Time Machine blamed in Leopard security scare

Unless you're careful Mac OS X's Time Machine app could leave your Mac vulnerable to attack

Another flaw has been discovered in Apple's Mac OS X 10.5 Leopard operating system that could leave Mac owners open to attack from trojans and other malware.

The problem arises from use of Time Machine, Apple's easy to use automated backup system. Blogger Stephen Pyile says old versions of applications archived on to a Time Machine enabled hard drive can be triggered to launch without warning - and that's a big problem if the app has a security flaw.

"Imagine that you trash an application because of a security flaw. Say, it handles the URL type foofoo, and is proven to be a security risk. But the developer won't fix it (or hasn't fixed it yet), so you've removed the application from your hard drive to keep yourself safe.

"It doesn't work that way - you're not safe. Time machine has made a copy in your time machine backup that Mac OS X will cheerfully launch without a warning," Pyile says.

This is all the more worrying given that hackers are now targeting Mac OS X 10.5 with trojans and other malware.

Protect yourself

To protect yourself from attack, you can take two simple steps:

  1. Delete all examples of a particular backup from your Time Machine archive using the contextual menu within the applications.
  2. Hide the main Applications, Library and System folders from Time Machine so they are not backed up. You can do this under System Preferences > Time Machine > Options.

Given the beefed-up security measures used elsewhere in Leopard let's hope Apple closes this loophole soon.

[via Cult of Mac]

TOPICS
Latest in Software
Apple WWDC 2025 announced
3 things Apple needs to do at WWDC 2025 to save Apple Intelligence, and why I'm convinced it will
Chat GPT-generated images along with source material
ChatGPT 4o image generation is so good we will never be able to trust iPhone renders (and photos) again
Discord Clyde
Discord's game overlay has seen a complete revamp - I've tried it, and it's one of the best updates ever
A young woman is working on a laptop in a relaxed office space.
I’ll admit, Microsoft’s new Windows 11 update surprised me with its usefulness, providing accessibility fixes, a gamepad keyboard layout, and PC spec cards
Youtube
YouTube Premium could be getting a new time-saving perk, showing you recommended videos directly in your playback queue
The Kiwi design K4 Boost Battery strap being worn by Hamish
I test VR headsets for a living, and this affordable headstrap is the first Meta Quest 3 accessory you should buy
Latest in News
An image of Pro-Ject's Flatten it closed and opened
Pro-Ject’s new vinyl flattener will fix any warped LPs you inadvertently buy on Record Store Day
EA Sports F1 25 promotional image featuring drivers Oscar Piastri, Carlos Sainz and Oliver Bearman.
F1 25 has been officially announced, with this year's entry marking a return for Braking Point and a 'significant overhaul' for My Team mode
Garmin clippd integration
Garmin's golf watches just got a big software integration upgrade to help you improve your game
Robert Downey Jr reveals himself as Doctor Doom to a delighted crowd at San Diego Comic-Con 2024
Marvel is currently revealing the full cast for Avengers: Doomsday, and I think it's going to be a long-winded announcement
Samsung QN90F on yellow background
Samsung announces US prices for its 2025 mini-LED TV lineup, and it’s good and bad news
Nintendo Switch Lite
Forget the Nintendo Switch 2, the original Switch is getting one last hurrah in a surprise Nintendo Direct tomorrow