Fear Uncertainty Doubt.
A technique often used by a certain large software company to 'scare' people away from Open Source and various free sofwares.
This Apple security issue is understandable. It's a re-run of the latest Mozilla XPI issue and the entire the entire class of IE/Windows Active X issues.
If you are going to allow a web browser to download code from the net, you are in trouble. The bad guys are continuely going to try and breach the 'trust' model you wrap around this 'feature'.
Apple at least doesn't run Safari in the kernel contex like MS does with IE. I haven't looked at the dashboard app in detail yet. I hope Apple haven't been as stupid as to give the dashboard app implied admin rights...
Interestingly most of the past Apple security patches have been in OSS parts of OSX (although there have been patches for the proprietory components as well). The security fixes for the OSS components have been mostly for POTENTIAL security issues found by code inspection. Very few make it to a real exploit. As apposed to another popular OS's security patches which are generally in response to an exploit getting out into the 'wild'.
also thx u for the more detail info. i dun know much about the macs & their kernel. greatly appreciated. :thumbsup: :lovegrin:
