Skip to content
Thoughtful, detailed coverage of everything Apple for 34 years
and the TidBITS Content Network for Apple professionals

Category: Security

Adam Engst No comments

PGP’s CEO Explains Snow Leopard Issues

Phil Dunkelberger, CEO of PGP Corporation, has a straightforward blog post explaining why PGP isn't yet compatible with Snow Leopard and apologizing for the company's poor communications surrounding the issue.

Adam Engst 18 comments

Find My (Wife’s) iPhone

While Tonya trained for a 100-mile bike ride this summer, Adam monitored her location from afar via Find My iPhone. Privacy breach? No, just making her feel more comfortable about being all alone many miles from home.

Adam Engst No comments

New “Take Control of Mac OS X Backups” Explains Smart Backups

Whether you want to establish a sensible backup strategy or modernize your existing backup strategy, Joe Kissell's just-updated "Take Control of Mac OS X Backups, Fourth Edition" has the real-world advice you need to choose backup hardware and software, and set up a rock-solid backup strategy.

Glenn Fleishman 3 comments

Check Computer-Tracking Software before Snow Leopard Upgrade

You've just upgraded to Snow Leopard for all the goodness it includes. Your computer goes missing. What could be worse? The tracking software you installed under Snow Leopard isn't running.

Adam Engst No comments

New York Times Web Site Compromised; How to Stay Safe

Details are still forthcoming, but over the weekend, numerous visitors to the New York Times Web site saw pop-ups masquerading as antivirus alerts and advertising Windows software that was itself malware.

Adam Engst No comments

Security Update 2009-005 Fixes Tiger, Leopard Vulnerabilities

Along with Mac OS X 10.6.1, Apple has released Security Update 2009-005 to fix a wide variety of security vulnerabilities in various versions of Tiger and Leopard.

Doug McLean No comments

Snow Leopard Includes Outdated Flash Player

Adobe is reporting that Snow Leopard installs an outdated - and vulnerable - version of Flash Player (though it was likely the most reasonable version to include at the time Snow Leopard was locked down for shipping). So, even if you recently updated Flash Player to avoid security vulnerabilities, you'll need to update again if you've moved to Snow Leopard in the meantime.

Rich Mogull 14 comments

Peering Inside Snow Leopard Security

Snow Leopard includes a bevy of important behind-the-scenes security updates, and one major feature we hope you never see. Rich Mogull details what's changed, how this affects your security, and the one improvement we're still waiting for.

Glenn Fleishman 2 comments

Wi-Fi’s WPA Encryption Is Not Broken (Yet)

News reports claiming that Japanese researchers had broken the Wi-Fi WPA encryption system are incorrect. WPA remains intact, but the researchers demonstrated a more efficient (if complex) way to exploit a tiny networking weakness in an older form of encryption.

Glenn Fleishman 4 comments

Security Update 2009-004 DNS Patch Applies to Few Systems

We've written so much about flaws in DNS that you might worry you need to apply Apple's latest security patch post-haste. Don't get anxious unless you're a system admin or handy with the command line.

Doug McLean No comments

Run-of-the-Mill Mac Trojan in the Wild

Nothing new here: Ars Technica reports on a new trojan horse, disguised as a QuickTime player update, that hijacks DNS requests, sending the victim to the attacker's Web site of choice. Common sense helps you avoid 99 percent of trojans and this case is no different - if an untrusted Web site instructs you to download and install some piece of software, don't do it.

Glenn Fleishman Adam Engst 9 comments

CrashPlan Central Slashes Hosted Backup Pricing

CrashPlan has revised its pricing for online backups to offer unlimited storage for an unlimited number of family computers for $100 per year, far below its competitors.

Rich Mogull 2 comments

iPhone 3GS Hardware Encryption Easy to Circumvent

Although the iPhone 3GS automatically encrypts all data on the device using special hardware, the implementation is deeply flawed, allowing access to your information if someone has access to your iPhone.

Adam Engst 19 comments

Mac OS X 10.5.8 Fixes Bugs, Plugs Security Holes

Time to do the update dance again - Mac OS X 10.5.8 offers a slate of bug fixes that improve reliability throughout the operating system and close a number of security holes.

Doug McLean 4 comments

GarageBand ’09 5.1 Offers Security Fix

Apple has updated GarageBand '09, fixing a bug that would change your cookie settings in Safari without telling you and tweaking a few features.