Security issue that affects Safari 5 (Snow Leopard)

From today's Macintouch:
http://www.macintouch.com/readerreports/security/index.html#d04mar2015
Does this FREAK attack affect me?
Do you have an iPhone, an Android or a Mac OS X computer? It affects you.
Do you visit websites like americanexpress.com, groupon.com, mit.edu, marriott.com, usajobs.gov, bloomberg.com or many others? It affects you.
About 12% of websites are thought to be affected.
Hmm. So what is being done about it?
Apple says it will be rolling out a fix in the form of a software update next week.
Go to https://freakattack.com/ to see if your particular browser is vulnerable. You may wish to switch to a browser which isn't affected.
Another reason for Snow Leopard users to abandon Safari. The current version of Firefox tests OK.

Similar Messages

QT_WriteObject problem in Safari only, Snow Leopard

Can someone help me display my H.264 movie on a web page?
I have a H.264 encoded file which will not consistently play in Safari under Snow Leopard using QT_WriteObject. It does play in Firefox and XP/ IE 7, and will play in Safari if you give it the .mov file directly. I have 3 computers running Snow Leopard, and one of them, an iMac, will sometimes play the file. I booted the iMac into Leopard and it played the first time. The quicktime plugin shows as 7.6.3 in Snow Leopard.
I have tried various combinations of the parameters for QT_WriteObject. I think the movie is 640 x 480 . I have added a little to the vertical so that the controller will show completely in Firefox.
Here is the html I am currently using. The file is at tnwheeler.com/alaska1.html. There are no errors in the error console.
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN"
"http://www.w3.org/TR/html4/strict.dtd" >
<html lang="en">
<head>
<title>Testing quicktime</title>
<script language="javascript" type="text/JavaScript" src="AC_QuickTime.js"> </script>
</head>
<body>
Trip to Alaska in 1993
This movie is in standard definition.
At this time, this movie will not show in Safari. Please use Firefox.
<script language="javascript">
QTWriteOBJECT('http://tnwheeler.com/alaskafinal.mov' , '640', '500', '',"autoplay","true","bgcolor","#000000") ;
</script>
</body>
</html>

Thank you for your helpful suggestions. I tried them both, in fact they are up there now, but no improvement. PageOT is a nice program. Actually, I started with the straight <embed> statements because they had always worked for me before. But I went to QT_WriteObject before posting because I thought people would say to try it.
I noticed your OS is listed as 10.5? Is this still correct? If so, that may be why it works for you. I booted to an old version of Leopard, and it worked fine. All of my other videos work in Snow Leopard/Safari except for this one. It was created in the same way- exported from FinalCut (latest version) and then taken into DVKitchen for the H.264. Most , if not all, of the others are hidef, whereas this one is standard def.
I think it is either a problem in how it was created (not by me, so I can't do much about that) or Safari under Snow Leopard. But the fact that it will play from the url, but not from the embed statements really has me puzzled.

HT5246 The above info is confuses me. I thought this trojan horse affected those who had Java (JRE) up and running i.e.,Safari security Java checkbox enabled. I also believed this Trojan horse affected those using Snow Leopard. Clarify please.

The above info re the Flashback removal tool confuses me. I thought this trojan horse affected those who had Java (JRE) up and running i.e.,Safari security Java checkbox enabled. I also believed this Trojan horse also affected those using Snow Leopard. Clarify please.

There are several variants of the trojan. The first ones were released as installers for Adobe Flash and therefore did not require you to have Java on your system. Later variants took advantage of a Java vulnerability and could install themselves by simply visiting a rogue Web site. Therefore, even without Java installed if you had run a rogue updater for Adobe Flash or Reader, then you might have installed the trojan.
The trojan also affects Snow Leopard and prior versions of OS X (so far the code is known to be intel-only, but this is unconfirmed), but Apple has only issued patches for supported versions of the OS (version 10.6 or later).
Apple's removal tools run in OS X 10.6 or later if you instlal the Java update, and the standalone removal tool is for Lion only. Why Apple does not offer options for other operating systems is beyond me, but that's the way of things. Right now there are other tools you can use to check for and remove the malware on versions of OS X that Apple does not support: http://reviews.cnet.com/8301-13727_7-57413811-263/flashback-malware-removal-tool -roundup/

My Snow Leopard 10.6.3 has Safari 4.0.4 but this cannot be used for the new features of iTune. I tried upgrading to Safari 5.1.7 but it needs Snow Leopard 10.6.8. Where can I get a version of Safari 5.1 that is compatible with Snow Leopard 10.6.3?

My Snow Leopard 10.6.3 has Safari 4.0.4 but this cannot be used for the new features of iTunes. I tried upgrading to Safari 5.1.7 but it needs Snow Leopard 10.6.8. Where can I get a version of Safari 5.1 that is compatible with Snow Leopard 10.6.3?

Hi..
here can I get a version of Safari 5.1 that is compatible with Snow Leopard 10.6.3?
Not possible. You need to update to v10.6.8
Click your Apple menu > Software Update
Or update using the this download > Mac OS X 10.6.8 Update Combo
Then restart your Mac.

Safari on Snow Leopard doesn't play right with multimedia on WordPress

I have a problem when I insert a QuickTime movie or Flash graphic into a WordPress post. The problem is that the CSS drop-down menu on the post page fall 'behind' the QuickTime movie instead of in front.
To combat this I inserted the following embed codes in the html for the movie: <param name="wmode" value="transparent"> and wmode="transparent"
This would appear to fix the drop-down problem but it creates a new problem for Safari on Snow Leopard for Macs. The QuickTime controls don't work on the movies. You can start/stop the movie by using the spacebar but the transparent layer kills access to the controls when either QuickTime X or QuickTime 7.x is used in Safari. Seems to work fine in Firefox.
It might be easier to show the problem via examples which follow:
No transparency code example
http://www.hawaii247.org/2009/11/06/community-pays-tribute-and-honors-uncle-geor ge-naope/
transparency code embedded example
http://www.hawaii247.org/2009/10/29/rallying-in-hilo-for-the-international-day-o f-climate-action/
Is there a away around the drop-down bug so I don't have to use the transparency embed code? The drop-down bug also occurs in IE8 I believe. If you choose the Sports drop-down you should see what I'm talking about in the first example.

Yep. Exactly as you describe.
Since your menu "drop downs" are the source of the original issue have you considered breaking the "long" one into "two" parts?

Is there a patch for the NTP security issue that does not require Xcode?

Is there a patch for the NTP security issue that does not require Xcode? I have an older Intel mini that can't be upgraded beyond 10.6.8 and I currently don't have room for Xcode 3.2.5. Has somebody trustworthy posted these binaries?

NTP fix for Snow Leopard: https://drive.google.com/folderview?id=0BxQCbeIgpA2uVjFiN1h4bGZNQ2c&usp=sharing
You can also go to System Preferences/Date & Time and deselect Set time Automatically.
Snow Leopard users: Turn off automatic date and time in System Preferences immediately

Safari on Snow Leopard

The Safari in Snow Leopard is so disappointing. Am facing problems like
- Pixelated images on some pictures on facebook (Working fine on Firefox)
- Not automatically downloading files

I have the same issue. Pages that were nearly instant before are now exceedingly slow (www.google.com, for example, takes about 7 seconds). I have several other computers on the same network that are either running Leopard or Windows that don't have this problem, so it's not a DNS issue. I've also verified that my network connection isn't saturated.
I've tried the following:
* Resetting Safari
* Emptying the cache
* Repairing permissions
* Deleting all subfolders of ~/Library/Caches/com.apple.Safari
* Deleting Downloads.plist, History.plist, and LastSession.plist
* Removing everything from both the system and account copies of the InputMethods and Internet Plugins folders
This should essentially be a clean install of Safari, but it is still exceedingly slow. Note that it's not consistent: it will load a page quickly then, 5 seconds later, the same page will take a very long time to load.
Sometimes, most of the items on the page will come in nearly instantaneously, but suddenly the page will stop loading for a good 5 to 10 seconds. Once that time elapses, the rest of the page suddenly downloads.
Does anyone have any ideas?

Safari in Snow Leopard

I have upgraded to Snow Leopard weeks ago, and have been having minor issues. I usually use Firefox, but a website requires Safari in Snow Leopard to run - well, I've downloaded the Safari off of the snow leopard disk THREE times and it still says I have an invalid version on my computer and cannot run. I also just installed all the current FEI updates and all that stuff, to see if it would help - alas, I still do not have the ability to run Safari. This is killing me because I need this website to study for a huge test tomorrow, so any quick suggestions would be kindly appreciated.

HI,
If you are running 10.5.2, go to the Apple Menu / Software Updates. It's very important to keep your system software up to date.
After you finish with the installation, repair disk permissions.
Quit any open applications/programs. Launch Disk Utility. (Applications/Utilities) Select MacintoshHD in the panel on the left, select the FirstAid tab. Click: Repair Disk Permissions. When it's finished from the Menu Bar, Quit Disk Utility and restart your Mac. If you see a long list of "messages" in the permissions window, it's ok. That can be ignored. As long as you see, "Permissions Repair Complete" when it's finished... you're done. Quit Disk Utility and restart your Mac.
Carolyn

Safari in Snow Leopard and search provider

Hi,
I cannot find option to choose search provider in Safari in Snow Leopard. Did it disappear?

Hi,
That image you posted is from the Windows version of Safari (note the close window button in the top right of the window).
The Windows version does allow you to toggle between Google and Yahoo. For whatever reason, Apple only offers Google on OS X.
Many third party developers offer tools that can change the default. Have a search on versiontracker.com / macupdate.com - just be aware that they may not be Snow Leopard compatible yet.

Installing Leopard server on the servers that only come with Snow Leopard

Has anyone ever "downgrade" - installing Leopard server on the servers that only come with Snow Leopard installer disc??? Is there anything special involved?? Or can I just pop in a Leopard Server installation disc from previous generation servers and procede?? These servers are going to be a part of Xsan. And with my previous horrible experience with Snow Leopard and Xsan, I am really trying to avoid going through that again... Thank you!

The general answer is yes. But the conditional answer is that you must have the original installation media from the Xserve model before it started shipping Snow Leopard exclusively. This means you would need to have bought an Xserve as recently as December to have the combo OS pack as I believe Apple stopped shipping Leopard around early January (although that might be on BTO models so if you got one from the channel it may still have the original media kit). You need to be mindful of the machine's Boot ROM version. The change of one digit can cause some issues with older installation media.
If you don't have recent media kits, you "should" be able to construct a functional OS by building on other hardware and patching up to 10.5.8. Then cloning it to the new unit.
And, you've peaked my interest. What specific issue have you had with 10.6 and Xsan?
Hope this helps

I had OS 10.5.8 on my Macbook and couldn't run turbotax 2012 because of that. I purchased Snow leopard on CD and installed it. Now, about my ABOUT this mac says 10.6.8. Now, I can't print to my Lexmark z705. I get an error message.

I had OS 10.5.8 on my Macbook and couldn't run turbotax 2012 because of that. I purchased Snow leopard on CD and installed it. Now, about my ABOUT this mac says OS 10.6.8. Now, I can't print to my Lexmark z705. I get an error message with no explanation.

Unless there are drivers provided by Apple to work with the printer, you're out of luck. The latest drivers provided by Lexmark are for OS X 10.4 Intel. Unfortunately, this can happen when slightly older peripherals and newer software don't mesh.

My iMac says I have 10.6.8 operating system now. Problem is I do not know if that is 'Lion' or 'Snow Leopard' ... and I wish to upgrade to 'Mountain Lion'

My iMac says I have 10.6.8 operating system now. Problem is I do not know if that is 'Lion' or 'Snow Leopard' ... and I wish to upgrade to 'Mountain Lion'

That is Snow Leopard.
Upgrading to Snow Leopard, Lion, or Mountain Lion
Upgrading to Snow Leopard
You can purchase Snow Leopard by contacting Customer Service: Contacting Apple for support and service - this includes international calling numbers. The price is $19.99 plus tax. You will receive physical media - DVD - by mail.
Third-party sources for Snow Leopard are:
Snow Leopard from Amazon.com
Snow Leopard from eBay
After you install Snow Leopard you will have to download and install the Mac OS X 10.6.8 Update Combo v1.1 to update Snow Leopard to 10.6.8 and give you access to the App Store.
Before upgrading check that you computer meets the minimum requirements:
Snow Leopard General requirements
1. Mac computer with an Intel processor
2. 1GB of memory
3. 5GB of available disk space
4. DVD drive for installation
5. Some features require a compatible Internet service provider; fees may
apply.
6. Some features require Apple’s MobileMe service; fees and terms apply.
Upgrading to Lion
First, you need to upgrade to Snow Leopard 10.6.8 as stated above.
You can purchase Lion by contacting Customer Service: Contacting Apple for support and service - this includes international calling numbers. The cost is $19.99 (as it was before) plus tax. It's a download. You will get an email containing a redemption code that you then use at the Mac App Store to download Lion. Save a copy of that installer to your Downloads folder because the installer deletes itself at the end of the installation.
Before upgrading check that you computer meets the minimum requirements:
Lion System Requirements
1. Mac computer with an Intel Core 2 Duo, Core i3, Core i5, Core i7, or
Xeon processor
2. 2GB of memory
3. OS X v10.6.6 or later (v10.6.8 recommended)
4. 7GB of available space
5. Some features require an Apple ID; terms apply.
Upgrading to Mountain Lion
Be sure your computer meets the minimum requirements:
Apple - OS X Mountain Lion - Read the technical specifications.
Macs that can be upgraded to OS X Mountain Lion
1. iMac (Mid 2007 or newer)
2. MacBook (Late 2008 Aluminum, or Early 2009 or newer)
3. MacBook Pro (Mid/Late 2007 or newer)
4. MacBook Air (Late 2008 or newer)
5. Mac mini (Early 2009 or newer)
6. Mac Pro (Early 2008 or newer)
7. Xserve (Early 2009)
Are my applications compatible?
See App Compatibility Table - RoaringApps - App compatibility and feature support for OS X & iOS.
Am I eligible for the free upgrade?
See Apple - Free OS X Mountain Lion upgrade Program.
For a complete How-To introduction from Apple see Apple - Upgrade your Mac to OS X Mountain Lion.

My Mac is OS X 10.6.8, does that mean I have SNow Leopard?

My Mac is OS X 10.6.8, I bought it mid 2011, does that mean I have Snow Leopard?
Can I directly upgrade to OS X Lion?
I would like to start using iCloud

I would like to start using iCloud
I'd slow down and think that over very carefully. Lion is definitely not all it's cracked up to be, so before you upgrade to that, spend come extended quality time at your nearest Apple Store to familiarize yourself with it and all the changes it makes to Mac OS X. You may find you don't like those changes.

Why does my iCal delete all events older than a year? Is this a synch issue? I'm running Snow Leopard.

Why does my iCal delete all events older than a year? Is this a syn issue? I'm running Snow Leopard.

this has already been answered.
please ignore my question.

No "Convert to * Chinese Text" service in Safari for Snow Leopard

The services "convert to simplified chinese text" and "convert to simplified chinese text" don't seem to work in Safari under Snow Leopard. It works if you're in a text box, but not for text on the page itself (it worked under Leopard).
Is this a problem with my system, or do others have this problem too? Is a fix planned, or is this a "feature"? (sigh)
This is useful when reading webpages written in traditional (simplified) chinese for those who are better at reading simplified (traditional) characters.
Test it yourself:
Highlighting this traditional chinese character should allow you to access the "Convert to Simplified Chinese Text" service: 車
Highlighting this character should allow you to access the "Convert to Traditional Chinese Text" service: 车
Thanks

Is a fix planned,
Only Apple would know, and they never provide such info. Make sure you tell them you want this feature back via Safari > Report Bugs to Apple and
http://www.apple.com/feedback/macosx.html

Security issue that affects Safari 5 (Snow Leopard)

Similar Messages

Maybe you are looking for