Mac Flashback trojan exploits unpatched Java vulnerability, no password needed The Flashback trojan can now hijack Macs even when users don't enter an admin password.

Was GitHub's removal of password based authentication a security overstep? If it makes it harder for developers to get started with Git and GitHub, it was.