iTunes & QuickTime security alert - bit-tech.net Forums

Tim S · 19th Sep 2008, 14:00

http://www.bit-tech.net/news/2008/09...curity-alert/1

A major security flaw has been discovered in the latest versions of Apple's iTunes and QuickTime, and thus far there is neither a patch nor a workaround available.

proxess · 19th Sep 2008, 14:34

just use VLC and all is solved. gtkpod kicks itunes ass.

identikit · 19th Sep 2008, 15:31

Quote:

Originally Posted by proxess

just use VLC and all is solved. gtkpod kicks itunes ass.

Saying just use XXX isn't exactly a viable solution for the millions upon millions of people that use iTunes, iPods, iPhones etc etc.

It's an unfortunate flaw that needs addressing quickly.

liratheal · 19th Sep 2008, 15:38

That's a bit of an 'oops' moment.

Anakha · 19th Sep 2008, 15:51

Quote:

Originally Posted by identikit

Quote:

Originally Posted by proxess

just use VLC and all is solved. gtkpod kicks itunes ass.

Saying just use XXX isn't exactly a viable solution for the millions upon millions of people that use iTunes, iPods, iPhones etc etc.

When he also suggests an IPod management program (gtkpod), your point becomes seriously redundant.

DarkReaper · 19th Sep 2008, 16:07

Actually, the point is still very valid. The number of people who use iTunes is probably at least an order of magnitude bigger than the number of people who would even know how to install and use VLC and gtkpod, and then you have the ones like me who could do but actually like using iTunes for the most part and don't want to have to change and spend hours importing playlists and ratings to something new. A security flaw in the basic software for the most popular MP3 player in existence is a serious issue.

rhuitron · 19th Sep 2008, 20:18

HAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHA HAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHA HAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHA HAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHA
HAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHA HAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHA HAHAHAHAHAHAHAHAHAHAHAHAHAHA
HAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHA HAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHA HAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHA HAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHA HAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHA HAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHA HAHA
HAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHA HAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHA HAHAHAHAHAHAHAHAHAHAHAHAHAHA

Oh god. Sorry, But really, I told you guys when the first update came out.
Your problem doesn't exist in the Program. Jus the fact that you actually own a product from this crappy company!

dyzophoria · 19th Sep 2008, 21:03

even with news like these apple fanboys will still say joo are all wrong, impossible!, apple stuff cannot be hacked!, now that is annoying

DXR_13KE · 20th Sep 2008, 00:33

i HATE it when quick time gives me the green screen....

LordPyrinc · 20th Sep 2008, 01:21

I have iTunes on my PC, but have not updated it since the initial install. I installed it so that my girlfriend could get my MP3s transferred to her iPod. I have also found it useful for downloading Podcasts from my favorite local radio station's morning show.

I wonder if the flaw affects earlier versions of the software?

identikit · 20th Sep 2008, 14:17

Quote:

Originally Posted by Anakha

Quote:

Originally Posted by identikit

Quote:

Originally Posted by proxess

just use VLC and all is solved. gtkpod kicks itunes ass.

Saying just use XXX isn't exactly a viable solution for the millions upon millions of people that use iTunes, iPods, iPhones etc etc.

When he also suggests an IPod management program (gtkpod), your point becomes seriously redundant.

Back in the day, yeah you could get away with a third party program to update your iPod. But these days is that really the best choice? It's not longer about music and playlists, but games, calendars, contacts, notes, etc etc. The whole point of iTunes, iPods and iPhones, is that they just work (or not as in this case). You have software and hardware beautifully tailored to suit each other to a t.

What's so bad about that, that you'd prefer to choose another piece of software over what is the accepted norm in 98% of the case?

p3n · 20th Sep 2008, 14:51

All of these 'possible' code execution exploits really need some form of planetary alignment worth of probabilities right? What a load of PR circle jerking... remember 'that' flaw with core 2's?

Gareth Halfacree · 20th Sep 2008, 15:03

Quote:

Originally Posted by p3n

All of these 'possible' code execution exploits really need some form of planetary alignment worth of probabilities right? What a load of PR circle jerking... remember 'that' flaw with core 2's?

Nup. See the exploit linked to from the article. It's trivial to exploit, but requires user interaction (visiting a website hosting the code, or opening a malicious QuickTime file).

will. · 20th Sep 2008, 15:48

Quote:

Originally Posted by rhuitron

HAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHA HAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHA HAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHA HAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHA
HAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHA HAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHA HAHAHAHAHAHAHAHAHAHAHAHAHAHA
HAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHA HAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHA HAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHA HAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHA HAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHA HAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHA HAHA
HAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHA HAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHA HAHAHAHAHAHAHAHAHAHAHAHAHAHA

Oh god. Sorry, But really, I told you guys when the first update came out.
Your problem doesn't exist in the Program. Jus the fact that you actually own a product from this crappy company!

What a stupid thing to say.

Nexxo · 21st Sep 2008, 10:28

Quote:

Originally Posted by rhuitron

HAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHA HAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHA HAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHA HAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHA
HAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHA HAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHA HAHAHAHAHAHAHAHAHAHAHAHAHAHA
HAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHA HAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHA HAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHA HAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHA HAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHA HAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHA HAHA
HAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHA HAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHA HAHAHAHAHAHAHAHAHAHAHAHAHAHA

Oh god. Sorry, But really, I told you guys when the first update came out.
Your problem doesn't exist in the Program. Jus the fact that you actually own a product from this crappy company!

Really? And what miraculous PC and software do you use, oh wise one, that makes you invulnerable to crashes and security flaws?

Give me a break. Every platform and program has its flaws. It's better to know about them than to live with a delusional sense of safety. Ignorance is not only bliss, it makes you look like an idiot too.

dragontail · 22nd Sep 2008, 10:06

Quote:

Originally Posted by rhuitron

HAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHA HAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHA HAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHA HAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHA
HAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHA HAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHA HAHAHAHAHAHAHAHAHAHAHAHAHAHA
HAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHA HAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHA HAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHA HAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHA HAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHA HAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHA HAHA
HAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHA HAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHA HAHAHAHAHAHAHAHAHAHAHAHAHAHA

Oh god. Sorry, But really, I told you guys when the first update came out.
Your problem doesn't exist in the Program. Jus the fact that you actually own a product from this crappy company!

Wow. Just wow. You stated a claim without backing it whatsoever. Nevertheless, I'm interested to see what you can come up with (if you even bother). It's always mildly intriguing to see what sort of tosh complete imbeciles can come up with these days.

19th Sep 2008, 14:00	#1
Tim S Pewlius Caesar bit-tech Staff Join Date: Nov 2001 Location: Ascot, Berks Posts: 18,021	iTunes & QuickTime security alert http://www.bit-tech.net/news/2008/09...curity-alert/1 A major security flaw has been discovered in the latest versions of Apple's iTunes and QuickTime, and thus far there is neither a patch nor a workaround available. __________________ Tim on Twitter \| Tim's Blog \| Tim's Flickr The bit-tech Blog \| bit-tech on Twitter \| Join the bit-tech & Custom PC folding team (#35947)

19th Sep 2008, 14:34	#2
proxess Victim of AdvancedModernCapitalism Join Date: Nov 2006 Location: The town of Love, Funchal Posts: 600	just use VLC and all is solved. gtkpod kicks itunes ass. __________________ Netbook: Asus eeePC 901; 12Gb SDD; Custom Ubuntu 9.04 Minimal Compiz Standalone. Laptop: Intel Centrino Duo T5500 1.66ghz; 2048mb RAM; ATI Mobility Radeon x2300; Hitachi 120gb iPod Classic 120GB; Maxtor 160GB External; Ubuntu 9.10 x64 and Windows 7 x64.

19th Sep 2008, 15:38	#4
liratheal Just got a great book on tape Join Date: Nov 2005 Location: High Wycombe, UK Posts: 3,631	That's a bit of an 'oops' moment. __________________ Gigabyte MA790FX, X4 9950 Black Edition, 8gb Geil Black Dragon, 2x4870 512mb, Antec TruePower Quattro 850w I game, Do you?

19th Sep 2008, 16:07	#6
DarkReaper Alignment: Sarcastic Good Join Date: Jan 2004 Location: Belfast, NI Posts: 1,750	Actually, the point is still very valid. The number of people who use iTunes is probably at least an order of magnitude bigger than the number of people who would even know how to install and use VLC and gtkpod, and then you have the ones like me who could do but actually like using iTunes for the most part and don't want to have to change and spend hours importing playlists and ratings to something new. A security flaw in the basic software for the most popular MP3 player in existence is a serious issue. __________________ Yeah, God could have created the Earth 6000 years ago with less than a blink, and set out all the evidence to the contrary just to confuse us. Personally I think that blowing up an entire universe on a timescale of billions of years to create the specific people He wanted has far more style

19th Sep 2008, 20:18	#7
rhuitron Bump? What Bump? Join Date: Aug 2006 Location: Northern California, Usa Posts: 122	HAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHA HAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHA HAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHA HAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHA HAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHA HAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHA HAHAHAHAHAHAHAHAHAHAHAHAHAHA HAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHA HAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHA HAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHA HAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHA HAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHA HAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHA HAHA HAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHA HAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHA HAHAHAHAHAHAHAHAHAHAHAHAHAHA Oh god. Sorry, But really, I told you guys when the first update came out. Your problem doesn't exist in the Program. Jus the fact that you actually own a product from this crappy company! __________________ You use an Apple?? Go play in traffic.

19th Sep 2008, 21:03	#8
dyzophoria Multimodder Join Date: May 2004 Location: Home Posts: 161	even with news like these apple fanboys will still say joo are all wrong, impossible!, apple stuff cannot be hacked!, now that is annoying __________________ [FONT=Lucida Console]picture this..[/FONT] // [FONT=Tahoma][FONT=Fixedsys]picture that..[/FONT][/FONT]

20th Sep 2008, 00:33	#9
DXR_13KE Madeira's banana is the best!!! Join Date: Sep 2005 Location: Madeira ; Portugal Posts: 6,473	i HATE it when quick time gives me the green screen.... __________________ *Renegade X - 0.40 Release!* <---- CLICK!

20th Sep 2008, 01:21	#10
LordPyrinc Legomaniac Join Date: Mar 2008 Location: USA Posts: 256	I have iTunes on my PC, but have not updated it since the initial install. I installed it so that my girlfriend could get my MP3s transferred to her iPod. I have also found it useful for downloading Podcasts from my favorite local radio station's morning show. I wonder if the flaw affects earlier versions of the software? __________________ HP Pavilion Elite m9040n PC - Vista Home Premium Intel Core 2 Quad Processor Q6600 @ 2.40ghz - 3G of RAM - Dual 320G HDs Upgrades/Add-ons: 22" Widescreen LCD, 700W RocketFish PSU, BFG GeForce 9800 GT 160G Ext USB HD, Logitech X-540 5.1 Surround Sound Speakers

20th Sep 2008, 14:51	#12
p3n Hypermodder Join Date: Jan 2002 Posts: 736	All of these 'possible' code execution exploits really need some form of planetary alignment worth of probabilities right? What a load of PR circle jerking... remember 'that' flaw with core 2's?