Apple may boast that its latest operating system, Mac OS X 10.5 Leopard, trumps Windows Vista in terms of features and functionality. However, one security researcher isn't too thrilled with the new Mac OS's integrated firewall. In particular, InfoWorld quotes security consultant and former Gartner analyst Rich Mogull as saying the Leopard firewall "is a mess."
Mogull asserts that Leopard's firewall is "so simple as to be nearly useless." It includes three main settings—allow all, block all, and only allow access to specific apps—as well as a stealth mode. However, even with the "block all" and "stealth" settings selected, some Apple services are still detected as open by port scans. Things go from bad to worse with the selective access mode, which Mogull says prevents some applications from running altogether.
When the "Set access...." mode is turned on, Leopard digitally signs applications that the user allows access to incoming communication. But if that application is subsequently changed -- say when it's updated to a new version -- the signature no longer matches, and the application won't run. While that's typical of firewalls, Leopard also blocks applications that change at runtime. Skype, the popular VoIP software and instant messenger, is one such program.
If the user has set the firewall to "Set access..." and runs Skype, the icon will bounce a time or two on the dock, but not load. Nor does Leopard tell the user that Skype has failed or why it won't launch. Only the Mac OS X Console gives a clue, with a message such as: 11/2/07 9:47:51 AM [0x0-0x35035].com.skype.skype Check 1 failed. Can't run Skype.
Considering this type of problem with the "set access" setting, Mogull advises that users simply rely on their router's built-in protection instead of Leopard's firewall. He does nonetheless seem hopeful, saying "all of this is fixable" and "Apple clearly was a little rushed, but they're moving in the right direction."
|1. BIF - $340||2. Ryu Connor - $250||3. mbutrovich - $250|
|4. YetAnotherGeek2 - $200||5. End User - $150||6. Captain Ned - $100|
|7. Anonymous Gerbil - $100||8. Bill Door - $100||9. ericfulmer - $100|
|10. dkanter - $100|
|AMD drops prices on the Radeon RX 460 and RX 470||25|
|Reports: Radeon RX 470D is a budget Polaris card for China||6|
|Examining reports of slow write speeds on the 32GB iPhone 7||21|
|Cellular Insights dissects iPhone 7 Plus modem performance||10|
|Deals of the week: scads of high-performance storage and more||8|
|Tobii's Eye Tracker 4C knows where your head is||0|
|GeForce driver 375.57 is prepared for Titanfall 2||6|
|Phanteks Eclipse P400 gets a tempered glass option||0|
|Radeon 16.10.2 drivers add support for October's big games||10|
|A real "console monitor" would be 720p @ 30 Hz ;P||+58|