Dec 22

Written by: James Burke
Friday, December 22, 2006

The “Month of Apple Bugs” project follows a number of other month expose projects that have included browsers (Internet Explorer, Firefox, Safari and Opera) and Apple Kernel.

As with other projects there will be no advance notice of postings to software vendors before publishing on the website.

The researcher “LMH” states that his intention is to improve the security of OSX in the long term through exposing vulnerabilities present in the Operating System now.

Apple has made quite a fanfare of how secure and virus free their operating system is so their reaction to the “Month of Apple Bugs” should be quite interesting if it still goes ahead, a “Week of Oracle Bugs” in December was recently cancelled and no explanation why is forthcoming.

There is the potential of security flaws being released and proof of concept code that exploits these vulnerabilities being released before Apple has a chance to prepare a patch – January should be a month where all Apple system updates are checked daily and applied?

Tags: