An Interest In:
Web News this Week
- April 18, 2024
- April 17, 2024
- April 16, 2024
- April 15, 2024
- April 14, 2024
- April 13, 2024
- April 12, 2024
Some of Our Sources
- Web Designer Wall
- Smashing Magazine
- Smashing Apps
- TutsPlus - Design
- Naldz Graphics
- Noupe
- CSS Tricks
- Spyre Studios
- Daily Now
- TechPowerUp
Help Webnuz
Referal links:
April 19, 2016 02:00 am
Original Link: http://rss.slashdot.org/~r/Slashdot/slashdot/~3/hlLwGu3_QhM/rogue-source-code-repos-can-compromise-mac-security-due-to-old-git-version
Rogue Source Code Repos Can Compromise Mac Security Due To Old Git Version
An anonymous reader writes: Recent Mac versions come bundled with a very old version of Git (2.6.4) that is vulnerable to two security flaws that allow attackers to execute code on the device when the user forks a Git repo holding "malicious" code. The problem is that users can't upgrade this Git repo, they can't change its runtime permissions, nor can they remove it because Apple blocks even root users from twiddling with some system-level programs. "If you rely on machines like this, I am truly sorry. I feel for you," the researcher wrote on her blog. "I wrote this post in an attempt to goad them [Apple] into action because this is affecting lots of people who are important to me. They are basically screwed until Apple deigns to deliver a patched git unto them."Read more of this story at Slashdot.
Original Link: http://rss.slashdot.org/~r/Slashdot/slashdot/~3/hlLwGu3_QhM/rogue-source-code-repos-can-compromise-mac-security-due-to-old-git-version
Share this article:
Tweet
View Full Article
Slashdot
Slashdot was originally created in September of 1997 by Rob "CmdrTaco" Malda. Today it is owned by Geeknet, Inc..More About this Source Visit Slashdot