New in OS X: Get MacRumors Push Notifications on your Mac

Resubscribe Now Close

Researcher Set to Announce 20 Zero-Day Holes in Mac OS X

Friday March 19, 2010 11:08 am PDT by Eric Slivka

The H Security reports (via The Inquirer) that noted cybersecurity researcher Charlie Miller is set to announce the discovery of twenty new zero-day holes in Mac OS X that could offer hackers means of entry to compromise computers running the operating system. As zero-day holes, Apple is currently not aware of their existence, and thus has not yet had the opportunity to address them.

Using the controversial "security through obscurity" argument, Miller claims that Mac OS X users have typically been relatively free of malware threats due to a lack of hacker interest in the relatively small user base, not necessarily due to Mac OS X being more secure than other operating systems.

"Mac OS X is like living in a farmhouse in the country with no locks, and Windows is living in a house with bars on the windows in the bad part of town."

Miller is set to reveal his methods of finding the vulnerabilities, which include "fuzzing" systems by bombarding them with an overwhelming quantity of corrupted data, at the prominent CanSecWest conference next week in Vancouver. He is not, however, planning to disclose details of the security holes.
[ 562 comments ]