Apple Security Update
13 Seperate vulnerabilities are addressed by the latest Apple security updates. 9 vulnerabilites exist in network facing services like the web server, a couple in the web browser, another couple in SSL (secure socket layer) handling. In other words, get updating.
I haven’t used the Apple OS much in a while. I’d be interested to see what kind of process they have for updates. Is it easy? Is it almost automatic (at least to inform a user updates are ready?) Brian at the Security Fix (link above) thinks that we’ll start seeing more bugs targeting Apples this year. We well might. Certainly a bigger market share makes for a bigger target. System security almost always comes down to how the system is administered.
He also mentions…
For a long while, Firefox users touted their favorite browser as a more secure alternative to Internet Explorer. Now that Firefox has gained close to a 15 percent market share, we have started to see more and more security researchers and attackers focusing their attention on it.
We’ll see how well firefox responds. I think the auto-update feature there (in firefox 1.5) will take some of the headache out of “how do we get x million people to do an urgent update.”
Bottom line, every piece of software has bugs. Period. End of thought. How are those bugs dealt with will be the key to keeping a secure reputation.