okay maybe not. it is still sad to read all the comments here. people are nitpicking each others opinion. its an opinion not a fact. but as long as it gets attention on both end of the “issue” then lets get pwned.

I fail to see how this is even worth getting upset about.

Pretty much every exploit out there is accessed via a piece of vulnerable software.

The OS *by itself* is nearly impervious across the board. Linux and Windows included.

The main point in OS security is : Can the OS detect this kind of attack and block it from functioning?

This particular example is done via putting in string data into program text sections. It’s something that the no-execute bit was supposed to prevent. Someone should look into how the OS is handling this ‘data as code’ issue and improve the support for no-ex. (This applies to all OS’s that are affected by this exploit).

-zade

I disagree, sir. You can call it a VLC bug that affects OS X, Windows, and Linux. If you went by your logic you could even say it’s an OS X bug, which STILL doesn’t make it an Apple bug.

Apple didn’t make the software so it isn’t an Apple bug. Microsoft didn’t make the software so it isn’t a Microsoft bug either…etc…etc…

By your logic we should exclude yesterday’s bug too since it affects other platforms.

Understood.

Could it be within the realm of possibility that this screwup was planned? Because it’d ruffle the feathers of the mac community?

Or am I absolutely giving MOAB waaaay too much credit?

You do make a good point Tom, and you are right, there could be some major things that discover, but my primary problem with the entire MOAB event is the fact that it’s been promoted as a Month Days of Apple Bugs…and they’ve already proven that to be wrong.

You said: “If there are some “red faces and retractions from the Mac fanboy camp” they won’t be from this site.”

You entitled your article “MOAB Loses all Credibility on Day Two”.
My point is that perhaps you should have waited until day 30 judge its credibility or lack thereof. After all, the headline acts are never on first.

I actually responded to your article on your blog…it said my comment had been flagged as spam and was sent to you for moderation…did you get it?

Agreed. Ignoring a severe vulnerability would be retarded. If they find one, I won’t ignore it…but someone will probably have to tell me about it, because I’m not going to be checking their site daily.

@Bawaaah-huh?

1) agreed.
2) agreed, but what’s your point? Anyone who has familiar with ANYTHING knows that there are fansboys. There are Nintendo Fanboys, Star Wars Fanbody, Democrat Fanboys, Republican Fanboys, Sony Fanboys, Apple Fanboys and anything else you can think of…
3) again, agreed. I don’t take issue with using the term “pwn”
4) once more, agreed. That was the late night fury talking.

You should stop by more often, I think we see eye to eye on a lot of things.

@Hmmm

funny how you snarky fellas never leave an email address or name.

@Tommo

I don’t think this kind of crap is fair when it happens to Microsoft either.

@Tom

If there are some “red faces and retractions from the Mac fanboy camp” they won’t be from this site. As I stated in the article, I’m not saying that Apple or OS X are perfect. If they find a HUGE flaw in OS X or any product on OS X I will gladly report it to the Apple community that reads this site because I want to make sure that they know about it…I’ll be surprised if they do, but mainly because of their terrible planning on because Apple is invincible.

@ everyone

I’m glad to see people leaving their opinions here, whatever they may be, keep ‘em coming.

There will be some red faces and retractions from the Mac fanboy camp yet.

Reports of MOAB’s demise are greatly exaggerated.

Furthermore, your accusation that MOAB is merely a ploy for attracting attention is overstated. Surely, MOAB is intended to build public confidence in Apple’s software prodcuts and help establish the viability of OS X as a secure and robust platform but it’s hardly qualifies as a “stunt” or even an “advertisement”. MOAB serves the dual purpose of improving, and drawing attention to, OS X.

If there’s one thing Apple doesn’t need to do, it’s “beg for attention”. If you are going to cry foul at least do so after MOAB is complete.

1) Anyone with a GED can tell that applegazette.com would obviously be a biased site.
2) Anyone who has been exposed to computing culture knows of Apple zealots.
3) Taking the light-hearted “pwn” usage seriously is ridiculous.
4) Concerning the last para: I’m sure that the industry will ignore bugs released by this project because of the second release… riiight.

Also ignoring all other bugs that come out for apple because you don’t think the first one is “hardcore” enough is, in fact, retarded.

http://www.cupofchai.net/2007/01/04/thoughts-on-a-month-of-apple-bugs/

Cheers.

On topic – You’re dead on, brother. Next they’ll trot out a vulnerability in mplayerOSX. Or Lamenc. I think your discussion and that included in the commentary persuades me that the MOAB site is nothing more than a PR stunt, with little to offer; they’re looking for more bugs that haven’t already been found, and used VLC as filler, IMO.