Paranoid Android can protect you from this potential vulnerability until Apple makes an official fix available. It does this by watching the URL schemes that are requested and delaying them until you've had a chance to say whether you'd like to proceed or not. If you know that the url that's being loaded is legit, go ahead, but if it looks suspicious, Paranoid Android gives you an opportunity to cancel it.
A vulnerability in Apple's Mac OS X results in a potential situation in which a malicious person could execute arbitrary commands on your machine, such as deleting your home directory,
What's New
Paranoid Android can now notify you when a file is launched with a custom application (one other than the default one for the document's file type). This does not affect opening documents from within applications.
Updated to mitigate the recent Safari/LaunchServices exploit
Requirements
PPC, Mac OS X 10.3 or later.
Be the first to recommend a similar software title.
At least Paranoid Android has one of the most accurate titles I've seen. You see, it is an android - a robot. Unintelligent. When I doubleclick on a download from Safari, it asks me if I want to allow it EVERY DAMN TIME. The same file type, the same program, the same operation.
And it is definitely paranoid, as in unnecessary, since there are no exploits as yet that PA would help against.
Frankly, this is one of the most annoying, intrusive programs I've ever installed, and while it has its place, it's certainly not on *my* Mac.
[Version 1.2]
Anonymousreviewed on 26 May 2004
The with Paranoid Android installed Application Enhancer crashed my system totally. After removing that Preference Pane everything is normal again...
Something is wrong with die APE...
[Version 1.2]
2 Replies
Anonymouscommented on 26 May 2004
no, something was wrong with your Mac before you installed this Paranoid Android.
fix your permissions, delete caches, etc... use Apple's Disk Utility to fix permissions, use OnyX to delete user caches, etc.
Anonymouscommented on 29 May 2004
Yeah! What's up with all that FUD?
Anyway, should anyone want some serious reading about APE and why it is safe, go check
http://www.unsanity.org/archives/000342.php
Anonymousreviewed on 26 May 2004
I can't understand where the data from the previous poster that says between 30 and 35 % of all crashes reported to Appel through "Crash Report" are due to Unsanity's haxies, comes from. I would love to see some link.
Anyway. I find this one fix to be great. It is certainly easier than RCdefault or Moreinternet, as here you don't have to configure even the slightest thing. You just install and forget, because those exploits wont be a problema anymore.
Also, I have many of their haxies and must say that none of them has given me any problem. Everybody should read the APE module readme, where it explains that it cannot bring down the whole system because "Application Enhancer operates in user memory space, which means it cannot affect the system itself or processes belonging to other users".
Another good thing of Paranoid Android is that in fact, ir asks teh user wether or not to open those files that might be exploits, which is great, because I don't want to completely disable helpers or lose their functionality (as would be the case should I choose to change AppHelper to TextEdit, for example).
Finnally, Unsanity guys are very responsive to suggestions, which is great, and Jason Harris, the developer of this freeware haxie (if I'm not mistaken) is extremely professional.
[Version 1.2]
Anonymousreviewed on 26 May 2004
I own most of unsanity's products, think they're great and never had any problems with any of the haxies......... that is, until now. After installer this my Cube would boot and gang almost immediately. Removed it and re-installed version 1.1 and now everything's fine again.
[Version 1.2]
Anonymousreviewed on 25 May 2004
I found RCDefault App to be a much simpler choice to prevent the disk/ftp security hole. It's only a single prefs pane you can install and uninstall at will and doesn't use APE which I've had reservations about for some time.
http://www.macupdate.com/info.php/id/14618
[Version 1.2]
3 Replies
Anonymouscommented on 26 May 2004
Insinuations? All I read from the other Anonymous comment above was that he thought RCDefaultApp was simpler and that he didn't want to install APE.
Now, if you want to read more into that, go ahead. But don't accuse him of making insinuations, etc., about APE just because he chose not to use it.
Anonymouscommented on 26 May 2004
Jeez, he/she is insinuating when saying that he/she has reservations, yet he/she doesn't make clear what they are all about.
Anonymouscommented on 26 May 2004
That's still just saying he has his own reasons for not wanting to install it, not that they're necessarily BAD reasons, etc. It's still his choice; he could not want to install APE because his hard drive is 99.9% full. Does that mean he's trashing APE? No.
Anonymousreviewed on 25 May 2004
Some (all ?) users will want to add "file" to the allowed "URI schemes" for version 1.2, in the System Preferences / Application Enhancer / Paranoid Android. Click the "+" sign and enter "file".
No crashing for me on 17" iMac.
[Version 1.2]
Anonymousreviewed on 25 May 2004
Made my system come to a complete halt! Removed P.A. 1.2, and everything went back to normal. (G5/Dual 2G)
Must be something wrong about your system. Paranoid Android is a very simple and safe haxie - most likely it's just exposing an underlying problem in your system.
Anonymousreviewed on 22 May 2004
Now fixed in Security Update 2004-05-24
[Version 1.1]
1 Reply
Anonymouscommented on 22 May 2004
Wrong-o...only a partial fix by Apple.
There are currently no troubleshooting comments. If you are experiencing a problem with this app, please post a comment.
Please login or create a new MacUpdate Member account to use this feature
Watch Lists are available to MacUpdate Desktop Members Upgrade Now
Download and auto-install
using MacUpdate Desktop. Save
time moving folders and cleaning-up.
Paranoid Android can protect you from this potential vulnerability until Apple makes an official fix available. It does this by watching the URL schemes that are requested and delaying them until you've had a chance to say whether you'd like to proceed or not. If you know that the url that's being loaded is legit, go ahead, but if it looks suspicious, Paranoid Android gives you an opportunity to cancel it.
A vulnerability in Apple's Mac OS X results in a potential situation in which a malicious person could execute arbitrary commands on your machine, such as deleting your home directory, or doing other harmful actions. This vulnerability involves the use of URL "schemes". These are the part of a web address that specifies what program should be used to handle the address.
Anonymous reviewed on 07 Jun 2004
And it is definitely paranoid, as in unnecessary, since there are no exploits as yet that PA would help against.
Frankly, this is one of the most annoying, intrusive programs I've ever installed, and while it has its place, it's certainly not on *my* Mac.
Anonymous reviewed on 26 May 2004
Something is wrong with die APE...
fix your permissions, delete caches, etc... use Apple's Disk Utility to fix permissions, use OnyX to delete user caches, etc.
Anyway, should anyone want some serious reading about APE and why it is safe, go check
http://www.unsanity.org/archives/000342.php
Anonymous reviewed on 26 May 2004
Anyway. I find this one fix to be great. It is certainly easier than RCdefault or Moreinternet, as here you don't have to configure even the slightest thing. You just install and forget, because those exploits wont be a problema anymore.
Also, I have many of their haxies and must say that none of them has given me any problem. Everybody should read the APE module readme, where it explains that it cannot bring down the whole system because "Application Enhancer operates in user memory space, which means it cannot affect the system itself or processes belonging to other users".
Another good thing of Paranoid Android is that in fact, ir asks teh user wether or not to open those files that might be exploits, which is great, because I don't want to completely disable helpers or lose their functionality (as would be the case should I choose to change AppHelper to TextEdit, for example).
Finnally, Unsanity guys are very responsive to suggestions, which is great, and Jason Harris, the developer of this freeware haxie (if I'm not mistaken) is extremely professional.
Anonymous reviewed on 26 May 2004
Anonymous reviewed on 25 May 2004
http://www.macupdate.com/info.php/id/14618
Now, if you want to read more into that, go ahead. But don't accuse him of making insinuations, etc., about APE just because he chose not to use it.
Anonymous reviewed on 25 May 2004
No crashing for me on 17" iMac.
Anonymous reviewed on 25 May 2004
You be the judge!
-2
Anonymous reviewed on 25 May 2004
Anonymous reviewed on 24 May 2004
-2
Anonymous reviewed on 22 May 2004