<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/css" media="screen" href="http://s2.wp.com/wp-content/themes/vip/newyorkobserver/stylesheets/rss.css"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	xmlns:georss="http://www.georss.org/georss" xmlns:geo="http://www.w3.org/2003/01/geo/wgs84_pos#" xmlns:media="http://search.yahoo.com/mrss/"
	>

<channel>
	<title>Betabeat &#187; Firm Still Worked Up About Apple&#8217;s &#8216;Really Vulnerable&#8217; OS [Updated]</title>
	<atom:link href="http://betabeat.com/2012/05/firm-invited-to-help-with-apples-security-basically-says-its-terrible/feed/" rel="self" type="application/rss+xml" />
	<link>http://betabeat.com</link>
	<description>Just another WordPress.com site</description>
	<lastBuildDate>Wed, 19 Jun 2013 01:00:22 +0000</lastBuildDate>
	<language></language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.com/</generator>
<cloud domain='betabeat.com' port='80' path='/?rsscloud=notify' registerProcedure='' protocol='http-post' />
<image>
		<url>http://s2.wp.com/i/buttonw-com.png</url>
		<title>Betabeat &#187; Firm Still Worked Up About Apple&#8217;s &#8216;Really Vulnerable&#8217; OS [Updated]</title>
		<link>http://betabeat.com</link>
	</image>
	<atom:link rel="search" type="application/opensearchdescription+xml" href="http://betabeat.com/osd.xml" title="Betabeat" />
	<atom:link rel='hub' href='http://betabeat.com/?pushpress=hub'/>
		<item>
				
		<title>Firm Still Worked Up About Apple&#8217;s &#8216;Really Vulnerable&#8217; OS [Updated]</title>

		<comments>http://betabeat.com/2012/05/firm-invited-to-help-with-apples-security-basically-says-its-terrible/#comments</comments>
		<pubDate>Mon, 14 May 2012 12:36:58 -0400</pubDate>
					<link>http://betabeat.com/2012/05/firm-invited-to-help-with-apples-security-basically-says-its-terrible/</link>
			<dc:creator>Kelly Faircloth</dc:creator>
				
		<guid isPermaLink="false">http://www.betabeat.com/?p=45376</guid>
		<description><![CDATA[<p><div id="attachment_40893" class="wp-caption alignleft" style="width: 307px"><a href="http://www.betabeat.com/2012/04/19/bad-news-fanboys-your-macs-arent-invincible-after-all/sad_mac-2/" rel="attachment wp-att-40893"><img class="size-full wp-image-40893" title="Sad_mac" src="http://nyobetabeat.files.wordpress.com/2012/04/sad_mac.png" alt="" width="297" height="234" /></a><p class="wp-caption-text">He doesn&#039;t feel so good. (Wikimedia Commons)</p></div></p>
<p>Here's an interesting little news item: The firm that's been <a href="http://www.betabeat.com/2012/04/19/bad-news-fanboys-your-macs-arent-invincible-after-all/" target="_blank">on Apple's back</a> about the increasing threat of malware and other digital nasties to the Mac OS claims to have been "invited" to help the company improve its security. (No wonder they've been <a href="http://www.betabeat.com/2012/04/19/bad-news-fanboys-your-macs-arent-invincible-after-all/" target="_blank">harping so hard</a> on Mac vulnerabilities.)</p>
<p>Kaspersky Lab (which makes antivirus software) was all over the Mac Flashback botnet, tracking its rise and <a href="http://arstechnica.com/apple/2012/04/still-trying-to-remove-flashback-from-your-mac-antivirus-firms-to-the-rescue/" target="_blank">releasing the first removal tool</a>, then treating <a href="http://www.betabeat.com/2012/04/19/bad-news-fanboys-your-macs-arent-invincible-after-all/" target="_blank">the whole thing</a> as an argument for, you guessed it, antivirus software. Now CTO Nikolai Grebenniko <a href="http://www.computing.co.uk/ctg/news/2174190/apple-vulnerable-claims-kaspersky-lab-cto">has dished to <em>Computing</em>,</a> calling the Mac operating system "really vulnerable" and announcing that "and Apple recently invited us to improve its security. We've begun an analysis of its vulnerabilities, and the malware targeting it."</p>
<p>He also predicts there'll be iOS-targeted malware in "the next year or so." <!--more--></p>
<p>As <em>Computing </em>points out, Kaspersky has quite clearly been gunning for exactly this type of arrangement:</p>
<blockquote><p>This appears to be the successful culmination of a long-term Kaspersky strategy to work with Apple. <a title="Apple should open up iOS within a year, says Kaspersky CTO" href="http://www.computing.co.uk/ctg/news/2079758/apple-ios-kaspersky-cto">A year ago</a>, Grebennikov told <em>Computing</em> that Apple could not hope to keep its mobile platform iOS locked down without outside expertise.</p></blockquote>
<p>But he's maybe a little harsh on a company that is, ostensibly, a partner:</p>
<blockquote><p>Our first investigations show Apple doesn't pay enough attention to security. For example, Oracle closed a vulnerability in Java, which was a target for a major botnet several months ago.... Apple blocked Oracle from updating Java on Mac OS, and they perform all the udpates themselves. They only released the patch a few weeks ago – two or three months after the Oracle patch. That's far too long.</p></blockquote>
<p>In-person meetings must be really awkward.</p>
<p><strong>UPDATED: </strong></p>
<p>Since this story went live, Kapersky Labs has clarified all that business about being "invited" to give Apple an assist on the security front. <em>Computing </em>has <a href="http://www.computing.co.uk/ctg/news/2174190/apple-vulnerable-claims-kaspersky-lab-cto" target="_blank">updated the original article</a>:</p>
<blockquote><p>Grebennikov originally stated that Apple had invited Kaspersky Lab to work with the company on improving its security, but has since issued a clarification. The company has now said that its analysis of OS X was "conducted independently" but that "Apple is open to collaborating with [Kaspersky] regarding new OS X vulnerabilities."</p>
<p>In <em>Computing</em>'s original interview, Grebennikov was asked three times if Apple had requested Kaspersky Lab's assistance.</p></blockquote>
<p>Someone please just tell us whether our beloved MacBook Air is safe.</p>
<p>&nbsp;</p>
]]></description>
		<content:encoded><![CDATA[<p><div id="attachment_40893" class="wp-caption alignleft" style="width: 307px"><a href="http://www.betabeat.com/2012/04/19/bad-news-fanboys-your-macs-arent-invincible-after-all/sad_mac-2/" rel="attachment wp-att-40893"><img class="size-full wp-image-40893" title="Sad_mac" src="http://nyobetabeat.files.wordpress.com/2012/04/sad_mac.png" alt="" width="297" height="234" /></a><p class="wp-caption-text">He doesn&#039;t feel so good. (Wikimedia Commons)</p></div></p>
<p>Here's an interesting little news item: The firm that's been <a href="http://www.betabeat.com/2012/04/19/bad-news-fanboys-your-macs-arent-invincible-after-all/" target="_blank">on Apple's back</a> about the increasing threat of malware and other digital nasties to the Mac OS claims to have been "invited" to help the company improve its security. (No wonder they've been <a href="http://www.betabeat.com/2012/04/19/bad-news-fanboys-your-macs-arent-invincible-after-all/" target="_blank">harping so hard</a> on Mac vulnerabilities.)</p>
<p>Kaspersky Lab (which makes antivirus software) was all over the Mac Flashback botnet, tracking its rise and <a href="http://arstechnica.com/apple/2012/04/still-trying-to-remove-flashback-from-your-mac-antivirus-firms-to-the-rescue/" target="_blank">releasing the first removal tool</a>, then treating <a href="http://www.betabeat.com/2012/04/19/bad-news-fanboys-your-macs-arent-invincible-after-all/" target="_blank">the whole thing</a> as an argument for, you guessed it, antivirus software. Now CTO Nikolai Grebenniko <a href="http://www.computing.co.uk/ctg/news/2174190/apple-vulnerable-claims-kaspersky-lab-cto">has dished to <em>Computing</em>,</a> calling the Mac operating system "really vulnerable" and announcing that "and Apple recently invited us to improve its security. We've begun an analysis of its vulnerabilities, and the malware targeting it."</p>
<p>He also predicts there'll be iOS-targeted malware in "the next year or so." <!--more--></p>
<p>As <em>Computing </em>points out, Kaspersky has quite clearly been gunning for exactly this type of arrangement:</p>
<blockquote><p>This appears to be the successful culmination of a long-term Kaspersky strategy to work with Apple. <a title="Apple should open up iOS within a year, says Kaspersky CTO" href="http://www.computing.co.uk/ctg/news/2079758/apple-ios-kaspersky-cto">A year ago</a>, Grebennikov told <em>Computing</em> that Apple could not hope to keep its mobile platform iOS locked down without outside expertise.</p></blockquote>
<p>But he's maybe a little harsh on a company that is, ostensibly, a partner:</p>
<blockquote><p>Our first investigations show Apple doesn't pay enough attention to security. For example, Oracle closed a vulnerability in Java, which was a target for a major botnet several months ago.... Apple blocked Oracle from updating Java on Mac OS, and they perform all the udpates themselves. They only released the patch a few weeks ago – two or three months after the Oracle patch. That's far too long.</p></blockquote>
<p>In-person meetings must be really awkward.</p>
<p><strong>UPDATED: </strong></p>
<p>Since this story went live, Kapersky Labs has clarified all that business about being "invited" to give Apple an assist on the security front. <em>Computing </em>has <a href="http://www.computing.co.uk/ctg/news/2174190/apple-vulnerable-claims-kaspersky-lab-cto" target="_blank">updated the original article</a>:</p>
<blockquote><p>Grebennikov originally stated that Apple had invited Kaspersky Lab to work with the company on improving its security, but has since issued a clarification. The company has now said that its analysis of OS X was "conducted independently" but that "Apple is open to collaborating with [Kaspersky] regarding new OS X vulnerabilities."</p>
<p>In <em>Computing</em>'s original interview, Grebennikov was asked three times if Apple had requested Kaspersky Lab's assistance.</p></blockquote>
<p>Someone please just tell us whether our beloved MacBook Air is safe.</p>
<p>&nbsp;</p>
]]></content:encoded>
		<wfw:commentRss>http://betabeat.com/2012/05/firm-invited-to-help-with-apples-security-basically-says-its-terrible/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
	
		<media:thumbnail url="http://nyobetabeat.files.wordpress.com/2012/04/sad_mac.png?w=150" />
		<media:content url="http://nyobetabeat.files.wordpress.com/2012/04/sad_mac.png?w=150" medium="image">
			<media:title type="html">Sad_mac</media:title>
		</media:content>

		<media:content url="http://2.gravatar.com/avatar/becf95fa833b8aeb13f7720732bd6dc6?s=96&#38;d=identicon&#38;r=G" medium="image">
			<media:title type="html">jhanasobserver</media:title>
		</media:content>

		<media:content url="http://nyobetabeat.files.wordpress.com/2012/04/sad_mac.png" medium="image">
			<media:title type="html">Sad_mac</media:title>
		</media:content>
	</item>
	</channel>
</rss>
