RSS RSS Twitter Twitter
macnn

11/13/2008, 6:00pm, EST

Thursday, November 13th

Safari 3.2 adds phishing protection, security updates

Apple has released the latest update to its browser, Safari 3.2. Several security features have been added, including phishing protection and identification of online businesses. JPEG and TIFF image handling has been improved, preventing certain malicious files from closing the program or executing arbitrary code. XML document processing is also improved, correcting a heap buffer overflow vulnerability. For Windows users, bounds checking and zlib 1.2.2 issues have been addressed.

The previous version would sometimes allow form field information to be stored in the page cache, even if the autocomplete function was disabled. The new release properly cleans the form data to prevent access to sensitive information. The software now restricts the type of URL that can be launched from the plug-in interface, which reduces the change that a malicious website can access personal information.

Safari 3.2 is available as a free download from Apple Support. Versions are available for Windows, Tiger, or Leopard operating systems.


Filed under: security, software, Apple

, , 14comments, del.icio.us, slashdot, digg, buzz , Twitter



14 comments
Reader Reactions (Please use <i></i> for italic text)

subscribe to comments
for this article




Expand All
   Global Settings

Protection by Crashing

-14
11/13, 7:55pm, EST

Presumably it protects us by crashing every time it starts up with a link provided by another program, e.g., clicking a link in Apple Mail or NetNewsWire, thereby preventing maliciousness from even getting going.

It also requires a restart to update the web browser.

Hello, is that you PC?

Avoid

-15
11/13, 8:13pm, EST

Keeps crashing constantly. I have been using Safari 3.2 for less than 10 minutes and I have got over 25 crashes. What a pile of crap.

Fresh-Faced Recruit
Joined Feb 2004
User is offline

umm

11
11/13, 8:36pm, EST

To all you complainers about Safari crashing, why don't you remove your 3rd party plugin crap first and see if the crashes still occur. On 7 machines, I have yet to see one crash.

Fresh-Faced Recruit
Joined Apr 2005
User is offline

PithHelmet Seems Toxic

4
11/13, 8:52pm, EST

Very crashy after update. So I deleted SIMBL and its support files and PithHelmet. Seems fine now. I liked PithHelmet's ad blocking but can live without or try other add-ons. Or just use Firefox, except that i don't like Firefox window scrolling behavior. It's always somethin'...

Fresh-Faced Recruit
Joined Apr 2007
User is offline

re: Jarod

2
11/13, 9:42pm, EST

ok, what are you saying? That 3rd party applications are havent been updated yet? You mean everything should work perfectly with all the crap I install on my machine?get real Jarod.. I dont have time for troubleshooting. this is a mac and everything should work perfect./sarcasm

Fresh-Faced Recruit
Joined Feb 2004
User is offline

Re: umm

-7
11/13, 10:06pm, EST

Yeah, but without the 3rd party crap, we have to put up with crappy web pages filled with flash animations, blinking graphics, slow load times, and an overall crappy experience.

Much better to just not install it (for there is really little to warrant rushing a download)

Fresh-Faced Recruit
Joined Aug 2001
User is offline

3.2 works for me

2
11/13, 10:17pm, EST

I couldn't get Safari 3.1 to launch my G5 Quad. Tried everything, it would just quit when launched. So I ended up using Firefox. Installed Safari 3.2 and it works. Not a single crash to report. Firefox has grown on me so I think I'll keep using it as my default browser.

Fresh-Faced Recruit
Joined May 2005
User is offline
No Problems Here...
3
11/13, 10:55pm, EST
...including opening links from NetNewsWire.
Mac Enthusiast
Joined Apr 2000
User is offline

Don't use pithhelmet

2
11/14, 3:20am, EST

Google using custom usercontent.css files to block ads. If your safari is crashing and you are wasting your time with things like pithhelmet then I think you have a PEBKAC error.

Remember the KISS principle.

Senior User
Joined Jul 2004
User is offline

RE: 3rd party "plug-ins"

7
11/14, 8:07am, EST

Aren't really "plug-ins", they are in fact hacks, that are unsupported by Apple. They "plug-in" into applications through the OS X InputManager which was designed to customize text input. If you've installed these hacks and now find that Safari isn't working, don't blame Apple. Safari 3.2 works fine as is and that's all Apple will ever guarantee. So stop your whining and find another browser to use. There are many others to choose from.

The only real plug-in system is designed to extended support for media/object types; Flash, QuckTime, Perian, etc.

Fresh-Faced Recruit
Joined Oct 1999
User is offline
additional comments:..1..2..Next
Your Comments

In order to post comments: If you are a registered member, please login with your MacNN Forums username and password otherwise please uncheck the checkbox below.


Registered Member?
macnn forums login:

macnn forums password:

Not a member of the MacNN forums? Register now for free.

RSS Feeds

Have the latest content delivered to your desktop via RSS. Use the links below to get access to a specific blog, news, or reviews feed.



  MacNN -all

  MacNN Reviews

  MacNN Podcasts

  iPodNN

  Electronista

  Left Lane News
Want To Sell Your Laptop? Any Condition - receive Top Cash. Get an instant quote. Free shipping www.CashForLaptops.com

Internet Marketing School - 100% Online: Master SEO, SEM, E Commerce, Media & More with a U of San Francisco Certificate.

Buy from The Apple Store, iTunes.com, Amazon.com, TechDepot, OfficeDepot, Computers4Sure, or donate.