Companies struggle as Safari pops up on networks

Comments

Related

Active Comments

sean says: If you are a bank, do us all a favor and ban Quicktime and iTunes from installing. You won't have...

Read the rest | Reply

Dave Lindhout says: A. The user, for clicking the button B. IT, for allowing such crap on their internal system C. Apple, for...

Read the rest | Reply

All Comments (36) | Post New

• Nokia N97 fails as an iPhone competitor
• Moving to a start-up? Fasten your seatbelt
• Apple: Ooops! Macs don't need anti-virus software
• Clues point to Jan. 13 release of Windows 7 beta
• Chinese city requires Net cafes to use legitimate software

Zone

The Security Zone With the mobility of employees and the ease with which external devices can be brought in and out of a network, continuing to build your security plan for network servers and clients is a must. Fortunately, there is much that organizations can do to protect themselves from attacks - internal and external. Having the right policies, procedures and server configurations is critical... Learn more in The Security Zone See All Zones

April 5, 2008 (IDG News Service) Network administrators are complaining that Apple Inc.'s recent decision to offer users its Safari Web browser as part of an iTunes and QuickTime update has made their lives harder, as they struggle to remove the software from PCs on their networks.

For Cody Wilson, the trouble began a few weeks ago, when he noticed that Safari had popped up as a download option with his Apple Software Update, the program that is used to update iTunes and QuickTime.

Wilson, a network administrator at Soy Capital Bank and Trust Co. in Decatur, Ill,, soon found out that many of the users on his network had installed the software without realizing it. "I went into work the next day, and I scanned my network, and my inventory software said I have Safari on 30 PCs," he said.

Because of the way Apple had configured the update, anyone who clicked OK automatically installed the company's Web browser. Most users thought that Safari was simply a component of the Apple software they'd already installed, Wilson said.

"This is not good; this is a security risk," he said. "We're a bank."

Wilson said it has taken him the better part of a week to remove Safari from his network and prevent it from being reinstalled.

In an e-mail interview, Susan Bradley noted that the updates are creating a problem for administrators and making users' machines less secure. "It impacts all of us when more potential attack surface is installed in a group of folks that are vulnerable enough as it is," said Bradley, who is chief technology officer at Tamiyasu, Smith, Horn and Braun Accountancy Corp.

On Friday, patch management vendor Shavlik Technologies LLC announced that it had updated its Shavlik NetChk Protect software to detect and remove Safari.

Administrators may get more support calls from users who have installed Safari without realizing it, said Eric Schultze, chief technology officer at Shavlik. "I could see administrators saying, 'I approved a standard desktop image, now [Safari is] showing up. I need to remove it.'"

One poster to the Patch Management discussion list described the situation more bluntly.

"What's the difference between a malware spreading across a corporate environment and a nagging system-tray icon that installs another insecure default browser?" wrote the poster, who identified himself as "Emin."

Reprinted with permission from

IDG.net
Story copyright 2008 International Data Group. All rights reserved.