Apple's 48 Security Fixes Include iPhone Updates
Apple on Tuesday pushed out security updates to fix at least four dozen security holes in its Mac OS X operating system and other software. Perhaps most notable among the patches are several designed to plug security holes in Apple's much-hyped iPhone. Also included in the patch bundles was another set of security fixes for the beta version of Apple's Safari browser designed for use on Microsoft Windows machines.
Most people have probably never updated their mobile phone to accommodate security updates (many mobile phone providers push these updates out over the phone itself with nagging prompts to the user). Still, as the iPhone is essentially a pricey mini computer, people who have rushed to purchase the device should probably get used to updating it. For better or for worse, the security research community seems to have painted a bullseye on the iPhone, perhaps with the aim of making a name for themselves for finding exploitable security holes in what may be one of the most cleverly-hyped pieces of technology to date.
Apple reports that iPhone users will need to fetch the fixes via iTunes. The instructions, per Apple's Web site:
"The updates will not appear in your computer's Software Update application, or in the Apple Downloads site When the iPhone is docked, iTunes will present the user with the option to install the update. We recommend applying the update immediately if possible. Selecting "don't install" will present the option the next time you connect your iPhone."
Interestingly, Apple appears to have fixed a few vulnerabilities in its implementation of Samba, a suite of programs that facilitate file-sharing between OS X and Windows computers. This functionality is not turned on by default on Mac systems, but any Mac users who have decided to avail themselves of this feature should apply this latest update. Exploit code showing bad guys exactly how to attack the flaw to compromise vulnerable Mac systems has been posted online, and analysis from anti-virus giant Symantec Corp. indicates that the instructions can be used to compromise unpatched Macs, albeit with slight alterations in the code.
The updates for Mac OS X are available via the built-in Software Update feature or directly from Apple Downloads. Windows users of the Safari Beta can use the bundled Apple Software Update application to retrieve the fixes.
By Brian Krebs |
August 1, 2007; 7:20 AM ET
New Patches
Previous: Firefox Update Comes With a Mea Culpa |
Next: New Tool Automates Webmail Account Hijacks
Posted by: Derek | August 1, 2007 8:48 AM
The best way to protect yourself against vulnerabilitites on your iPhone is to use GoTrusted's new iPhone Security Service. It not only prevents issues like the ones described but it also protects your data and privacy by encrypting all your internet traffic to prevent others from intercepting your data. The iPhone service is free...
Posted by: John Adams | August 1, 2007 9:21 AM
I love it--highlight the number 48. Put it in red letters! Big, bold, letters! Then watch folks like Derek note that Windows never had 48 fixes. Please. Windows needed 48 fixes every week, Microsoft just didn't provide them. At least apple is being responsible by trying to fix them. And it's not like the fixes were being exploited.
(BTW, not sure how Rob gets 48, but anyway they're not all for Mac OS X. Several are for iPhone. And several are for Safari for Windows--surprised that one doesn't need the most . . . )
Posted by: ah | August 1, 2007 9:45 AM
Hey Derek? There's never been 48 patches to windows because Windows doesn't give a crap about its security. Security is better on Apple computers because every month, give or take, Apple posts a security update like this one. MS does it maybe once a year. There is not, nor has there ever been, a Mac virus. Whether you believe it or not is really immaterial.
Posted by: Chris | August 1, 2007 9:47 AM
Derek -
You have used computers before right? All systems are complex, and therefore susceptible to errors/vulnerabilities. Have you counted the number of virus that exist on the Window platforms vs those on *nix platforms? Have you compared the number of malware spies on Windows to those on OS X or Linux? All companies should take security serious, and I hope that Apple will be like Ubuntu.
Posted by: SidVicious | August 1, 2007 9:58 AM
Macs are computers. Computers have security issues. Microsoft releases about 60-75 security updates a year, so Apple is not exactly setting the pace.
What's more is exactly WHAT is being updated. When a "windows" security update comes in, it updates just that: Windows. When Apple releases one, it may be updating OS X, network hardware, system hardware, iPods, iPhone, the iLife Suite, external devices (like Apple TV and Airport Base Stations), other software, and now, even Windows software.
By my count, 26-37 are for OS X (depends how you count optional software for OS X Server Edition only), 5 for iPhone, 4 for Safari Beta (the whole point of Beta versions is testing and updating), and 2 for other software.
OS X is not perfectly secure. Like any system with open ports for communication, there are issues. But they are few and far between. And if Windows is its competition, you better believe Macs are the most secure.
Oh, and these patches come BEFORE oodles of people have their identities stolen.
Posted by: mike | August 1, 2007 10:12 AM
Posted by: Matt | August 1, 2007 10:48 AM
@Matt
"Jeff Jones is a Security Strategy Director in Microsoft's Trustworthy Computing group."
Looks like the author of your Vista report works for MS.
Posted by: Jon | August 1, 2007 11:05 AM
Why is it that Mac and Windows users continue to have this stupid argument over which OS is more secure?
Neither OS is a fortress from which its users can cruise the Internet with impunity.
Both pieces of software have their issues. The only difference is that Microsoft owns 90% of the market and its software therefore is targeted by hackers and criminals much more often than Apple which accounts for a measly 5%-7% of the market. (And before I'm castigated by Mac lovers for my stats, that're just a rough estimate based on my somewhat faulty memory.)
Wouldn't it be nice if Mac and Windows users could admit that there are pluses and minuses to both OSes, that neither is bug free and just move on?
Posted by: MsWrite | August 1, 2007 11:22 AM
Don't get your panties in a bunch maccys! I mean really, why are you getting upset?!?!
"there has never been a virus on a mac" GTFO! There's never been a virus on my digital calculator watch either :p
Anyways, if you want security, go with OpenBSD
Posted by: MacOS Root | August 1, 2007 12:05 PM
Jon, why don't you try reading it first? It's actually quite fair.
Posted by: Matt | August 1, 2007 12:13 PM
My point is both OS's have security issues.
People need to stop believing that MAC's are virus free. True there are fewer viruses for MACs but why would someone create a virus for an OS that has about 7 to 10 percent marketshare. If ist were 50/50 or 40/60 MACs would be flooded with viruses to cause damages to company pc as well as individuals. Both OS's are software applications created by people with security issues. There are no perfect developers who can build unbreakable applications.
Posted by: Derek | August 1, 2007 1:14 PM
I wish there was a standing request on this column for commenters not to debate which operating system (including the open sourced ones) is more secure.
Posted by: ugh | August 1, 2007 1:21 PM
It always ticks me off when people call Microsoft's very successful track record of monthly patching cycles "black Tuesday." I would hardly call a handful of patches "black Tuesday" but it has become an industry accepted standard to refer to it as such.
So when Apple releases 48 patches at once- what color would that be refered to?
I propose we call it iBlack Tuesday.
Posted by: BelchSpeak | August 1, 2007 1:40 PM
quit yer yappin
stop the hate
heres the skinny apple cares MS cares when you pay them to care, but only when they wish to.
The fact that there is an update simply recognizes that apple is taking
care oftheir own, unlike billy G
Posted by: 1931 | August 1, 2007 2:03 PM
Well, you can make up any reasons you want, but we're up to almost 25 years of Macintosh computing and not a sinlge virus. Ever. None. No spyware, no adware. None. Zip. Zilch. Nada.
Posted by: Chris | August 1, 2007 2:51 PM
Well, you can make up any reasons you want, but we're up to almost 25 years of Macintosh computing and not a sinlge virus. Ever. None. No spyware, no adware. None. Zip. Zilch. Nada.
Posted by: Chris | August 1, 2007 2:51 PM
Well, you can make up any reasons you want, but we're up to almost 25 years of Macintosh computing and not a sinlge virus. Ever. None. No spyware, no adware. None. Zip. Zilch. Nada.
Posted by: Chris | August 1, 2007 2:52 PM
Also want to point out that the triple post was performed on a Dell :P
Posted by: Chris | August 1, 2007 2:55 PM
Hey Chris.
Microsoft has a patch management process for many years with patches released every month (second Tuesday). They released WSUS and other patch management tools as well as a large website knowledgebase to admit (not hide) any issues that also affect other OS.
Apple is in a state of denial that a MAC OS is more secure with no security vulnerabilities; check the recent Television Ad campaign. Mac users firmly believe that it is fully secure as due to their small base, mainly home users.
Microsoft patches get more publicity due to a large user base and I believe more technical people.
Posted by: KA | August 1, 2007 4:00 PM
Well, you know what they say about arguing on the Internet: Even if you win...
Posted by: Adam | August 1, 2007 5:16 PM
um... Chris... Apple Mac's had plenty of virus's before Mac OS X... gotta love Johnny come lately's that want to rewrite history.
Posted by: nicsta | August 1, 2007 6:59 PM
To Windows users - the facts are that as things stand today, counting all the pros and cons of each platform, if I were to choose a platform for my mother or daughter to take her first steps out into the big bad world of the internet, it would be a Mac. As much as you hate Mac and their bragging obnoxious fans, you have to swallow this FACT. As can be seen thy the vitriol on this board. This goes down about as well as a manure sandwich with Windows users.
Posted by: nicsta | August 1, 2007 7:10 PM
nicsta, you seem to have selective vision when it comes to virtriol. It started with the third post in this thread, and it wasn't directed at Apple users.
Posted by: Matt | August 1, 2007 7:18 PM
The argument for getting a Mac is less exploits. Heck, with that logic I would buy an Amiga. I have never heard of a hack, virus, security exploit, or patch for an Amiga.
If I was buying a pc for my children to take their first steps into the world of electronics I would go for simple - but I think I would choose the Leappad over the Mac for the functionality. If I was buying a pc for my children so they could use in the real world it would run Windows, Office, and IE like the rest of the real world.
I would also choose to teach my children English as a first language rather , even tho it is much more corrupt, full of slang and misuse, then say Sanskrit.
Posted by: kc | August 1, 2007 9:14 PM
Alright everyone-enough!
Mac OS X and the new iPhone will need security patches from time to time. No Biggie! I have used Mac OS X since it came out and have NEVER EVER NEVER had a virus or worm or anything else that interfered with the full use of my computers! Nothing zero, nada so for all the anti-mac screwballs out there-get a life!
We all know about XP and now Vista and the many issues and worms and viruses and Microsoft's efforts to correct the problems.
The iPhone is a small computer and will need security updates but not to worry. Apple does a great job like it or not on correcting the problems. They will settle for nothing less than perfection and that will continue. So relax and enjoy the sweetest phones, mp3 players and computers on this earth!
Lets all get along !
Posted by: Sammy Carr | August 2, 2007 3:28 AM
Alright everyone-enough!
Mac OS X and the new iPhone will need security patches from time to time. No Biggie! I have used Mac OS X since it came out and have NEVER EVER NEVER had a virus or worm or anything else that interfered with the full use of my computers! Nothing zero, nada so for all the anti-mac screwballs out there-get a life!
We all know about XP and now Vista and the many issues and worms and viruses and Microsoft's efforts to correct the problems.
The iPhone is a small computer and will need security updates but not to worry. Apple does a great job like it or not on correcting the problems. They will settle for nothing less than perfection and that will continue. So relax and enjoy the sweetest phones, mp3 players and computers on this earth!
Lets all get along !
Posted by: Sammy Carr | August 2, 2007 3:28 AM
Alright everyone-enough!
Mac OS X and the new iPhone will need security patches from time to time. No Biggie! I have used Mac OS X since it came out and have NEVER EVER NEVER had a virus or worm or anything else that interfered with the full use of my computers! Nothing zero, nada so for all the anti-mac screwballs out there-get a life!
We all know about XP and now Vista and the many issues and worms and viruses and Microsoft's efforts to correct the problems.
The iPhone is a small computer and will need security updates but not to worry. Apple does a great job like it or not on correcting the problems. They will settle for nothing less than perfection and that will continue. So relax and enjoy the sweetest phones, mp3 players and computers on this earth!
Lets all get along !
Posted by: Sammy Carr | August 2, 2007 3:28 AM
More bugs in windows than Mac,, what is the big deal?
Posted by: Sam | August 2, 2007 7:47 AM
""More bugs in windows than Mac,, what is the big deal?""
Of course more have been identified...but let's be realistic, Winblows has a larger (much larger) market share than crApple....
A simple fact of life, where do criminals go? They go where they can make the most money...where the people are...I hope that I have made my point and don't have to completely spell it out...
Last night was amazing,
J00rMom
/dev/clue was linked to /dev/null
Posted by: J00rMom | August 2, 2007 10:42 AM
kc wrote: If I was buying a pc for my children so they could use in the real world it would run Windows, Office, and IE like the rest of the real world.
The real world is Office, and Office runs quite nicely on OS X. The operating system and browser are secondary, unless you have a business web app that will only run in IE. I have Macs at home, and Win2K at work. My Office files go back and forth on a flash drive, and seamlessly work on either system (backed up on the HD of each system daily). Here at work we have the weekly system updates, virus protection, etc. At home, I just start up my Mac and work without all the maintenance hassles and waiting for virus scans. Give your kids a treat and get them a Mac.
Posted by: BP | August 2, 2007 5:02 PM
"I wish there was a standing request on this column for commenters not to debate which operating system (including the open sourced ones) is more secure."
I agree with 'ugh'.
It's gotten so it's hardly worth reading the comments anymore.
Posted by: ERS | August 2, 2007 6:33 PM
I always love these Mac vs Windows debates. For the record, I use Windows XP SP2. I've never had a virus. I've only had one piece of malware in the last five years. The reason being: I stay well informed and use best practices for security, including reading Security Fix. That said, I do have the leading anti-malware app., Webroot Spysweeper employed on my system. I just updated the definitions and it states that I'm currently protected from 183,192 (Windows Only - my emphasis) threats. You'd think one of these malware developers would have some interest in Macs, but apparently they know how hard it is to exploit, so they don't waste their time - or they just can't. That being the case, I think Apple gets to right to gloat all they want. If the tables were turned, Microsoft definitely would.
Posted by: Tom | August 3, 2007 8:01 PM
From Tom
You'd think one of these malware developers would have some interest in Macs, but apparently they know how hard it is to exploit, so they don't waste their time - or they just can't.
Again, your reasoning suggests that Amiga is a better OS then Mac because there has never been one, so obviously the hackers know how hard it is. The truth is, why spend an hour to hack 1% of the population using Macs when you can spend the same hour to hack 80% of it on XP. The recent IPhone exploit suggests exactly that - or that Apple forgot all about security in their new hot product and based it on an OS that is insecure by design.
And, if you read any security report, there are on average as many critical vulnerabilities found in each of the majors - Windows, Apple and Linux - over the course of a year - it is just that a Windows exploit is like the main bridge in Minneapolis collapsing, while an Apple exploit is like a house fire in the middle of West Virginia - almost nobody is affected so CNN ignores it.
Bottom line, any secure system today is not going to be secure tomorrow unless you follow security practices, although the further from mainstream you are the less likely attackers will spend the time going after you.
I so love my Amiga.
Posted by: KC | August 4, 2007 12:54 AM
Not true at all, KC. An accurate analogy would be that hackers attack Windows and get the equivalent of a bridge failure, i.e., success in causing harm; they try to attack OS X but can't even break a window to get inside. That is why there have been NO viruses for OS X and the few other exploits have occurred only as demos, not in the wild. That's a world of difference. But, keep believing that OS X is as insecure as Windows since it makes you feel better.
Posted by: Podesta | August 4, 2007 9:57 AM
Apple iphone with full accessories for sale {brand new/unlock}.....300usd
Nokia N95 with full accessories for sale {brand new/unlock}.....300usd
Nokia E90 with full accessories for sale {brand new/unlock}....220usd
Nokia E60 with full accessories for sale {brand new/unlock}....200usd
Sidekick 3 with full accessories for sale {brand new/unlock}...150usd
Nokia N93 with full accessories for sale {brand new/unlock}...230usd
contact us on
samaragurl24@hotmail.com
dealersofphones@myway.com
Posted by: samara | August 6, 2007 4:57 AM
The comments to this entry are closed.










I was under the impression MACs did not have security issues. The most secure OS what a lie. All of you MAC users make up an excuse. (48 that is a lot Windows never had that many in on security update.)