Security threats Toolkit
Story: Apple dismisses Safari vulnerability claims
Not really a security problem
This relies on social engineering. You would easily see all the downloads (and could delete them in one fell swoop) from the downloads window in Safari.
The second vuln though, the one that Apple will fix, is a problem that should be fixed.
Full Talkback thread








