Hi you misinterpreted my comments regarding buffer overflow protection. I wasn't implying that Apple leaves vulnerabilities open, nor was I implying that there are more of them than other operating systems. What I was saying is that kernel level, or hardware level stack and heap protection is within the realm of possibility for most operating systems. x86 now has a No-Execute flag that can be used to help control these problems. By employing these protections, even if a buffer overflow occurs, it can not be exploited to execute code.

My criticism wasn't that Apple is any worse than other Operating Systems, I think that in many ways it is heads and tails better. My concern is that in the security arena, there are some areas of concern, which I highlighted.

Part of the job of every security practitioner is to openly and aggressively question everything, never take anything at face value. While I love the latest version of the Macintosh (enough to actually pay the premium on my next laptop purchase), and I am certainly no fan of Windows (souless does adequately describe my feelings on it's use), I can't let these preferences guide my questioning.



[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/256/27594#27594