Seems to me that we cant simply dismiss the previous test because they users were given a local account unless Apple positions its product such that they are not playing in a server market where such accounts would exist. Im a Mac user, but I have to say that way to many mac 'enthusiast' would rather keep their head in the sand about these issue so we can say our product is better than Windows. That may (or may not) be true. If we want it to be true we have to stop attacking these things and start addressing them. Gwerdna (they guy who hacked the box in the first contest) said he was using unpublished exploits. Hey... Lets WORRY about that and not so much about our image.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/newsbriefs/159/774#774