Security threats Toolkit
Story: Apple dismisses Safari vulnerability claims
Not an issue, the System queries downloaded files
This is not a security issue on a Mac because while Safari doesn't ask permission before downloading an application, the System queries any executable downloaded from the internet before opening it, including an offer to take you to the web site it was actually retrieved from.
As usual, the news media goes off half-cocked without asking any savvy Mac users what the situation really is.
This doesn't preclude human engineering, but there will always be folk who download files from dodgy sites, ignore the warnings, insert their banking details then moan when their accounts are stripped.
Full Talkback thread








