27 Jul 2010 01:16:03 +0000 http://www.digitaltrends.com/?p=273527#comment-150385 Current version of Chrome not affected. Current version of Chrome not affected.

]]> By: tripe http://www.digitaltrends.com/computing/major-flaw-found-in-apples-safari-browser/#comment-150384 tripe Tue, 27 Jul 2010 01:15:25 +0000 http://www.digitaltrends.com/?p=273527#comment-150384 The current version of Chrome is not affected. Older versions look to be, however. The current version of Chrome is not affected. Older versions look to be, however.

]]> By: Fred http://www.digitaltrends.com/computing/major-flaw-found-in-apples-safari-browser/#comment-150379 Fred Tue, 27 Jul 2010 00:01:42 +0000 http://www.digitaltrends.com/?p=273527#comment-150379 You can drive traffic very effectively with titles such as, "massive, earth-shatteringly terrible security flaw in Apple iSomething" then just have the article say, "If you walk away from your computer and a hacker breaks into your house and accesses it before it has a chance to sleep, that hacker can steal your identity and install bad malware." See, it doesn't matter at all if the threat or article is reasonable or even vaguely possible, it's the traffic authors like the one above crave. That's why you'll see reports from GreenPeace that say, "Apple worst offender in Green manufacturing!" but if you read the article, it's more like, "Apple is #49 of the 50 randomly selected companies we decided to make up statistics about." You can drive traffic very effectively with titles such as, "massive, earth-shatteringly terrible security flaw in Apple iSomething" then just have the article say, "If you walk away from your computer and a hacker breaks into your house and accesses it before it has a chance to sleep, that hacker can steal your identity and install bad malware." See, it doesn't matter at all if the threat or article is reasonable or even vaguely possible, it's the traffic authors like the one above crave. That's why you'll see reports from GreenPeace that say, "Apple worst offender in Green manufacturing!" but if you read the article, it's more like, "Apple is #49 of the 50 randomly selected companies we decided to make up statistics about."

]]> By: Nate Ganley http://www.digitaltrends.com/computing/major-flaw-found-in-apples-safari-browser/#comment-150373 Nate Ganley Mon, 26 Jul 2010 23:28:07 +0000 http://www.digitaltrends.com/?p=273527#comment-150373 agreed agreed

]]> By: Nate Ganley http://www.digitaltrends.com/computing/major-flaw-found-in-apples-safari-browser/#comment-150372 Nate Ganley Mon, 26 Jul 2010 23:26:04 +0000 http://www.digitaltrends.com/?p=273527#comment-150372 I like the way you put this out there. Thanks for being knowledgeable. I like the way you put this out there. Thanks for being knowledgeable.

]]> By: PrudoJoc http://www.digitaltrends.com/computing/major-flaw-found-in-apples-safari-browser/#comment-150364 PrudoJoc Mon, 26 Jul 2010 22:06:33 +0000 http://www.digitaltrends.com/?p=273527#comment-150364 Wow, you can't make substantive arguments against an article without some anti-apple fanatic calling you a 'fanboy' as if that somehow invalidates your substantive arguments. Pitiful. Wow, you can't make substantive arguments against an article without some anti-apple fanatic calling you a 'fanboy' as if that somehow invalidates your substantive arguments. Pitiful.

]]> By: JudoProc http://www.digitaltrends.com/computing/major-flaw-found-in-apples-safari-browser/#comment-150360 JudoProc Mon, 26 Jul 2010 21:50:57 +0000 http://www.digitaltrends.com/?p=273527#comment-150360 Wow. You can't publish an article with anything remotely negative about apple without fanboys going on the attack. Sad Wow. You can’t publish an article with anything remotely negative about apple without fanboys going on the attack. Sad

]]> By: SadforDT http://www.digitaltrends.com/computing/major-flaw-found-in-apples-safari-browser/#comment-150355 SadforDT Mon, 26 Jul 2010 20:40:49 +0000 http://www.digitaltrends.com/?p=273527#comment-150355 The article is straight link bait... totally biased and one sided. I never thought I would see Digital Trends reduce themselves to the anti-Apple bandwagon, but this is entirely unacceptable. The article is straight link bait… totally biased and one sided. I never thought I would see Digital Trends reduce themselves to the anti-Apple bandwagon, but this is entirely unacceptable.

]]> By: taelor http://www.digitaltrends.com/computing/major-flaw-found-in-apples-safari-browser/#comment-150351 taelor Mon, 26 Jul 2010 20:11:05 +0000 http://www.digitaltrends.com/?p=273527#comment-150351 typee! typee!

]]> By: WaggyWow http://www.digitaltrends.com/computing/major-flaw-found-in-apples-safari-browser/#comment-150349 WaggyWow Mon, 26 Jul 2010 19:58:54 +0000 http://www.digitaltrends.com/?p=273527#comment-150349 Oh wow, you are right, that is pretty major <br /> <br />real-anonymity.at.tc Oh wow, you are right, that is pretty major

real-anonymity.at.tc

]]> By: Maurice S http://www.digitaltrends.com/computing/major-flaw-found-in-apples-safari-browser/#comment-150347 Maurice S Mon, 26 Jul 2010 19:56:03 +0000 http://www.digitaltrends.com/?p=273527#comment-150347 "...but it apparently doesn’t fair particularly better in the security department than past releases, including Safari 4 which had a flaw so severe it prompted a Department Homeland ..." <br />do you mean fare? just trying to be fair! "…but it apparently doesn’t fair particularly better in the security department than past releases, including Safari 4 which had a flaw so severe it prompted a Department Homeland …"
do you mean fare? just trying to be fair!

]]> By: Matt http://www.digitaltrends.com/computing/major-flaw-found-in-apples-safari-browser/#comment-150341 Matt Mon, 26 Jul 2010 19:37:09 +0000 http://www.digitaltrends.com/?p=273527#comment-150341 Google's browser Chrome has the exact same vulnerability. Yet nobody is writing articles like "Major Flaw Found in Google's Chrome Browser". <br /> <br />Digitaltrends, educate yourself. Google's browser Chrome has the exact same vulnerability. Yet nobody is writing articles like "Major Flaw Found in Google's Chrome Browser".

Digitaltrends, educate yourself.

]]> By: DontHateForSakeOfIt http://www.digitaltrends.com/computing/major-flaw-found-in-apples-safari-browser/#comment-150337 DontHateForSakeOfIt Mon, 26 Jul 2010 19:27:19 +0000 http://www.digitaltrends.com/?p=273527#comment-150337 The "major" flaw is that Safari can read the user's vCard? <br />This flaw is not major. Naming a field in your webform with common names like "firstname" and "address1" will cause the browser to auto-populate the field if it's configured that way. Whether it pulls this information from its own information store (Firefox) or from a vCard stored in the OS (Safari/OSX) is immaterial. <br /> <br />Also... Adobe refuses to work with Apple anymore to keep their code updated. This is the reason why SnowLeopard shipped with an outdated flash install. Apple did not create Adobe Flash, nor are they responsible for maintaining it. Blaming Apple for this is like blaming Microsoft because ATI's crappy drivers crash Windows. And yes, many of these crappy drivers are packaged with Windows just the same way Adobe's Flash was packaged with OSX. <br /> <br />I'm all for casting blame on those responsible for problems - and yes that includes laying blame on Apple's usual "sweep it under the rug" responses to the problems the *DID* create - but let's lay blame where it is due, and refrain from jumping on bandwagons driven by people who distort the facts or get them completely wrong. <br /> <br />Using the "Auto-Fill Webforms" feature is an Information Disclosure vulnerability in and of itself no matter which browser you use or which operating system you run. Just turn the feature off like any sensible security-minded person would. The "major" flaw is that Safari can read the user's vCard?
This flaw is not major. Naming a field in your webform with common names like "firstname" and "address1" will cause the browser to auto-populate the field if it's configured that way. Whether it pulls this information from its own information store (Firefox) or from a vCard stored in the OS (Safari/OSX) is immaterial.

Also… Adobe refuses to work with Apple anymore to keep their code updated. This is the reason why SnowLeopard shipped with an outdated flash install. Apple did not create Adobe Flash, nor are they responsible for maintaining it. Blaming Apple for this is like blaming Microsoft because ATI's crappy drivers crash Windows. And yes, many of these crappy drivers are packaged with Windows just the same way Adobe's Flash was packaged with OSX.

I'm all for casting blame on those responsible for problems – and yes that includes laying blame on Apple's usual "sweep it under the rug" responses to the problems the *DID* create – but let's lay blame where it is due, and refrain from jumping on bandwagons driven by people who distort the facts or get them completely wrong.

Using the "Auto-Fill Webforms" feature is an Information Disclosure vulnerability in and of itself no matter which browser you use or which operating system you run. Just turn the feature off like any sensible security-minded person would.

]]> By: @TCorp http://www.digitaltrends.com/computing/major-flaw-found-in-apples-safari-browser/#comment-150334 @TCorp Mon, 26 Jul 2010 19:06:48 +0000 http://www.digitaltrends.com/?p=273527#comment-150334 Your article (deliberately?) fails to mention that ALL WebKit browsers have this. Your article (deliberately?) fails to mention that ALL WebKit browsers have this.

]]>