New OSX vulnerability
Apparently a new OS X vulnerability has been found. Fine. Great to know.
But if you’re going to have a link to your test, for OSX users, you might not want to type “left-click” on the page. Um…MOST OSX people don’t ‘left-click’.
5 Comments »
RSS feed for comments on this post.
Leave a comment
Line and paragraph breaks automatic, e-mail address never displayed, HTML allowed: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>
I seem to only be vulnerable when using Safari? FireFox asks me what I want to do with this file. I don’t think I’m safe surfing with Debian an home either, just not as many people are looking for exploits in GNU/Linux.
About the only time I use Safari in the wild is to read /.. When I go there with FireFox I just get “Waiting for a.as-us.falkeg.net…” in the Status Bar.
Comment by sven — February 22, 2006 @ 14:38 GMT
Yeah, it’s a Safari thing. Apparently, the best thing you can do is turn off “open safe files after downloading” in the Prefs and you’re done. I use Safari all the time over Firefox as I test Safari against a lot of things. But Safari has MASSIVE Javascript problems…like if I’m going to post on the blog, I have to use Firefox cause I can’t see any of the buttons that do links/insert. Or I just have to hard-code the HTML.
Comment by elana — February 23, 2006 @ 11:02 GMT
I’ve done a modicum of Javascript at work, and as we are a Mac shop here I make sure they work in Safari too. While Safar’s Javascript is a little quirky, I’ve always been able te get the same code to work in Safari and FireFox doing nothing too weird. It’s when I have to sit in the hallway to test my pages on MSIE that I have to start doing weird things.
<geek>The DOM specification is partially to blame for Safari Javascript issues. DOM Level 3’s
Nodeobject has the value of a node in nodeValue. ThenAttrobject inheritsNodebut also has a value variable. Most people seem to readAttr’s value, but with Safari you have to use nodeValue. With FireFox both seem to be the same. I don’t remember what MSIE does.</geek>Then my banks online bill paying system only works in MSIE. I guess my bank is Evil.
Comment by sven — February 24, 2006 @ 14:45 GMT
You can left-click with a Mighty Mouse.
Comment by Michael Everson — February 24, 2006 @ 20:05 GMT
So, this seems to be fixed as of the update I did today.
Comment by Sven Heinicke — March 7, 2006 @ 14:40 GMT