Apple security blunder exposes Lion login passwords in clear text

Re:Apple security blunder exposes Lion login passwords in cl... by tptacek on Sunday May 06, 2012 @02:27PM (#3935841)

So that's a good point, but I feel compelled to point out that I've never seen a large organization with AFP shared user directories.

There are far more important vulnerabilities --- clientside drive-by remote code execution, for instance --- that have gone unpatched for longer than this. Do I think 3 months is a reasonable time-to-fix? No comment.

[ Parent | on HN ]

Re:Apple security blunder exposes Lion login passwords in cl... by fpgeek on Sunday May 06, 2012 @03:12PM (#3935992)

Can these far more important vulnerabilities be fixed as easily as turning off a debug flag?

Personally, in the rare cases when a fix is easy I'd expect it to be deployed promptly (and 3 months doesn't sound reasonable to me).

[ Parent | on HN ]

Re:Apple security blunder exposes Lion login passwords in cl... by tptacek on Sunday May 06, 2012 @03:28PM (#3936045)

Yes.

[ Parent | on HN ]