Author Topic: Apple releases 10.6.2  (Read 2028 times)

Offline Paddy

  • Administrator
  • TS Addict
  • *****
  • Posts: 13797
    • View Profile
    • https://www.paddyduncan.com
« Last Edit: November 09, 2009, 04:49:32 PM by Paddy »
"If computers get too powerful, we can organize them into committees. That'll do them in." ~Author unknown •iMac 5K, 27" 3.6Ghz i9 (2019) • 16" M1 MBP(2021) • 9.7" iPad Pro • iPhone 13

Offline Xairbusdriver

  • Administrator
  • TS Addict
  • *****
  • Posts: 26388
  • 27" iMac (mid-17), Big Sur, Mac mini, Catalina
    • View Profile
    • Mid-South Weather
Apple releases 10.6.2
« Reply #1 on: November 09, 2009, 04:56:57 PM »
Thank! Getting the manual updater as I write. thumbup.gif tiphat.gif
THERE ARE TWO TYPES OF COUNTRIES
Those that use metric = #1 Measurement system
And the United States = The Banana system
CAUTION! Childhood vaccinations cause adults! :yes:

Offline Shades of Gray

  • Super Duper Poster
  • ****
  • Posts: 311
    • View Profile
    • http://exegete77.wordpress.com
Apple releases 10.6.2
« Reply #2 on: November 09, 2009, 06:42:45 PM »
Downloaded over supper. Just restarted. Everything seems OK.
Ignore the argumentative nature of this poster. He is old and can't engage in meaningful dialog very long.
Therefore, management asks that you at least humor him. Thanks.

Offline krissel

  • Administrator
  • TS Addict
  • *****
  • Posts: 14736
    • View Profile
Apple releases 10.6.2
« Reply #3 on: November 11, 2009, 12:39:51 AM »
Thought this was interesting:
QUOTE
Login Window
CVE-ID:  CVE-2009-2836
Available for:  Mac OS X v10.6 and v10.6.1,
Mac OS X Server v10.6 and v10.6.1
Impact:  A user may log in to any account without supplying a
password
Description:  A race condition exists in Login Window. If an account
on the system has no password, such as the Guest account, a user may
log in to any account without supplying a password. This update
addresses the issue through improved access checks. This issue does
not affect systems prior to Mac OS X v.10.6.


Details on the update/security release:

http://lists.apple.com/archives/security-a...v/msg00000.html


A Techsurvivors founder

Offline Xairbusdriver

  • Administrator
  • TS Addict
  • *****
  • Posts: 26388
  • 27" iMac (mid-17), Big Sur, Mac mini, Catalina
    • View Profile
    • Mid-South Weather
Apple releases 10.6.2
« Reply #4 on: November 11, 2009, 01:19:21 PM »
QUOTE
If an account on the system has no password, such as the Guest account, a user may
log in to any account without supplying a password.
OK, what would be the expected behavior, in this case? dntknw.gif "If someone approaches a group of doors, without a locks, such as a front door, he may enter any of the doors without knocking." Pretty much... Next?
« Last Edit: November 11, 2009, 01:19:52 PM by Xairbusdriver »
THERE ARE TWO TYPES OF COUNTRIES
Those that use metric = #1 Measurement system
And the United States = The Banana system
CAUTION! Childhood vaccinations cause adults! :yes:

Offline rongold

  • Super Poster
  • ***
  • Posts: 228
    • View Profile
Apple releases 10.6.2
« Reply #5 on: November 11, 2009, 02:55:34 PM »
No problems with update, using Combo updater. Most noticeable improvement: checking permissions with disk utility has been accelerated enormously. Also as fast as it used to be in Tiger.
MacBook Pro 13" 2.4 GHz Intel Core i5, OS X 10.9.3, 8 GB RAM

Offline krissel

  • Administrator
  • TS Addict
  • *****
  • Posts: 14736
    • View Profile
Apple releases 10.6.2
« Reply #6 on: November 12, 2009, 12:06:33 AM »
QUOTE(Xairbusdriver @ Nov 11 2009, 02:19 PM) <{POST_SNAPBACK}>
QUOTE
If an account on the system has no password, such as the Guest account, a user may
log in to any account without supplying a password.
OK, what would be the expected behavior, in this case? dntknw.gif "If someone approaches a group of doors, without a locks, such as a front door, he may enter any of the doors without knocking." Pretty much... Next?


Jim, it went farther than that.  Having any account on the system with no password allowed any other account to be accessed as well. It basically negated any passwords placed on other accounts.  dry.gif


A Techsurvivors founder

Offline Xairbusdriver

  • Administrator
  • TS Addict
  • *****
  • Posts: 26388
  • 27" iMac (mid-17), Big Sur, Mac mini, Catalina
    • View Profile
    • Mid-South Weather
Apple releases 10.6.2
« Reply #7 on: November 12, 2009, 01:14:39 PM »
Well, I would certainly have worded it differently. if I understand what you are saying the article said, one could log into AN account, that had no password, and then log into ANY OTHER account, if that other account has a password! I really find that hard to believe and that it hasn't been made more widely known before now. even if it only became available with Snow Leopard! eek2.gif

Perhaps I read things too literally and not without enough consideration, and Obviously without enough investigation of your links! blush-anim-cl.gif I would test the info but I don't have any accounts without a password and I've have several errands that I should be running! scram.gif But thanks for the information, I plan on sharing that at our MUG meeting next week, where we will be hosting an Apple Systems Engineer. thumbup.gif
THERE ARE TWO TYPES OF COUNTRIES
Those that use metric = #1 Measurement system
And the United States = The Banana system
CAUTION! Childhood vaccinations cause adults! :yes: