Page 1 of 2 12 LastLast
Results 1 to 15 of 22

Thread: YACF

  1. #1
    5 Star Lounger
    Join Date
    Aug 2001
    Location
    Confoederatio Helvetica
    Posts
    602
    Thanks
    0
    Thanked 0 Times in 0 Posts

    YACF

    Yet Another Critical Flaw Read all about it ...

  2. #2
    Platinum Lounger
    Join Date
    Nov 2001
    Location
    Vienna, Wien, Austria
    Posts
    5,009
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: YACF

    <hr>Created by Xerox and standardized in 1984, ASN.1 is a way to describe networking data and protocols.......The widespread use of ASN.1 has led many security researchers to label it a possible "monoculture"--a population so homogeneous that a single threat could destroy it.<hr>Just for the record, what's the word on the Apple sites about ASN.1?
    Gre

  3. #3
    Uranium Lounger
    Join Date
    Jan 2001
    Location
    Cincinnati, Ohio, USA
    Posts
    7,089
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: YACF

    Oh, I'm sure that doesn't matter....seeing as the Mac platform is far superior to anything Redmond offers. <img src=/S/sarcasm.gif border=0 alt=sarcasm width=15 height=15> Anything that affects less than 1% of the general computing market tends to get shuffled aside.
    -Mark

  4. #4
    5 Star Lounger
    Join Date
    Aug 2001
    Location
    Confoederatio Helvetica
    Posts
    602
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: YACF

    For what its worth it appears that it appears to have been covered in a couple of Security updates in November and December 2003. If you are interested you can check out the article here .
    <hr>Note: The following fixes which appear in "Security Update 2003-12-19 for Panther" are not included in "Security Update 2003-12-19 for Jaguar" since the Jaguar versions of Mac OS X and Mac OS X Server are not vulnerable to these issues: - CAN-2003-1005: ASN.1 Decoding for PKI
    OpenSSL: Fixes CAN-2003-0851 parsing particular malformed ASN.1 sequences are now handled in a more secure manner.
    OpenSSL: Fixes CAN-2003-0543, CAN-2003-0544, CAN-2003-0545 to address potential issues in certain ASN.1 structures and in certificate verification code. To deliver the update in a rapid and reliable manner, only the patches for the CVE IDs listed above were applied, and not the entire latest OpenSSL library. Thus, the OpenSSL version in Mac OS X 10.2.8, as obtained via the "openssl version" command, is: OpenSSL 0.9.6i Feb 19 2003<hr>

  5. #5
    Platinum Lounger
    Join Date
    Nov 2001
    Location
    Vienna, Wien, Austria
    Posts
    5,009
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: YACF

    Thanks. The short answer appears to be that Apple were able to fix the issue in less time. I wonder whether the "improved switching" etc associated with Panther is linked to the patch being needed for Panther but not Jaguar.

    A final question: Office X doesn't include Access. What do people use if they want that level of database functionality on a Mac?
    Gre

  6. #6
    Platinum Lounger
    Join Date
    Jan 2001
    Location
    Quedgeley, Gloucester, England
    Posts
    5,333
    Thanks
    0
    Thanked 1 Time in 1 Post

    Re: YACF

    It's obvious! They buy a PC!! <img src=/S/brainwash.gif border=0 alt=brainwash width=15 height=15>
    <font face="Script MT Bold"><font color=blue><big><big>John</big></big></font color=blue></font face=script>

    Ita, esto, quidcumque...

  7. #7
    5 Star Lounger
    Join Date
    Aug 2001
    Location
    Confoederatio Helvetica
    Posts
    602
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: YACF

    Or, if you don't want to do that - run Access under another MS product: Virtual PC The best of both worlds ... <blockquote><hr>Do you need to open a Microsoft

  8. #8
    5 Star Lounger
    Join Date
    Aug 2001
    Location
    Confoederatio Helvetica
    Posts
    602
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: YACF

    Just to clarify - I didn't make the post to make a dig at MS. I say the item on the BBC site and thought that other loungers might like a heads up. I use both a PC and a Mac and neither are perfect (far from it). I do use MS products (except for a data base) on both.

  9. #9
    Platinum Lounger
    Join Date
    Jan 2001
    Location
    Quedgeley, Gloucester, England
    Posts
    5,333
    Thanks
    0
    Thanked 1 Time in 1 Post

    Re: YACF

    Somehow I just knew there would be an answer!!! <img src=/S/yep.gif border=0 alt=yep width=15 height=15>
    <font face="Script MT Bold"><font color=blue><big><big>John</big></big></font color=blue></font face=script>

    Ita, esto, quidcumque...

  10. #10
    5 Star Lounger
    Join Date
    Aug 2001
    Location
    Confoederatio Helvetica
    Posts
    602
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: YACF

    Somehow I just knew you were waiting for one ... 3 minutes to read, digest and respond, not bad!

  11. #11
    Uranium Lounger
    Join Date
    Jan 2001
    Location
    Cincinnati, Ohio, USA
    Posts
    7,089
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: YACF

    Bowlie, it's all good. Every operating system has its warts. Apple uses better makeup than Microsoft so you don't see them as readily. Then, of course, you have Linux, where warts are considered beauty marks. <img src=/S/grin.gif border=0 alt=grin width=15 height=15>

    On a more serious note, Microsoft has a history of poor security and rushing products to market just to meet financial goals. Witness the debacle that was called "Windows ME." <img src=/S/shrug.gif border=0 alt=shrug width=39 height=15> Apple has Steve Jobs and his Remarkable Reality Suspension Chamber (as it relates to product announcements). Both of these absolutely pale in comparison to Unix's poster child... SCO!

    Kind of makes you yearn for pen and paper, no? I never hear the paper producing companies of the world putting spin on the fact that their products are insecure.
    -Mark

  12. #12
    5 Star Lounger
    Join Date
    Aug 2001
    Location
    Confoederatio Helvetica
    Posts
    602
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: YACF

    <img src=/S/blush.gif border=0 alt=blush width=15 height=15>My apologies <img src=/S/blush.gif border=0 alt=blush width=15 height=15> I shouldn't have recommended that Microsoft Software I hope you will forgive me. <img src=/S/duck.gif border=0 alt=duck width=23 height=23>

  13. #13
    5 Star Lounger
    Join Date
    Aug 2001
    Location
    Confoederatio Helvetica
    Posts
    602
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: YACF

    I don't have a need for an Access type product either on my PC in the office or my Mac at home. I do know that many use Filemaker but I can't comment on its suitability since I don't use it.

  14. #14
    Platinum Lounger
    Join Date
    Jan 2001
    Location
    Quedgeley, Gloucester, England
    Posts
    5,333
    Thanks
    0
    Thanked 1 Time in 1 Post

    Re: YACF

    OK, I'll forgive you this time -- but don't do it again! <img src=/S/scold.gif border=0 alt=scold width=50 height=15>


    PS When can we implement Doc Watson's "scold" smilie??
    <font face="Script MT Bold"><font color=blue><big><big>John</big></big></font color=blue></font face=script>

    Ita, esto, quidcumque...

  15. #15
    Platinum Lounger
    Join Date
    Nov 2001
    Location
    Vienna, Wien, Austria
    Posts
    5,009
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: YACF

    Now did you just say that Rebecca had put you up to recommend Macs?
    Gre

Page 1 of 2 12 LastLast

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •