Mac OS X Helper Exploit - Fix Now Available

As per this MacMegasite posting listing below, Apple has released a fix for the recently discovered vulnerability in the Help system of Mac OS X. This is a small update and does not require a reboot when complete.

At this point, I would recommend that all users download and install the update.

Apple Security Update 2004-05-24
Apple Security Update 2004-05-24 is now available via the software update panel. This update fixes the recently reported help viewer vulnerability. It's a 712k download that doesn't require a reboot. [MacMegasite]

Dad & Grads Promotion on CafePress.com

I just got a note from CafePress.com. This is the company that produces my book, The High-Tech Career Handbook as well as a variety of photo-related items. (See also 1, 2, 3, 4) These are the products shown on the lower-left hand side of this page.

If you were thinking of picking up a copy of my book, now is the time to buy. The Dads and Grads Promotion starts 5/18/04. Save $4 on all orders over $40. Use coupon code DADNGRAD. Expires June 1, 2004.

We're cooking now!

As some of you may already know, I am the main cook in our house. I really like to cook and Rosanne really likes the food I make, so it works out well.

Today, I picked up this book, Cooking by Hand by Paul Bertolli, at the library. I had placed it on hold after seeing it mentioned on the Splendid Table web site. I found several recipes that interested me, right off the bat. A lot of great general cooking information is also spread throughout the book. I don't think I will be making my own sausage or curing my own ham any time soon, but even that is interesting to learn.

One recipe sounded so good I actually made it tonight, Amatriciana Sauce. (page 111) I like spicy sauces, and this has a dose of pepperocini that does't hurt, but certainly warms you all over. Traditionally, this sauce is served with Buccatini, a large, tubular pasta (sometimes referred to as firehoses (SMILE)), but I made it with traditonal spaghetti that I had on hand.

All I can say is -- WOW! If you have a chance to make it, do it! A plate of this, with a simple glass of red wine, was a dinner fit for a king, queen or even peasant. Pick up this cookbook via Amazon or at your local public library, like I did.

Other books by Paul Bertolli

Magazine Recommendations

I have been meaning to put up a list of my favorite magazines so you could see what gets read here in the Welch household. Finally, via the magic of Amazon.com I have gotten around to it.

I am a subscriber of some of these magazines, others I pick up at the newsstand or bookstore whenever the mood strikes. Still others I read at the local library when I am looking for a quick way out of a creativity rut.

Subscriptions:

Occasional:

Library:

Learning MS Word Tip-by-Tip

Word Answers

Lockergnome points over to a large collection for Microsoft Word tips that should answer some of your more esoteric questions (and even a few of your basic ones.)

If you are struggling with Word, as most folks do, this is a great resource to help you get back to completing your work instead of fighting with the program.

Other books on MS Word

90 Sols in 90 Seconds | via Metafilter

Two large, but great videos made up from photos of from the Mars Rovers, Spirit and Opportunity.

Even though I have been visiting the Mars Rovers web site every day, these compilations really help to bring home everything that they have accomplished.

MacInTouch: Fixes for Mac OS X Vulnerability

Macintouch.com offers up 3 possible fixes for the Mac OS X Vulnerability I posted eariler today. I am going to wait for Apple's official fix, though. That is, unless it takes them more than a week to release it.

Be advised, if you do apply these fixes, you might have to undo them in order to apply the official fix when it is released by Apple.

Revenge of the spam filters

Seth Godin wonders about the issues with SPAM filters, and so do I. I haven't yet found an effective way of seeing as little SPAM as possible, yet still not excluding important messages.

I often get email from people I have never corresponded with before. Many of these come from readers of my weekly Career Opportunities column. I NEED to hear from these people if I want to keep my column on track to their needs.

For now, I continue to scan my SPAM folder regularly, looking for the one gem amongst the dross...and people wonder why I am grumpy sometimes.

Book Signing - Dutton's Brentwood

Dawn Comer Jefferson and Rosanne Welch, with with authors, Yuliana Min-Kim Grant and Chris Simmons, discuss "Three-Ring Circus: How Real Couples Balance Marriage, Work, and Family,"

Thu., May 20, 2004, 7 pm
Dutton's Brentwood
11975 San Vicente Blvd, Los Angeles, CA 90049-5003

(310) 476-6263

Mac OS X Vulnerability

Over the last 2 weeks there have been some rumblings of Mac OS X vulnerabilities that could put your data at risk. It appears today, that there is a valid problem in existence.

As you may have noticed, if and when you download a .DMG file from a web site, it can mount and install itself after the download completes. Unfortunately, this opens a hole where malicious software could do the same action and alter or delete your data.

There is no complete fix yet available, but I assume Apple will have some sort of fix in place before the end of the week.

In the meantime, you can reduce your exposure in the following ways:

Run Safari
Select Safari Menu, Preferences...
Click on the General Tab
Uncheck the checkbox labeled "Open Safe Files After Downloading"
Close the preferences window

* Additionally, as always, be aware of what you are downloading and where you are downloading from. Be especially careful with files ending in .DMG.

* Backup your data. Even bugs in legitimate software can damage your data, so take this as an opportunity to re-visit your backup procedures to insure that your data is protected.

Here are 2 articles detailing the issues of this vulnerability:

http://www.tidbits.com/macnews.html#07672 http://macintouch.com/#notesandtips

Watch this space for further updates from Apple regarding this problem.