Latest Comments
"My AVG WILL NOT UPDATE"
by James Downs | Dec 2, 2008 5:58 AM
 
"Concerned man's comments seem to intimate that if I'm using agents all will be well but the ..."
by Werner K | Nov 26, 2008 8:36 PM
 
"That will enhance Microsoft Office system, including SharePoint - good platform for enterprise ..."
by SGE | Nov 25, 2008 3:29 PM
 
"how many users allow per session? because the digital persona password manager allows only 10 ..."
by Daniel | Nov 25, 2008 12:14 AM
 
"security through obscurity...shows how detached HIPAA is from reality."
by priceOfFishInChina | Nov 20, 2008 1:19 PM
Web

Experts: Consider Safari security before deployment

  • Email a Friend
  • Print Page
Experts: Consider Safari security before deployment
By Dan Kaplan
Jun 13, 2007 9:42 AM
Tags: Experts: | Consider | Safari | security | before | deployment
In a statement, Cupertino, Calif.-based Apple listed speed and performance as the main advantage Safari for Windows has over its competitors, namely Microsoft Internet Explorer (IE) and Mozilla Firefox.

The statement contends Firefox loads pages up to twice as fast as IE7 and up to 1.6 times quicker than Firefox 2.

"We think Windows users are going to be really impressed when they see how fast and intuitive web browsing can be with Safari," Apple CEO Steve Jobs said in a statement. The company announced the new browser version at its annual Worldwide Developers Conference on Monday.

While the statement announcing the launch did not mention security as a selling point, even though Apple traditionally has marketed its products as superior in terms of safety, researchers did not waste time discovering flaws in the new Safari beta release. Errata Security announced Monday that it had discovered a DoS exploit.

John Pescatore, a Gartner vice president and senior fellow, said more bugs could be coming and enterprises considering adoption should pay attention.

"Apple does not have a great track record for the security of its code on anything except Mac OS X, and even that’s had a pretty good history [of vulnerabilities]. Certainly there are issues on how well-baked the security code is for Windows."

The plus side is that Safari will now be available to the millions of Windows users, enabling more browser "heterogeneity" and choice for end-users, he said.

Safari currently has an approximately five percent market share, while IE trumps the competition with an approximately 80 per cent share, according to recent statistics.

"[The more browsers people are using] it makes the job of spyware writers that much harder," Pescatore said.

Microsoft agreed that offering users more options is the best idea.

"With hundreds of millions of Windows users, it's not a surprise that a company that makes web browsers would want it to work with Windows.

We're glad our customers have a choice in browsers, and we think [IE7] is the best available," Kevin Kutz, director of the Windows Client group at Microsoft, said in a statement emailed today to SCMagazine.com

Pescatore said Apple does not provide patching tools and processes like Microsoft does, so if vulnerabilities began running rampant, it could pose a problem for businesses.

"They’re not too helpful helping enterprises patch," he said.

An Apple spokesman did not return a telephone call seeking comment.

Alan Shimel, chief strategy officer of StillSecure, contended today on his blog that the decision to make Safari available for Windows users was less about competition with Microsoft and more about the soon-to-be-released iPhone.

"Apple is not going to let people develop [third]-party apps for the phone," Shimel said. "However, the phone will run Safari. So if you develop Safari-specific web applications, you can get them on the iPhone, assuming they lend themselves to a mobile platform."

The news Monday was reminiscent of Apple's launch of the iTunes application compatible with Windows machines.

The public data of Safari 3 is available free here.

 
Ads by Google
Thoughts on this article? Add a comment below.
Be the first to comment on this article.

Report this comment as offensive:

   * Indicates information we require to process your submission.

Name: *
Email: *
Reason for offense: *
Your report will not be displayed.  
Name:
*
 
Email:
(will not be displayed)
*
 
Comment:
(HTML not permitted)
*
 
Validation
*

Enter the code you see below:

 

 
 
 
 
 
Tripwire - Click here to win an iTouch
 
 
Vulnerabilities & Exploits Whitepapers