Karl Kopp

Daily update #2.

• On my previous post regarding the ACMA blacklist, I in no way condone the materials hosted at ANY of the sites listed. I just honestly believe the whole concept of using a blacklist is absolutely pointless, cripples the web, and achieves NOTHING - content of that nature pops up faster than you can add the URLs to the blacklist, and those that want to get it will always be able to circumvent it. Today they even blacklisted a tuckshop and a dentist, which casts further doubt on its usefulness. I actually thought the Howard governments NetAlert program was much better, although under publicised.
• ASP.NET MVC has gone RTM.
• We released a new site for Ford Performance Racing today - nice work boys
• The upcoming Umbraco 4.0.1 release will include a sweet new XSLT visualiser - looks awesome! Still would love version control on the XSLT files just like the content :)
• Internet Explorer 8 (IE8) is now out
• More details on Mac OS X / Safari hack in a good interview on ZDNet. And from this statement, maybe the SDL Microsoft implemented is working?

Why Safari?  Why didn't you go after IE or Safari?

It's really simple. Safari on the Mac is easier to exploit.  The things that Windows do to make it harder (for an exploit to work), Macs don't do.  Hacking into Macs is so much easier. You don't have to jump through hoops and deal with all the anti-exploit mitigations you'd find in Windows.

It's more about the operating system than the (target) program.  Firefox on Mac is pretty easy too.  The underlying OS doesn't have anti-exploit stuff built into it.