Another worrisome thing is that our Apple reps here at UC Berkeley have confirmed the lack an official statement from Apple on which versions of the Mac OS they are supporting. From the document at http://docs.info.apple.com/article.html?artnum=61798, it looks like they may not be supporting anything older than 10.2.x or 10.3.x, and we know that Steve Jobs held a "funeral" for Mac OS 9 at WWDC a couple of years back. We still, however, can't find an answer to the question "If a security flaw was found in 9.2.2 (or 10.1.5, for that matter) tomorrow, would Apple release a fix for it?"

Really what's needed is something like what Microsoft offers at http://www.microsoft.com/ntserver/ProductInfo/Availability/R
etiring.asp (NT 4 example) or at http://support.microsoft.com/default.aspx/gp/lifewin (less helpful, but still sufficient). Without this, we have no way to be confident that our users are running a version of the OS that will get updated for security holes at all (however slowly).


[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/348/32256#32256