Mac OS X 10.6 Snow Leopard Review

SecurityOrb.com's Kellep Charles has conducted a review of Mac OS X 10.6 code named Snow Leopard. This version of Mac OS X is an Intel-Based OS and has an Anti-malware application built in.

Using Login Banner on a Mac OS X system

What is a login Banner?

A login banner is a statement made by the system owner that asserts their rights and informs the users of the system what expectation of privacy they should have. Login banners are a critical aspect of IT system security as they allow IT systems administrators and IT Security staff to monitor the system for intrusion and abuse.

Why do we need login banners?

In any modern IT system log monitoring, network monitoring, and security monitoring take place at regular intervals. It is theoretically possible that, while performing their work related duties, an IT systems administrator may come across user information (such as a file stored on the system). The purpose of the login banner is to inform any user of the system that they may be monitored and that unauthorized or malicious access may be prosecuted. Administrators should use login banners on any system that supports their use.

Sample Login Banner

As a login banner is a form of legal assertion, please consult your General Counsel and Information Services before using the following login banner for use on any systems:

Access to electronic resources at [Organization] is restricted to employees, students, or individuals authorized by the [Organization] or its affiliates. Use of this system is subject to all policies and procedures set forth by the [Organization] located at www.xyz.com.

Unauthorized use is prohibited and may result in administrative or legal action. [Organization] may monitor the use of this system for purposes related to security management, system operations, and intellectual property compliance.

Command to issues warning banner on Mac OS X

sudo defaults write /Library/Preferences/com.apple.loginwindow LoginwindowText "Your Warning Message Here"

You will be prompted for your password. Once that is complete you can log out to see the warning banner (requires you to disable automatic login).

Apple's Mac Isn't as Secure as Some Want Us to Believe

An interesting article on eweek.com

Source: http://www.eweek.com/c/a/Security/Apples-Mac-Isnt-as-Secure-as-Some-Want-Us-to-Believe-183583/

Mac OS X 1.5.6 Security Update

Apple has released a major set of security patches for its Mac OS X operating system which fixes a number of critical flaws in the software.

The Mac OS X 10.5.6 update includes a critical update for Adobe Systems' Flash Player, fixing bugs that were disclosed last month. It also includes patches for several Mac OS libraries, the operating system kernel, and system utilities such as the BOM (Bill of Materials) archiving software. In total, 21 bugs are patched in the update.

Here are instructions on how to upgrade your Mac OS X to the latest update. Click Here or

http://support.apple.com/kb/HT1338

Apple quietly recommends using anti-virus software

Apple quietly recommends using anti-virus software as it gains market share, hackers could increasingly look to exploit the platform particularly if it is perceived as an easier target

Full story at infoworld.com

Mac OS X Trojan reported in the wild

Mac OS X Trojan reported in the wild

By Jose Vilches, TechSpot.com
Published: June 20, 2008, 3:19 PM EST

We typically hear about malware makers taking aim at Windows systems – which makes sense given the large install base – but with the rise in popularity of Apple and its OS X operating system, more and more we’re seeing dangerous malware, viruses and Trojans now being targeted for the Mac, too.

A new Trojan reported by SecureMac is an example of that, with the security vendor saying that variants of the AppleScript.THT Trojan horse spotted in the wild could affect users of Mac OS X Tiger and Leopard. The Trojan exploits a vulnerability within the Apple Remote Desktop Agent enabling complete access to a user’s system. It can log keystrokes, take screen shots, take pictures with the iSight camera, and enable file sharing, all while avoiding detection by opening ports in the firewall and turning off system logging.

The vulnerability is rated critical and in order to get infected a user must first download and install the malicious file, which is being distributed as both a compiled AppleScript or as an application bundle. SecureMac of course took the opportunity to pitch its MacScan antispyware security software as a solution for against this threat.

Apple fixes 70 issues with Mac OS X 10.5.3 update

By Jim Dalrymple, IDG News Service

May 28, 2008

Apple on Wednesday update Mac OS X fixing 70 issues with the operating system and its components.

Among the changes in Mac OS X 10.5.3 are several fixes for Apple's Time Machine backup application. Compatibility issues with its hardware counterpart, Time Capsule have been address, as well as compatibility issues with Aperture 2. Reliability has been improved when doing a full restore from a Time Machine backup and an alert message incorrectly stating that a backup volume doesn't have enough space has been fixed.

Apple's virtual desktop application, Spaces, received some minor updates, as well. A problem that could cause the reordering of application windows when switching desktops and then switching back has been fixed. An issue when pressing Command-Tab may incorrectly switch to a new space and reliability when syncing to .Mac have both been fixed in the update.

Mail received 10 updates in Mac OS X 10.5.3. Among them a stability issue when dragging large attachments to a mail message and reliability issues when changes are made to a mailbox while offline.

iChat reliability while screen sharing and an issue with group chats not being indexed in Spotlight has been addressed.

Automator, AirPort, Address Book, Parental Controls, and VoiceOver all received reliability enhancements with the update.

The 420MB Mac OS X 10.5.3 update is available for download via from the software Update control panel.

Another Batch of Safari Vulnerabilities Exposed

Apple's Safari browser is beginning to look like a bullet-ridden car in Iraq.
According to a warning posted to security mailing lists, there are multiple security flaws in Safari 3.1.1 that put users at risk of ID-theft spoofing attacks or, worse, expose them to drive-by malware downloads.

Safari is also vulnerable to at least two different denial-of-service attacks that could be more dangerous if hackers find a way to exploit the browser crashes.

In the absence of a patch, Safari users should consider using a different browser--Firefox or Opera

Taken from: http://securitywatch.eweek.com/apple/another_batch_of_safari_vulnerabilities_exposed.html