More on the "30 minutes" - ZDNET scare

[elektro80]

Dave Schroeder at the University of Wisconsin takes a closer look at the "Mac OS X hacked in under 30 minutes" report.


Mac OS X Security Test

[brinxmat]

OK: The original MacMini was runing OS X 10.3, and the user had an account.

How about this: http://www.rixstep.com/1/20060306,00.shtml

Another thing: you know what the OS is in either test; if the machine has been locked down properly, it won't happily announce its OS in the "Welcome to Darwin!" fashion, so you won't necessarily know which holes to look for. My box won't anyway, it will tell you among onther things on login that it is an "insecure heap of blancmange".

Mind you, IIS has a tendency to do this, even if you get a 404.

See http://www.insecure.org/nmap/man/

[elektro80]