Leopard’s tendency to modify applications with digital signatures that can cause headaches in VoIP software Skype and online game World of Warcraft hit headlines earlier that month; Apple have just released software patches in an attempt to deal with their latest OS’ errant firewall, but although the holes they fix are potentially serious as yet there doesn’t seem to be anything addressing that specific incompatibility.

Instead, Apple has had to rephrase their firewall description, which originally

boasted that Leopard could “block all incoming connections”; in the process, they had to confess that they had perhaps been misleading:

“The ‘Block all incoming connections’ setting for the Application Firewall allows any process running as user “root” (UID 0) to receive incoming connections, and additionally allows mDNSResponder to receive connections. that could outcome in the unexpected exposure of network services” Apple

(more…)

Original post by Chris Davies