Safari 3.0: maximum bugs, minimum security

24th June 2007

However that may be, the emergence of Safari for the PC is an event significant itself, even not taking into consideration the chances of Apple on success among its competitors. Perhaps that is the reason why even the beta version was subjected by IT community to the most careful examination, especially for a decent level of security and protection from attacks. But Apple has failed to demonstrate a good example to follow - in the very first day after release of Safari independent experts have identified more than half a dozen, three of which can lead to remote control of the system. Researchers say that Apple has treated the security of the browser very carelessly and is not willing to cooperate with users.
The first person to start actively exploring errors of the browser was David Maynor from Errata Security, who published a report on the first bug after 2 hours after the beta was released. By the end of the day Maynor counted six bugs. According to him, four of them could disable the system or browser, and the rest could lead to remote execution of a random code. Maynor notes that the found errors apply equally to both Windows and Mac OS X. Other vulnerabilities were discovered by Danish and Israeli experts. At the downloading page it is said that Safari is designed to â€œbe safe from the first day.â€ Beta version did not confirm those words. Apparently, the â€œFirst dayâ€ of Safari 3.0 has not come yet.