Sleep (and Lock) Your Screen
When you are walking away from your computer, it's fairly common practice to start your screen saver and lock your screen. But did you know that there is a built-in keyboard shortcut in Mac OS X to sleep the screen?
Press Control-Shift-Eject and your monitor sleeps without engaging the screen saver.
Submitted by
Lewis
Recent TidBITS Talk Discussions
- Alternatives to MobileMe for syncing calendars between iPad/Mac (1 message)
- Free anti-virus for the Mac (20 messages)
- iTunes 10 syncing iPod Touch 4.1 (2 messages)
- Thoughts about Ping (16 messages)
Published in TidBITS 961.
Subscribe to our weekly email edition.
- Steve Jobs Takes Medical Leave Until June
- A Request for Tristan's 10th Birthday
- Talking Moose Joins Twitter
- Caffeine Helps Video-Playing Macs Stay Awake
- Macworld Expo 2009 for Photographers
- Converting from Now Up-to-Date to iCal and BusySync
- Easy Now Up-to-Date to iCal Imports
- Incase Power Slider for iPhone 3G Reviewed
- TidBITS Watchlist: Notable Software Updates for 19-Jan-09
- ExtraBITS for 19-Jan-09
- Hot Topics in TidBITS Talk for 19-Jan-09
Protect Yourself From the Safari RSS Vulnerability
Programmer Brian Mastenbrook revealed on 11-Jan-09 that he has discovered a security vulnerability that could allow a malicious Web site you visit using Safari to read any file on your system. The flaw affects the latest versions of Safari when used in Mac OS X 10.5 Leopard or Windows, though not in earlier versions of Mac OS X. Mastenbrook wrote that he has reported the details to Apple.
The vulnerability apparently could reveal the contents of any file, which includes email messages, passwords stored in browser cookies, or other documents. We have strong indications that the problem is real and you should immediately protect yourself in case malicious attackers figure out the vulnerability's full details before Apple issues a patch.
The vulnerability lies in the Safari RSS reader, and according to Mastenbrook, you may be affected even if you don't use the reader, as long as Safari is set to be your default RSS reader, which it is unless you've changed the setting. This likely indicates that the problem relates to how Safari handles RSS subscription links or feeds, since browsing to those triggers Safari's RSS reader.
The good news is that it's relatively easy to protect yourself. If you are on Windows, just stop using Safari until a fix is released. If you are using Mac OS X 10.5 Leopard, follow the updated instructions on Mastenbrook's Web site, linked above. Simply changing the default RSS reader application in Safari does not provide full protection, unfortunately.
It's always a relief when there is a reasonable workaround to a potentially serious security vulnerability, and we won't be surprised if Apple patches this vulnerability fairly quickly.
![](/file/11593/db.tidbits.com.tar/db.tidbits.com/images/badges/SmileLogo2010-50x50.gif)
editing PDFs; TextExpander for saving time and keystrokes while you
type; DiscLabel for designing CD/DVD labels and inserts. Free demos,
fast and friendly customer support. <http://www.smilesoftware.com/>