Right, just what I need, Apple holding me hostage with a security vulnerability until I upgrade to the next version. Things like that make sudo apt-get update look much better.
So if you were holding off upgrading to Yosemite, you may no longer have a choice if you value the security of your Mac. Since OS X 10.7, there has been a flaw in an unpublished OS X API (application programming interface) used by OS X system processes to raise the level of the account to root level. Meaning that an evil doer could leverage this API to pretty much “pwn” your Mac. TrueSec’s Emil Kvarnhammar discovered this flaw and reported it to Apple immediately. The company asked Kvarnhammar to postpone public disclosure “due to the amount of changes required in OS X.” A fix came out when OS X 10.10.3 shipped yesterday. As an aside, I will have a report on OS X 10.10.3 along with the new Photos app amongst other items this weekend. Now the fact that this is fixed in the latest version of Yosemite is great if…
View original post 100 more words
ihatemommybrain 