“I’m tired of thinking about ponies! Now it’s time to kill!“— A little girl with a great future ahead of her, Overheard in New York
This Mac security hole has been all over the web recently. The thing that makes it dangerous is that it’s ridiculously easy to exploit. The thing that makes it annoying is that anyone on the development team should have seen it coming a mile away, especially given the many well-publicized scripting exploits in Windows software.
How did it happen? WebCore. In an effort to produce a common HTML/HTTP library for all applications, functionality that used to be restricted to the Help tool was suddenly embedded in everything that retrieved or displayed web pages. Apple’s pervasive AppleScript support completes the circle.
Ask not what you can do with scriptable applications; ask rather what scriptable applications can do to you…
Update: The official fix is available via Software Update.
Update: You still need to turn off the Open “safe” files after downloading option in Safari, because disk: URLs still work, and mounted disk images can include auto-execute programs. Yes, there are two stupid features in the previous sentence.
I’m not a big fan of Gene Simmons as a person, but then I only see him when he’s surrounded by groupies, and our only personal interaction consisted of him leaning over my shoulder making faces at one of my models. My interest in KISS is limited to Destroyer and the original Marvel graphic novel.
But the guy definitely isn’t afraid to speak his mind. Oversimplifies the issues a tad, like most celebrities, but at least he knows which side he’s on.
“…how many times have you accessed the Internet, other than for email?”
Yup, another phone survey, this time asking me about local newspapers, radio, television stations, restaurants, and shopping malls, and use of the Internet for shopping and information. I racked up a pretty impressive string of “no” answers for old media, along with a few “they have a shopping district there?”.
My answer to the title question? “Two, maybe three hundred.” Her stunned silence lasted so long that I didn’t have the heart to tell her that my answer would have been much higher if I’d used the definition of “accessed” they probably intended.
Some people just don’t get it. Beverley Goodway got it. Alan Strutt? Doesn’t get it. (link NSFW in countries where women cover their breasts…)
I’m sure this woman is quite attractive. I’m sure that another photographer could show her in a flattering light. But I don’t think even Gen Nishino on his worst day could make her look any more like a department-store mannequin! That pose! That shiny skin! That cast-in-plastic expression! All that’s missing is a price tag on her thong.
Will the editors of The Sun please take away this man’s camera before someone gets hurt?
[local copy of NSFW image follows…]
Mostly bugfixes and minor tweaks. Still need third-party freeware for many import/export tasks.
Update: It’s being reported that 1.1 silently fixed a bug that prevented use of free third-party instruments.
Okay, the food-faddists have hit a new low: Certified Organic salt.
There are apparently three different (European) agencies willing to certify that table salt has been produced in a manner consistent with traditional methods and modern marketing.
After much thought, tire-kicking, and riding, I’ve settled on a 2005 BMW F650CS as my first motorcycle. I’m sure this will disappoint a certain Ducati-loving Lion, but that’s the way it goes.
Why the CS? Comfortable riding position, good balance, some interesting features, terrific mileage, and the friendly sales support of California BMW. Lots of pictures to come, as soon as the bike finishes its cross-country trek to the dealership.
Why not a bigger bike, something I was seriously considering? Because I decided that I’d rather have two very different bikes than one compromise. That and I decided that while you can learn to shoot with a .45, you’ll be able to practice longer and more effectively with a .38 (just don’t take either one out on the highway…). I could carry that analogy farther, but I spent two days riding a 250cc mini-cruiser for the MSF class, and it just doesn’t have the continuing appeal of a good .22. :-)
"I downloaded the file in the hope that perhaps Microsoft had released some sort of public beta. The file unzipped, and to my delight the Microsoft icon looked genuine and trustworthy. I clicked on the installer file, and to my horror in 10 seconds the attachment had wiped my entire Home folder!"
Why, yes, Microsoft often officially releases beta software on peer-to-peer file-sharing networks. Your confusion is understandable, and no one is going to accuse you of being a software pirate. Really.
Besides, I’m pretty sure you won’t be downloading any commercial software in the future…
Update: Oh, and note the clever way the story implies that this had something to do with Intego’s “concept trojan horse” scare story. Sorry, Charlie, but we’re not that stupid. An application that doesn’t do what you think it will ain’t the same thing as an application disguised as an MP3 file.