Slashdot Mirror


"Experts" Say Macs Are Not Safer Than PCs

MoneyT writes "As reported at vnunet, experts are claiming that Macs are no safer than PCs in terms of protection from a virus. Seems more to me like they're just saying that we Mac users aren't invulnerable, but until I see things like nimda taking out my Mac, I'll stick with the iBook." The article doesn't mention that the "7,000 macro viruses" attack Microsoft products (leaving uses of a Mac only as a web server completely protected from them), nor does it quote any statistics about how many Mac vs. Windows viruses exist, and it doesn't address the real- world fact that Macs are hit with viruses far less often than Windows machines.

128 comments

  1. Less demand for viruses, not less feasable... by Drakino · · Score: 1, Troll

    "and it doesn't address the real- world fact that Macs are hit with viruses far less often than Windows machines."

    Well the real world fact is that viruses work based off the ability to infect other machines. Odds are pretty good of finding another Windows box in a random scan compaired to a Mac box. Plus you now have two seperate operating systems on a Mac to write for, not just one like many common Windows viruses. (OS 9 and X). If Apple had say 45% OS market share, I'm sure there would be many more Mac viruses rampaging across the net.

    1. Re:Less demand for viruses, not less feasable... by Lars+T. · · Score: 2
      Ah, you mean Win3.1 viruses would always work on Win95, and Win95 viruses would do on NT and 98, and those for 98 would work on XP ...

      Sure, the reason why somebody wrote Code Red was that there are so many IIS Servers. But why is it still around? Because of inherent vulnarabilities. Sure, there is a fix. But some people still haven't used it.

      --

      Lars T.

      To the guy who modded me down from perfect to terrible Karma - Apple haters still suck

    2. Re:Less demand for viruses, not less feasable... by feldsteins · · Score: 5, Insightful


      If Apple had say 45% OS market share, I'm sure there would be many more Mac viruses rampaging across the net.


      I hear that argument from Windows users all the time and I'm sure there's some truth to it. I mean it's obvious. But there's another part to the story. The part where Microsoft makes many of it's software products in an extremely vulnerable way in order to "give customers what they want."

      Case in point. Why are Word, Outlook, Excel, PowerPoint, Access, etc all able to open programmable documents which could contain potentially malicious code? In plain english, the way they've chosen to impliment scripting and macros makes them dead-on guilty of making extremely vulnerable products.

      Do you remember back in the days before such things existed? Before the concept of the "macro virus"? How many virii were there back then? How vulnerable did you feel? What percentage of Windows users even had virus protection? And most importantly, don't you think it's strange that everyone just accepts this? All for the sake of the 0.02% of macro-writers out there.

      So yes, there would be more Mac virii if there were more Macs, I buy that. But there would be less Windows virii if MS didn't knowingly and repeatedly sell fundamentally insecure software products.

      So please don't lull yourself to sleep with the old "there are so many Windows virii because there are so many Windows boxes out there." Rather, wake up and realize that Microsoft has decidedly turned away from security in favor of whiz-bang features that look good printed on the software box.

      And please pardon the shrill, crazed tone of the above. I've been holding that one in for a while I guess.

      --
      You like your Macintosh better than me, don't you Dave? Dave? Can you hear me Dave?
    3. Re:Less demand for viruses, not less feasable... by Anonymous Coward · · Score: 0

      Do you remember back in the days before such things existed? Before the concept of the "macro virus"? How many virii were there back then? How vulnerable did you feel? What percentage of Windows users even had virus protection?

      Actually, I find it simpler to avoid viruses without virus protection nowadays (YMMV). Virus/worm/trojan writers have become lazy and simply write to the vulnerabilities that the totally clueless & careless get affected (example: Anna Kournakova trojan).

      The rest of your point is spot on.

    4. Re:Less demand for viruses, not less feasable... by malakai · · Score: 1
      All for the sake of the 0.02% of macro-writers out there

      While not many people write macros ad-hoc, the document "OnLoad" or "Autostart" type functionality is used by a large portion of the market. This is due to large corporations who tie their document management system, or custom Excel toolbars into all documents via this mechanism. MS biggest fault was not in giving it's customer this much needed functionality, it was in not requiring the macros to be signed before invocating by default. This was a lesson they learned the hardway.

      But you can't look at a limited market like Apple has and say "See, if only MS had done it this way". Because Apple would have bent over to the large corporate customers as fast as MS did.

      When a 200k seat install customer calls you up and says "Look, we need a way so we can tag all our documents, and each time they get loaded check to make sure a newer version doesn't exist in the document management system...." you're going to do whatever you can as fast as you can for that client.

      Don't forget MS and most other companies were BLINDSIDED by the internet. When MS thought of security, they thought of closed loop networks and the 'security' of Dial-In/RAS on NT boxes. They didn't think of mail worms, or MS Word based virii. Unix came from an environment where it was second nature to worry about being rooted. Windows did not. Two OS, built for two very different purposes, and grew up in two very different neighboorhoods. One's poor and street smart, the other rich and oblivious to the dangers out there.
      wake up and realize that Microsoft has decidedly turned away from security in favor of whiz-bang features that look good printed on the software box


      ..cough..cough.. A/UX... cough cough

      Anyhow, thats just the troll trash in you talking. Seriously, you give MS too much credit, in them knowing the danger the future held for their features. You have to think of WHEN the built these features, and how new they were to networking security in general. My guess is most of the deadly code was written in 1995. Legacy support carried it in all versions from then on. MS biggest achiles heel is legacy support. But it's how they managed to keep their install base, and grow it.

      Also, MS software engineers, like most other software engineers, put too must trust in the end user. This used to be a common pitfall for all sorts of software. When MS Office went mainstream, it took millions in usability study and mentoring of the Office architects to convey to them just how stupid most of the users are. It wasn't until they understood that did we start seeing dialog boxes pop up and ask "Are you sure!?!?!" which up until then was a GUI no-no (see Inmates Are Running the Asylum).

      Look over the CERT advisories and some Virii databases for the past 10 years, and you'll get a sense of the number of software packages that had (in hindsight) blantently dangerous features. Hell, look at all the holes and security failures in CISCO software. The backbone of the Internet.

      And apple isn't immune. What's scary is, for the most part, Mac users know less about their OS then windows users (partly because the OS does such a good job at user-friendliness). My friends that use Macs are mostly in Graphics/Design/Publishing. They are a social-engineering nightmare in terms of protection for trojans. Luckily, so far, they are rarely targeted.

    5. Re:Less demand for viruses, not less feasable... by Anonymous Coward · · Score: 2, Insightful

      I take issue with the statement that most mac users are generally less computer literate than windows uers. It is my experience that most mac users are at least slightly more IT literate than your average Windows PC owner.

      Don't forget we're talking about a 90-95% market-share here for Windows, and it's my experience as an ISP support engineer that has drawn me to this conclusion.

      I supported macs and pcs side by side, and without exception the complete no-hopers were PC users.

      Most mac users tend to have macs for work, and make it their business to know at least the basic System maintenance tasks to ensure their livelihood.

      The fact that the average (traditional) mac user's fascination with their computer's inner workings stops there is not an indication of ignorance, more that the computer itself is not the toy, it's the creative tools that run on it.

    6. Re:Less demand for viruses, not less feasable... by pudge · · Score: 1

      OK ... so? That is just admitting that real-world experience is such that Mac viruses are less prevalent, which is what I said. Sure, market share is a big reason why. But the "experts" -- who exist in this story only to scare Mac users into buying their product -- said the opposite, that the risk for both platforms is the same. It's untrue, by any measure.

    7. Re:Less demand for viruses, not less feasable... by quantaman · · Score: 2

      Also not that there are many many more people who hate MS and write viruses with the sole purpose of embarrassing MS. I suspect especially now with the Darwin kernal most people with the skill to write a virus probably won't do so because they have nothing against the company and can do a lot more damage to the immensely more evil MicroSoft with the same effort. Why go after the good guys?

      --
      I stole this Sig
  2. viruses by joshua_doesnt_know · · Score: 1

    It doesn't matter if you own an amiga, you can still get anthrax or the flu etc from either computer if somebody else has been touching it with icky hands and you use the same keyboard!

    1. Re:viruses by Anonymous Coward · · Score: 0
      AHAHAHAHAHA


      I hope this was a joke. We're talking 'bout computer virii buddy: those are either little executables or macros. They cannot infect YOU!!!


      LOL, too funny!

  3. Doesn't OS/X vs OSX change the picture? by dpilot · · Score: 2, Interesting

    Was this commentary done with OS/X, or earlier versions? I would expect OS/X to be considerably more resistant, given a true multi-user base, where the default userid is not 'admin'.

    --
    The living have better things to do than to continue hating the dead.
    1. Re:Doesn't OS/X vs OSX change the picture? by Anonymous Coward · · Score: 1, Insightful

      It is not OS/X, it is OS X.

    2. Re:Doesn't OS/X vs OSX change the picture? by tarzan353 · · Score: 0

      OS/X vs OSX

      What are you talking about? There is not OS/X. There is no OSX. It's OS X, and "OS X vs OS X" doesn't make any sense.

      To answer your question though, the security of OS X is more or less that of the other BSDs at a lower level. The most security problems you're going to raise are because you installed Microsoft Office on OS X. Apple's provided email client is not as virus prone as MS's offering, for example.

    3. Re:Doesn't OS/X vs OSX change the picture? by dpilot · · Score: 1

      Thank you for looking past my stupid Mac-ignorant /-mistake and answering the question.

      My main point was that a Mac OS X (everybody happy, now?) will not have junk creeping into the system itself. Even if WinNT and descendents *can* be immune to this, I've seen too many setups where the user's id is set as admin.

      --
      The living have better things to do than to continue hating the dead.
    4. Re:Doesn't OS/X vs OSX change the picture? by MoneyT · · Score: 2

      OS X does have a couple of security flaws to contend with. Nicely though, they have root logins turned off by default to protect the uninitiated. Ironicaly, if memory serves me correctly, the first major security flaw in OS X was found to be in IE.

      --
      T Money
      World Domination with a plastic spoon since 1984
    5. Re:Doesn't OS/X vs OSX change the picture? by Anonymous Coward · · Score: 0

      Actually, if you read around sites like http://www.securemac.com/, you'll find out that the majority of security experts considered the old Mac OS 9 to be one of the most secure systems (more secure than OS X) - why? Because there were only few parameters and settings to fiddle with - a software limited in function is most likely prone against viruses and bugs.
      I still prefer OS X and I never had a virus in my whole Mac life (try to find many Windows users claiming that). BTW, I remember a story about the army using Macs for security reasons.

    6. Re:Doesn't OS/X vs OSX change the picture? by pudge · · Score: 1

      Actually, you're only half-right. There is no OS/X or OSX, but there also is no OS X. It's Mac OS X.

      If you're gonna be a pedant, at least be unassailably correct. :-)

  4. Now there's an unbiased opinion... by jspayne · · Score: 5, Funny

    Antivirus firm Symantec said that over three quarters of Mac users are under the illusion that they are not a target for virus writers and hackers. Well, in that case I should rush out and buy some Antivirus soft...hey...waitaminit.. Jeff

    1. Re:Now there's an unbiased opinion... by boyko · · Score: 1

      I seriously doubt these findings. Yes, any computer can be infected with a virus - and Macs of either platform are no exception.

      The difference is accessability. Microsoft has several exploitable problems in it's OS, not the least including operating system integration with it's web browser, a default email client which can execute items by previewing them, and a word processor that can transmit virii via documents. Solutions to the problems seem to be non-existant or overkill. (Write-Protecting Normal.dot, and the new Outlook rejecting certain files based on attachment)

      The first line of virus defense, however, is always the user - and unfortunately, most users are unaware of even when they have a virus. My cousin, who had a laptop, had icons moving all around the screen on her, and didn't know that she had a virus until I told her. Even then, she has not bought and installed antivirus software, although I tell her of the seriousness of the problem.

      Brian

    2. Re:Now there's an unbiased opinion... by Anonymous Coward · · Score: 0

      See this is just an absolutely pathetic article. It is basically a press release/marketing campaign by Symantec to scare people into buying Norton Antivirus...

      Yes, they do have a point that Macs are susceptible to virii, but come on, this is just a blatant scare tactic on their part and the fact that this other web site published it as is says to me that they either are getting a percentage of Symantec's revenues or are just plain dumb.

  5. seriously by joshua_doesnt_know · · Score: 1

    The larger the user base the more prone your system is to viruses. That is not the real problem when dealing with them, it is how the respective platform handles the situation when it does happen that matters, and I think MS has a bad track record on that.

  6. Fear, Uncertainty, and Doubt strike again by kalidasa · · Score: 3, Insightful

    Just Symantec trying to boost sales of their Macintosh product. I use a Mac without MSOffice, and I almost never use IE (I use OmniWeb, Chimera, or full Mozilla instead), and only use OS X (don't use Virtual PC). None of the viruses they're talking about (except maybe Sub7, though all but one of the SubSeven viruses listed in Symantec's only encyclopedia are said to affect .exe files - not a Mac problem). Sure, there are probably a few Unix vulnerability that could hurt me, but compared to the 1 copy I get of Klez.H per day, I feel much safer on my Mac.

  7. what are they talking about? by RealisticWeb.com · · Score: 4, Insightful

    according to experts who have just shattered a long standing myth.

    This is total biased crap. I don't mean to troll, but think about the statement. Who where the experts? A company who sells virus software, who wants to break into the mac market. What was their evidence? "Because we said so".

    Unless I get cold hard facts, I refuse to beleive that apple has code that is so flawed it would be a threat to national security. The same things about MacOS that makes it more stable are the things that make it more secure, namely properly written code, and quality assurance testing before release. None of this security by obscurity that you see way too often.

    --
    Sigs are out of style, so I'm not going to use one...oh wait..
    1. Re:what are they talking about? by Dephex+Twin · · Score: 5, Insightful
      I noticed that line too. How exactly was this myth shattered and by whom?

      In fact, 62 per cent of Mac users said that increased security was the main reason for them moving to the platform, according to Symantec.

      Sixty-two percent of Mac users have a Mac mainly because they want security? I don't think 62% of Mac users really even think about security.

      "Obviously there are more PC-only viruses out there, but there are still over 7,000 macro viruses which can hit either Mac or PC platforms."

      So there are lots and lots of viruses, mostly for the PC, but some are cross platform. Who, then, has more? When was the last time a Mac-only or even a Mac-compatible virus (like Nimda or Code Red) been in the news (or even existed)?

      Chapman explained that, because of the Mac's age, some of the first viruses ever written were for a Mac

      Oh no, not the first viruses ever! What is the relevance of that?
      and some writers still target the platform specifically.

      Really? All 15 of them? Compared to 15000 on Windows? Did anyone claim there was a 0% chance of a virus being written for Mac?
      "Another big problem Mac users don't think about is that they make perfect incubators for Windows viruses," said Chapman.

      This makes the Mac less secure how? And the fact that Macs don't automatically search for viruses on any platform and destroy them means they are somehow guilty of giving Windows users viruses?
      At the time of going to press Apple was unavailable for comment.

      That's because Apple shouldn't have to waste its time defending itself to trolls like that.

      Okay, so the Mac community believed there were FAR less Mac viruses out there, and very few Mac virus writers. What "myth" has been shattered exactly?

      This is such complete FUD that pretty much every sentence is full of it. This wasn't ignorance but someone going out of their way to deceive.

      mark
      --

      If you want to make an apple pie from scratch, you must first create the universe. -- Carl Sagan
    2. Re:what are they talking about? by Anonymous Coward · · Score: 0

      "...but there are still over 7,000 macro viruses..."

      Could they be referring to Word macros?!?!? This is not a Mac problem, this is a Microsoft problem.

    3. Re:what are they talking about? by Dephex+Twin · · Score: 2

      Well yes, they are all MS Office macro viruses. But even if you accept the idea that the Mac allows these viruses to exist, even if they need MS Office to actually carry out their activities, there are still *way* more Windows viruses.

      And on OS X, as long as you aren't running as root, there is only so much a macro could even do.

      mark

      --

      If you want to make an apple pie from scratch, you must first create the universe. -- Carl Sagan
    4. Re:what are they talking about? by daviddennis · · Score: 4, Informative

      One thing I've noticed about virus writers is that they are lazy and sloppy. I find it unlikely that most of them even thought of cross-platform considerations when writing their code.

      For example, I'm betting a lot of those viruses refer to "C:\program files\Microsoft Office\ ..." instead of using the system call to get the appropriate directory. And just one of those calls is going to stop the virus dead on the Mac.

      D

    5. Re:what are they talking about? by digitalcowboy · · Score: 4, Informative

      I agree with you completely. This is the most biased anti-Mac propaganda I've read in a long time. One small piece of evidence:

      In the past even the US Army has moved its web servers over to MacOS in the mistaken belief that they will be more secure.

      They fail to mention that that was prior to OS X. While it's certainly true now also, back then the Mac OS was FAR more secure than Windows for running a web server simply by virtue of the Mac having NO COMMAND LINE. Even if you could exploit a Macintosh web server in the days of OS 9 and prior, what would you do once you got in? There is no ability to do anything remotely on the machine unless there is third party remote desktop software installed on it.

      I find the line about 7,000 macro viruses hysterical as well. The vast majority of those macro viruses are VB viruses that attack the myriad gaping security holes in Outlook (or the myriad gaping security holes in IIS, installed by default on all Windows systems and not even available for Macintosh). The Macintosh version of Outlook Express doesn't even support VB! The only macro viruses a Mac might be vulnerable to are MS Office macros. How long has it been since you heard of an MS Office macro virus outbreak? They're virtually non-existent now because it's so much easier to propagate a virus via Outlook and/or IE.

      Speaking of which, if you're dumb enough to be running IE on a Mac, you probably are opening up some vulnerability. That's one reason there's so much activity in the browser space (iCab, Opera, OmniWeb, Chimera, etc.) even though IE is free.

      No system is totally invulnerable, but having spent many long hours dealing with the effects of NIMDA (for one) at work, I'll gladly hold on to my Mac at home, thanks.

    6. Re:what are they talking about? by Maserati · · Score: 2

      I was still seeing them last year on our Human Resources machines (Office and Windows 2000). It amazes me that people are still sending Office macro viruses in resumes. The first one I saw (back in 97) was for an IT Manager position, I told HR that there was no freaking way I was working for that person since he's creating unecessary work for me before his interview.

      --
      Veteran, Bermuda Triangle Expeditionary Force, 1992-1951
    7. Re:what are they talking about? by harlows_monkeys · · Score: 2
      Who where[sic] the experts? A company who sells virus software, who wants to break into the mac market.


      I don't see how you can say that a company that has been selling Mac software (including antivirus software) since the '80s is trying to "break into the mac market".

    8. Re:what are they talking about? by Anonymous Coward · · Score: 0

      Actually my copy of virex does occasionally find and remove Windows specific macro virii in word documants recieved from colleagues.

      I remember one of the first mac viruses that I encountered, Antibody, a benign virus that spread via Hypercard stacks. As it went it removed another virus called MerryXmas and installed innoculation scripts to protect against it.

      Another called the Dukakis virus actually deletes itself.

    9. Re:what are they talking about? by antijava · · Score: 1

      However, on 99% of OS X installations, it is trivially easy for a trojan program to gain root access. How? Well, most installations are single-user auto-login style machines (the default account that is created when you install the OS). Notice that this account IS an admin account. While it's not root, it's damn near as dangerous and has free reign to write to many parts of your drive that you probably wouldn't like it to.

      Apple probably should have made the default account a non-admin account. At least that way you would have to go through explicit authorization before writing to dangerous parts of the drive.

    10. Re:what are they talking about? by Dephex+Twin · · Score: 2
      While it's not root, it's damn near as dangerous and has free reign to write to many parts of your drive that you probably wouldn't like it to.

      Like what? The fact that this is an admin account means that they can create and delete user accounts. It also means that they can enter an admin password to install things (they are prompted each time). What are these "many parts" that they can just get into?
      Apple probably should have made the default account a non-admin account. At least that way you would have to go through explicit authorization before writing to dangerous parts of the drive.

      You do. If any program wants to get access to sensitive areas then you are prompted and must explicitly give an admin password.

      Did you just hear this from some guy or what?

      mark
      --

      If you want to make an apple pie from scratch, you must first create the universe. -- Carl Sagan
    11. Re:what are they talking about? by Anonymous Coward · · Score: 0

      Apple probably should have made the default account a non-admin account.

      Why, so that you could _never_ log in as root? That's no good either.

    12. Re:what are they talking about? by Anonymous Coward · · Score: 0

      Speaking of which, if you're dumb enough to be running IE on a Mac, you probably are opening up some vulnerability. That's one reason there's so much activity in the browser space (iCab, Opera, OmniWeb, Chimera, etc.) even though IE is free.

      Eh? Why's that? I'm using IE. It's more standards compliant than anything else so far. (And it's free.) Plus, considering how much Windows-only stuff it _doesn't_ work with, and considering it's probably made by the MBU at Microsoft and not "Microsoft proper", it seems safe enough to me.

    13. Re:what are they talking about? by antijava · · Score: 1

      Ok, I'll spell it out. Being an 'admin' means you are in the admin Unix group. This gives you the ability to write to /Library/StartupItems, since it is writable by the admin group.

      From here, you can install any script you feel like, and get it automatically run as root the next time the machine boots...all without a single authentication dialog being required.

      It just takes a trojan horse program that looks like it does something interesting enough for someone to launch it once.

      You could wipe their drive (just shove rm -fr / in your script).

      You could get clever and use niutil to insert a new account on the system, and then enable SSH to let you get in. Really, the sky is the limit once you can get root to run scripts for you.

  8. Obscurity is not security by Dr.+Bent · · Score: 2

    I think the perception that Macs are more secure derives from their relative lack of use in the server world. There are more Windows machines out there and therefore, Windows machines have more problems. I didn't see anything about relative failure rates between MacOS and Windows but I wouldn't be suprised if they were about the same. (Linux might be a little better if for no other reason than your average Linux user actually cares about security).

    The reality is 99% of security is up to the user. A properly configured Windows machine is pretty much as secure as a properly configured Mac, or Linux machine, or [insert your OS here].

    1. Re:Obscurity is not security by hoggy · · Score: 2

      I think the perception that Macs are more secure derives from their relative lack of use in the server world. There are more Windows machines out there and therefore, Windows machines have more problems. I didn't see anything about relative failure rates between MacOS and Windows but I wouldn't be suprised if they were about the same. (Linux might be a little better if for no other reason than your average Linux user actually cares about security).

      I think the perception that Macs are more secure derives from the fact that Mac users rarely get viruses.

      I've used Macs as my primary desktop for 10 years and I've never caught a virus. Not once. Not even when Mac viruses where more prevalent and I used to wander about with floppies in student labs. I still don't take particular care in what I download. I haven't used any kind of anti-virus software in about 7 years, because it was a waste of time and money.

      Most Mac users don't bother with anti-virus software because they feel no particular threat. Whereas Windows users, and rightly so, live in continual terror of viruses. This is just a cheap attempt by an anti-virus vendor to spread FUD in the hope of drumming up some business.

      And don't anyone get it into their heads that Mac OS X is more secure than Mac OS 9 either, I could drive a truck through the security flaws in it. But I still don't worry because most virus writers couldn't give a rats arse about writing a Mac virus. There's no particular reward in infecting such a minor player when there's such rich pickings to be had in the Windows world.

    2. Re:Obscurity is not security by boyko · · Score: 1

      The reality is 99% of security is up to the user. [slashdot.org] A properly configured Windows machine is pretty much as secure as a properly configured Mac, or Linux machine, or [insert your OS here].

      Agreed & seconded. Still, maing the windows machine as secure as my mac would require me to somehow get rid of MSIE as the windows shell... while I'm at it, I suppose I'd have to get rid of Outlook Exp. as the default email app - oh, and I suppose I'd need to...

      The problem is that virii proliferate, and every unsecure system helps spread the virus. Most home users don't give a darn about security or virii, and part of the reason Macs have a reputation for security is that you don't need to make tons of changes to the system to have a reasonably secure system. This is true of Linux as well. Most people just want to type emails and surf the web - they can't really be bothered to "do" security.

      Brian.

    3. Re:Obscurity is not security by farfolen · · Score: 1

      Windows for 6 years
      No virus scan for 5 of those 6
      No virus yet.

      --
      werd to yo motha, muh nizzle.
  9. We're attacked enough already by RevDigger · · Score: 2, Funny

    I think Mac users feel attacked enough by the rest of the world, to bother with attacking each other. :)

    As I am fond of saying, I believe it's possible, I just don't think it's a coincidence that I've never seen it.

    - H

    1. Re:We're attacked enough already by Anonymous Coward · · Score: 0

      Very well spoken!

      A true Mac & Unix fan

  10. Your statement is FUD. by Neck_of_the_Woods · · Score: 2

    You compare Mac Virii to Windows Virii..fine.

    You compare Word Virii to Mac Virii...fine.

    How about you get those numbers out then work out a ratio to the number of Windows OS's to Mac OS's.

    I think then you will understand the reason the numbers are the way they are. More targets, get more Virii. If Macs had the market share there would be more Virii for Macs than windows. Supply and demand in a strange sort of way. Not a better or worse OS, the OS have very little to do with which system gets more Virii writen for them. It has to do with infection ratios and impact.

    --
    Neck_of_the_Woods
    #/usr/local/surf/glassy/overhead
    1. Re:Your statement is FUD. by TRACK-YOUR-POSITION · · Score: 2

      Right, but to a consumer, it doesn't matter whether the OS is inherently "better" or more secure, what matters is the infection rate--how likely am I going to be infected. If going for the less popular brand means decreased probability of infection, even if it is just because it is the less popular brand, the security conscious consumer should still go with the less popular brand.

    2. Re:Your statement is FUD. by usr122122121 · · Score: 2, Informative

      btw- the plural of virus is viruses not virii.

      --

      -braxton
    3. Re:Your statement is FUD. by Neck_of_the_Woods · · Score: 2

      You sir are correct, thanks for the clarification. I have been doing that for years I think. Wonder where I picked it up at.

      Thanks,

      --
      Neck_of_the_Woods
      #/usr/local/surf/glassy/overhead
    4. Re:Your statement is FUD. by Neck_of_the_Woods · · Score: 2


      Although I agree with you about this on one hand, I disagree on anouther kind of outside the original topic point.

      Which is most consumers, IE mom and pop, really don't care about infection rates at all. They care about software, price, and ease of use. The very same ease of use that gives ease of infection.

      I agree that the security conscious consumer point is very valid, if that is what you are looking for. If security is that important to someone they are not going to be looking into how secure the OS is, they will be looking into how secure there firewall is. Education is the key here, and they would take steps outside the OS to secure there systems at this point.

      I guess what I am saying is at some point your become a bit parinoid and buy a firewall. If you have the beans to rub together to get it set up, your going to have the beans to secure your box as well no matter what OS is on it.

      So I guess the argument here is "what is the most secure box, out of the wrapper, for a newbie" that has enough brains to realize that their stuff might need some protection.

      --
      Neck_of_the_Woods
      #/usr/local/surf/glassy/overhead
    5. Re:Your statement is FUD. by Anonymous Coward · · Score: 1, Insightful

      although mac does contain a very small market share, what hasn't been touched on here is the code. The code from apple or linux is far cleaner than anything m$ has ever written, or for that matter will ever write, thus avoiding a lot of problems with infections and buffer overflows.

      Also m$ does this really cool thing to your security in windoze xp, it bypasses it all for its .net service and "pirate" app checker, leaving huge holes in your OS no matter what type of firewall is installed on your computer.

      The simple fact is, cleaner code is far less buggier and less likely for infection.

      Now these people state that viruses can affect any OS, this is true, but remember that 99% of all viruses are written for the m$ OS simply because the system is so easy to hack.

      With Mac entering the GPL world, they will have an advantage along with linux or any other *nix os, because if a fatal flaw is found on the code, you don't have just 3 guys in a backroom working on the problem like m$ does, but rather, you have a whole community that will come to its savior to fix the problem, giving virus writers a rather difficult time in creating malicious code and having it work longer than a week.

    6. Re:Your statement is FUD. by BinxBolling · · Score: 1
      Which is most consumers, IE mom and pop, really don't care about infection rates at all. They care about software, price, and ease of use. The very same ease of use that gives ease of infection.

      It's not ease of use that gives us ease of infection, it's proliferation of features. This very same proliferation of features is generally bad for ease of use.

  11. Well DUH!!!!!!!!! by analog_line · · Score: 2

    The "revelation" that Macs aren't inherently more immune to viruese is like someone revealing that all multicellular organisms are vulnerable to viruses.

    Not news. Ye gods. Of COURSE the Mac platform is suceptible to viruses. Anything that accepts any kind of instruction set and has the ability to create data in some way is suceptible to viruses. The more of something there is, the more viruses "survive" long enough to mutate into new forms, 'cause there's really no point in creating a virus unless it's going to be released somehow. The smaller a population, the easier it is to defend against a viral invasion, as there are both less things to immunize (install anti-virus software on) and less potential hosts for the virus (making it alot harder for the virus to get a grip). Macs are currently less suceptible to viruses because there are less out there created for it and there are less Macs to put them on, and I would imagine that the only reason a virus writer writes a virus is to release it and cause havoc for whatever reason they may have, and there's a finite amount of havinc that you can create through a Mac virus. The only reason there haven't been more Linux viruses is because it's in relatively low numbers in comparison to Windows (as far as total machines with the system loaded, not any particular subset) and because of those low numbers and other reasons, Linux users take far more care of their PCs than most people who run Windows. Very few Linux users that I know aren't update freaks. Mac users are also a relatively rabid update community (see versiontracker) and that means a majority of the holes that viruses use to sink their teeth into systems just aren't there like they are on Windows boxes, which half the time haven't been updated at all since they installed the OS.

  12. Safety by Gid1 · · Score: 2

    I think I'm reasonably safe from being hit in the face with a big fish when I leave my house... not because it's not possible, but because it's not likely.

    For now, Macs are safer because there are fewer viruses around. We'll see when/if virus writers start targeting Mac OS X as much as Windows.

    I suspect even then, Mac users will be safer.

    Looks like antivirus publishers run amok.

  13. My experience and an open OS.... by freerangegeek · · Score: 2, Interesting

    I've been using MacOS 9.x and OSX for the last 4 years quite extensively. Browsing the web, downloading binaries, etc, etc, etc. In all that time, I've not been hit once by a virus that I can tell. I've consistently run Norton Antivirus, and it's never reported a damaged, infected, or otherwise bogus file. However, I've seen pc's in my office drop like flies. (Fortunately, I rarely need to use the immunocompromised little beasties, and when I do, I'm meticulous about my virus checking. I also don't run Outlook, EVER.)

    Given the stress by Apple to move people to OS X and it's BSD underpinnings, it's obviously scary to Symantec, MacAffee, etc. that they might lose their chunk of money. Think about it, who ever heard of a virus checker for any *nix?

    Find me a non-corporate virus hunter that will make the same claim and I'll buy it. Otherwise FUD.

    1. Re:My experience and an open OS.... by Anonymous Coward · · Score: 0

      The only *nix virus checkers I have seen/used
      are for the benefit of the windows clients served
      by them (in this case, sendmail -> trend interscan -> sendmail -> MS Exchange server)

      Any system that allows user(s) application installation/execute capability with network connectivity is open to such problems and I would
      agree that most OS's can be tightened down sufficiently to halt/decrease the chances of infection; With that being said I would like to say that when my systems (Mac OS X, Solaris, Linux and my XP-game-box ) were tightened it was
      much easier to secure the *nix boxes, easier to maintain and are much more usuable.

      JMHO.

    2. Re:My experience and an open OS.... by Anonymous Coward · · Score: 0

      Just FYI, if you use Office for Mac Norton will not detect macro viruses in Office docs. I've never seen an Office macro effect a Mac but they can carry viruses to PCs you send stuff to. Sophos, last time I checked, was the only Mac anti-virus package I could find that detected Office macro viruses.

  14. Look out! Viruses! by mcwetboy · · Score: 1

    Of course it's a crock. You can buy virus protection software for your Palm OS handheld, too, even though the total number of viruses for Palm OS is, if I remember correctly, one. (Correct, please, if I am wrong.)

  15. OS X and virii by josepha48 · · Score: 2

    I doubt that you'd see many. Of course there are mac users that always log in as root and thus could execute a malitious (sp) program. Personally I think Macs are as vulnerable to virus as Linux, BSD and SUN boxes. More than likely they are susceptable to buffer overruns and bad cgi scripts gone wild. Of course a process that is run as nobody and owns nothing cannot do real damage (assuming it is not taken over by a hacker).

    --

    Only 'flamers' flame!

    1. Re:OS X and virii by toddhisattva · · Score: 1
      Of course there are mac users that always log in as root

      root login is disabled in Mac OS X unless the user turns it on with NetInfo. Your statement is probably still true, but it's also true people who do "have asked for it!"

    2. Re:OS X and virii by wagnerer · · Score: 1

      Actually its much more difficult to write buffer overflows for PowerPC's. Too many instructions have null bytes in them terminating the buffer. That's not saying its impossible but its much easier to write overflows with intel's instruction set.

  16. Unapaid Advertising by cloudscout · · Score: 1

    This news story has made the rounds at several Mac sites in the past two days. It amounts to nothing but free advertising for the 'experts' to help them sell their product.

    It's like asking an insurance agent if you should buy more insurance. Of course they're going to try and paint a doom-and-gloom picture to line their pocketbooks.

    Macs ARE at risk for viruses but the greatest risk for viruses right now are those viruses that exploit Microsoft's Outlook and Outlook Express for windows as well as those that exploit stupid users who run attachments (which almost always attack Windows). Until viruses are written in Java, the Mac is not going to be the danger zone that this article implies.

    1. Re:Unapaid Advertising by zangdesign · · Score: 2

      I would be more worried about the source of the statement. If Symantec is the one saying that Macs aren't immune to virii, I would look very closely when an OS X virus comes out. After all, "who watches the watchmen" and "things get broken,see? Accidents ... happen ..." and all that.

      I would not only look at the source for the Mac virus, I would look at the writer (if he/she is ever found) and possible connections to Symantec.

      Maybe I'm just a paranoid overreactor, but it's statements like that of Symantec that make me very suspicious of their intentions.

      --
      To celebrate the occasion of my 1000th post, I will post no more forever on Slashdot. Goodbye.
    2. Re:Unapaid Advertising by pudge · · Score: 1

      Chapman explained that, because of the Mac's age, some of the first viruses ever written were for a Mac and some writers still target the platform specifically.

      There's even a release of the infamous Sub7 Trojan in Alpha development at the moment, he added.


      It sounds to me like Symantec is developing the virus, or at least knows the people who are. If the former, they are criminals, if the latter, they are obligated to tell the appropriate legal authorities.

    3. Re:Unapaid Advertising by kmitchel · · Score: 1

      Once they get the story out Symatec's gonna unleash a wave of Mac virii they have been paying to have made.

      Then they'll scream "I told you so!!!"

  17. Ughh by linuxbert · · Score: 2

    That was a bad article.
    Macs do suffer from virus, and other malware, and the article does make the point that if a venerablity exists it will be exploited, regardless, however what it fails to point out are that there are fewer venerablities on a mac.

    Also it fails to mention that macro virus's are MICROSOFT Viruses. dont use MS and you are fine.

    The article should be Use Microsoft, Get viruses.
    More FDU With this one folks

    1. Re:Ughh by caca_phony · · Score: 1

      actually, there used to be vi macro viruses running around (you could run arbitrary vi, and that means by extension shell code whenever a particular file was opened). Most vi versions have dropped default autorun code support, or dropped the possibility of autorun code altogether. IIRC there is a similar case with emacs (I think it will still autorun code if you are the owner of the file).

      --
      ...and this lie crawls out of its mouth: 'I, the state, am the people.'
  18. security? by paradesign · · Score: 1
    In fact, 62 per cent of Mac users said that increased security was the main reason for them moving to the platform, according to Symantec.

    WTF? who are they surveying, almost all of the mac users i know are artists/designers that could give two less about security.

    and viruses, why target 5% of the market when you can hit the other 95%? plus windows sucks and it diserves all of the viruses it gets.

    ot have any of you seen the CDW ad where this guy is asking the IT guy why an email named I LOVE YOU is a virus, its got such a lovely name. LOL... ah poor windows users

    --
    I want 2D games back.
  19. Point-by-silly-point by torinth · · Score: 2, Interesting

    The article doesn't mention that the "7,000 macro viruses" attack Microsoft products (leaving uses of a Mac only as a web server completely protected from them)

    Irrelevant: Ok, sure. If I run a web-server only (Windows) PC with Apache the daemon, I'm invulnerable, too. What does that have to do with Mac vs. PC. That's just a matter of software (which happens to be cross-platform). If you don't run Microsoft client software, you are protected.

    nor does it quote any statistics about how many Mac vs. Windows viruses exist, and it doesn't address the real- world fact that Macs are hit with viruses far less often than Windows machines.
    This one's a little more reasonable, but really, let's look at this article. It clearly is implying that the Mac, as a platform, is theorectically prone to virus attacks, like any system. Now, as long as it has only marginal market share it won't be a target, and won't have as many viruses, but that won't last long if everybody switches to it for that reason.

    Mac vs. PC vs. Alpha vs. whatever is just not the place to be talking about security. Security, as of this moment, is not really a part of the hardware-layer of systems. If you want to talk about security, you need to talk about applications - like those made by microsoft - but those applications are becoming more and more cross-platform...

    -Andrew

  20. blorg! by eisforian · · Score: 1

    In fact, 62 per cent of Mac users said that increased security was the main reason for them moving to the platform, according to Symantec.

    Sounds like a botched survey question to me -- the question was probably asked under circumstances like those Quiznos sandwiches commercials. I really find it hard to believe this statistic. What about ease of use? Things just working correctly? Lack of infestive software (like Bonzai Buddy)? Lack of P2P utils? Lickable UI elements? And who did they ask, the Army? *cough*

    "Obviously there are more PC-only viruses out there, but there are still over 7,000 macro viruses which can hit either Mac or PC platforms."

    Right. That's probably the reason that the Microsoft Office X suite has the "Macro virus protection" option enabled by default.

    Chapman explained that, because of the Mac's age, some of the first viruses ever written were for a Mac and some writers still target the platform specifically.

    ....all three of them......

    "A Mac user can get a virus from a Windows machine that won't affect them but, if it's attached to a document or a file, then they can pass it on to another Windows machine."

    I wouldn't exactly call them "incubators," as Chapman whines. The viruses don't even run. If the user replies, how many email clients include attachments in the replies?

  21. 24,295 virii o' fun! by pretoris · · Score: 1

    I just loaded my virus definition list on my Windows machine. Took long enough for me to go get a cup of coffee quicker than it loaded....

    The grand total is..... 24,295 detectable virii, probably higher if you count variants.

    The total of MacOS X virii is.... 0

    Holy Infection Rate Batman!

    Anyone know how many MacOS 9 virii there are?

    Nevermind that a large portion of MacOS X is OSS and personally I think OSS has a much better track record that MS's lard bucket that they think passes as an "OS".

    1. Re:24,295 virii o' fun! by tarzan353 · · Score: 0

      virii isn't a word.

      There are a handful of OS 9 viruses, but most of them rely on knowing what the hard drive is named. So they'll check for the default "Macintosh HD" and maybe a few common others, but it's extremely common in the mac community to name your hard drive, so the viruses are pretty useless in that respect.

    2. Re:24,295 virii o' fun! by MoneyT · · Score: 2

      Last I knew there were in somewhere's between 40 and 50 classic virus' , many of which did not run on PPC macs and many which didn't run after system 9. The most prevalent virus on classic (not counting the auto start worm) was the MDEF virus and it's varients. And this virus wasn't even malicious, most of the varients simply annoyed you with random system beeps. Only the D varient (I may be wrong on this one) did anythign truly evil, causing internet programs to randomly crash.

      Last I knew, OS X had 3 X specific virus'/vunerabilities and one of those was a flaw in IE

      --
      T Money
      World Domination with a plastic spoon since 1984
  22. "Inherently" by usr122122121 · · Score: 2, Interesting
    they left out the word inherently when they were typing this up.
    Macs are not inherently safer than PCs, however, Apple has a MUCH better track record when it comes to writing secure code than Microsoft does...

    I think the first Mac OS X virus we will see will be an Apache exploit [good luck, guys].

    --

    -braxton
  23. Consider the whole network by Aram+Fingal · · Score: 1

    The discussion about security vulnerability as a function of market share is not new but consider this: Think of the network as a whole and not just individual machines. Viruses are an example of common mode failure - a situation where all systems of a particular type fail in response to something. The way to combat this is through diversity.

    We are vulnerable because of the lopsided distribution of operating systems. If we had better balance, not 95% Windows, it would be harder for any virus to spread.

    1. Re:Consider the whole network by caca_phony · · Score: 1
      We are vulnerable because of the lopsided distribution of operating systems. If we had better balance, not 95% Windows, it would be harder for any virus to spread.

      Or, everyone could run the same OS, but with different mail daemons, web browsers, editors, etc. A kmail exploit (if it could exist) will never effect mailx (hell mailx is just a new version of mail, the original mail program, the first email client ever, and I seriously doubt it has ever had a vulnerability, but I digress). What I am trying to say is that homoginous systems can be avoided, if, for example, your web browser isn't an integrated part of your OS.

      --
      ...and this lie crawls out of its mouth: 'I, the state, am the people.'
  24. Firewall defaults by Eslyjah · · Score: 1

    The fact remains, however, that OS X ships with a lot of its ports closed. Windows XP has a lot of them wide open. OS X also has a better security model (it is Unix, after all).

    Everyone knows that OS X is not immune from viruses. However, a virus run by an unprivileged user is limited in the amount of damage it can do. Also, the fact that the default firewall configuration is more secure limits the amount of remote exploits. OS X is still more secure than Windows XP, even if it is vulnerable to viruses.

  25. Correction by hotsauce · · Score: 1

    from the and-i-say-that-the-middle-east-is-a-great-vacation -spot-this-year dept.

    You are thinking of South Asia. Just remember to take lots of sunscreen. Oh, say, SPF 1,000,000,000.

  26. Bah - Free your mind with Mac OS X by Anonymous Coward · · Score: 0
    Two months ago, I was a longtime Windows user. Every week or so I made sure my virus definitions were up to date. I avoided attachments that weren't clearly images. I was cautious about putting "foreign" disks in my CPU's drive.

    Today, I'm a FreeBS-er, uh, OS X user, and it's like being the guy standing on the big clock in the happy part of those Prilosec commercials, hands outstretched to heaven in thanks as jubilant choral music pours forth in the background. Except one of my hands is waving bye-bye to Windows as the popular desktop OS of choice.

    1. Re:Bah - Free your mind with Mac OS X by MoneyT · · Score: 2

      Welcome to the dark side! And if you're ever confused on something, don't be afraid to ask, we want to keep new mac users, not make them feel dumb and scare them off.

      --
      T Money
      World Domination with a plastic spoon since 1984
  27. Known troll, or just a moron? by zephc · · Score: 4, Insightful

    The story author, James Middleton, is a known troll and MS banner-waver, check out http://www.vnunet.com/News/1128907
    Either that, or he is very susceptible to marketing hype from corporate interests, and taking it as news.

    --
    "I would say that 99 per cent of what my father has written about his own life is false." - L. Ron Hubbard Jr.
  28. irrelevant by anthony_dipierro · · Score: 1

    The article doesn't mention that the "7,000 macro viruses" attack Microsoft products (leaving uses of a Mac only as a web server completely protected from them), nor does it quote any statistics about how many Mac vs. Windows viruses exist, and it doesn't address the real- world fact that Macs are hit with viruses far less often than Windows machines.

    Because none of those are relevant to the question at hand. Honda Accords are stolen way more often than VW Beetles, but I don't think anyone is going to argue that the canvas sunroofs are the reason why.

  29. Risk Assessment by shunnicutt · · Score: 2, Insightful

    Once upon a time, I read some article saying that risk assessment was accomplished by examining the possible threats, the consequences of each threat and the likelihood of that threat actually happening. All of the threats discussed in the article are real, but the actual risk at this time is quite small. You also have to look at the malware tools available for Windows and Microsoft products that can automate virus creation, etc. giving the clueless the tools to cause a little havock. To my knowledge, there isn't anything analogous for the Macintosh, either OS 9 or OS X. Yes, the virus writers will go for the platform where they can do the most damage. But they'll also go for the platform that is easiest to write viruses for -- Windows!

    1. Re:Risk Assessment by shunnicutt · · Score: 1

      Oh, I forgot to mention the network effect -- if someone does write a virus specific to OS X, it has to somehow find another OS X machine to propagate.

      This might be possible where actual media is exchanged at an office, student lab, trade show, etc. but I hardly exchange physical media any more. Any email leaving my machine is more likely to find a Windows computer, which wouldn't host the virus.

      The network effect ensures that any Macintosh virus has the deck stacked against it.

      There you have it: less damage to be done, no virus writing tools, difficult to propagate.

      Begone! You have no power here!

  30. Mac virus - Autostart Worms by dasspunk · · Score: 1

    While working as a field tech in '98 I had a lot of customers that were infected by the multiple varieties of autostart worms. It was the first Mac virus that I had seen with my own eyes. It spread itself around quickly in the graphic art community because of all the file sharing they do. MacAddict magazine also unintentionally helped spread the virus by including it on one of their monthly CDs. It was fairly easy to kill and helped sell a lot of Virus software.

    1. Re:Mac virus - Autostart Worms by Anonymous Coward · · Score: 0

      I think I remember that MacAddict CD. Maybe I'm thinking of a different one, though. But as I recall, the virus only worked in System 7 or earlier, and the installer only ran in OS 9 or later.

  31. first os x virus by cosmo7 · · Score: 2

    considering the large number of obsessive mac-bashers in the world, i'm surprised that a malicious os x virus hasn't surfaced yet.

    i'm not an expert, but i would imagine that at least one api in os x would be fertile ground for a virus; quartz executables, opengl scripts, postscript fonts, quicktime. all of these can be embedded in innocuous documents.

    the level of risk is increased by the present sense of complacency. (and no, i'm not working for an anti-virus co).

    1. Re:first os x virus by uweber · · Score: 1

      However the largest number of virii and worms in the wild today, or at least the most disruptive are VB scripts which can be written by a lot more people than postscript code or the like. Though who knows if AppleScript might not offer similar vulnerabilities.

      --
      --Ulrich
      On no accounts allow a Vogon to read poetry at you
  32. Interesting? Interesting? by Anonymous Coward · · Score: 0

    For crying out loud, this person just completely made up the term "OS/X" and some idiot gave this an interesting? What's thie "true multi-user base" crap anyway?

  33. Civic duty to dispell trollish ideas... by singularity · · Score: 2

    "Obviously there are more PC-only viruses out there, but there are still over 7,000 macro viruses which can hit either Mac or PC platforms."

    I run OS X. I do not have MS Office installed. I use Eudora for mail, and iCab for the web. What macro viruses can I get hit with? The statement above is based around the incorrect assuption that all Macs have MS Office installed on them.

    Antivirus firm Symantec said that over three quarters of Mac users are under the illusion that they are not a target for virus writers and hackers.

    As a Mac OS X user, I would agree with the statement "[I] am not a major target for virus writers and hackers."

    I am definitely not under the impression that crackers could not go after my box. I take precautions as a result of that. However, I think that, as others on this story have pointed out, the sheer number os MS boxes out there make them a much more appealing target.

    The article makes baseless assumptions and jumps in logic that no sane person would ever make.

    i am just pointing out two flaws in it. There are more.

    --
    - (c) 2018 Hank Zimmerman
  34. Re:24,295 virii o' fun! (Mac OS 9 Viruses) by @madeus · · Score: 2

    There were *about *(!) 30 significantly different viruses (including at least a couple of worms) for Mac OS Classic (though I'm not counting Macro viruses like the ones that can infect Word and Hypercard, etc).

    For example, many of the Word Macro viruses are cross platform.

    Many of the origional viruses came out of fun and games at MacHack, people just trying to see if they could do it, but a few were modified and released into the wild by Script Kiddies after they appeared on some of the MacHack CD's, IIRC...

    I think the last virus of any sigificance for Mac OS classic was Autostart-9805 in 1998.

  35. No Data? by Jebediah21 · · Score: 2

    So the story basically had no valid data. Talk about a troll post.

    --

    Everytime you look at porn a devil gets their horns.
    1. Re:No Data? by MoneyT · · Score: 1, Offtopic

      Sorry, I had to contribute the story cause I knew that the editors wouldn't be able to resist. Besides, after having 4 rejections, I needed an accepted.

      --
      T Money
      World Domination with a plastic spoon since 1984
    2. Re:No Data? by Jebediah21 · · Score: 0, Offtopic

      I don't blame you at all. Hell, it is an eye-catcher. Just bothers me that the editors get baited by such things.

      --

      Everytime you look at porn a devil gets their horns.
  36. Oh please by Jack+Auf · · Score: 1

    this is my favorite part:

    In the past even the US Army has moved its web servers over to MacOS in the mistaken belief that they will be more secure.

    Yes please, lets compare the security records of IIS vs. Apache. Or better yet lets compare the security records of WinNT/2K and FreeBSD (which Darwin was based on IIRC). Give me a fuxking break.

    --
    "They that can give up essential liberty to obtain a little temporary safety deserve neither liberty nor safety" - BF
  37. Whatever by d3xt3r · · Score: 2, Interesting
    This is clearly a case of someone trying to make a case that Mac users need virus protection as much as Windows users do.

    The fact that all Operating Systems are subject to virus attacks cannot be argued, but some are more secure than others. There are three requirements for a virus to damage a user's machine. First, the user must acquire the virus (download, email attachement, etc). Second, the user must execute the infected application (thinking it's something else). Three, the user must have permission to modify/edit/delete the resources that the virus intends to attack.

    Seriously, we hear the argument time and time again that Mac and Linux are less succeptable to Viruses than Windows, but what they really mean is point three from above: OS X and Linux to a better job of protecting system resources than Windows. So yes, Windows is more succeptable to catastrophic damage than OS X and Linux.

    What really goes without saying here is that viruses follow the same pattern as useful software: 90+ percent of the population uses Windows, so target that population and you will see the most damage (or revenue for real software).

    No one should really think that they are not Vulnerable to viri simply because they run a more secure OS. While a OS X or Linux virus executed by a local user with limited privledges cannot necessarily damage the system, they could still delete all of that user's personal data because that user has full permission on their stuff. I don't know about any of you, but if a virus wiped out my entire home directory, I'd be pretty pissed, and the fact that my system still booted up would be no consolation. =)

    My point here is just that anyone who runs foreign applications on their machine from a user account that has write permissions on their own files is succeptable to a virus attack.

    As long as Windows enjoys the overwhelming majority share of desktop operating systems, it will be the target of the majority of virus attacks. If that balance shifts towards the Mac, don't doubt that the virus writers won't prey on Mac users as well.

  38. It's VIRUSES, not VIRII by nosferatu-man · · Score: 2

    Come on, people. Get with the English program.

    'j

    --
    To spur "enterprise Linux," Big Bang, the distributed two-phase commit.
    1. Re:It's VIRUSES, not VIRII by Anonymous Coward · · Score: 0

      It's not even virii in latin, the word is inherantly plural in it's original language.

    2. Re:It's VIRUSES, not VIRII by nosferatu-man · · Score: 2

      Exactly. And besides, nobody is discussing potential OS X virus problems in LATIN, for Jebus' sake. When in English, use the damn English plurals!

      'j

      --
      To spur "enterprise Linux," Big Bang, the distributed two-phase commit.
  39. They have a feedback link... by Anonymous Coward · · Score: 0
    feedback (see below) to computing.vnunet. hopefully it will get to that tart middleton.
    James Middleton's absurd article about Mac virus risk is transparent propaganda for Symantec's Mac division. Most viruses exploit Microsoft's appallingly insecure Visual Basic, Outlook Express, and Word macros. Middleton fails to mention that the 7000 cross-platform macro viruses he is so proud of rely on Microsoft's Office for mac to spread to the Mac platform, making Microsoft, in many ways, the sole provider of Mac malware. Any company could write software open to virus exploits but Microsoft seem to have a particular skill at it. Indeed, MS has recently admitted that they have an unusually bad attitude to security by pretending that having everybody work on it for a couple of months is going to cure years of sloppy code. Why doesn't Computing.vnunet publish sensible figures showing Microsoft's culpability IN PROPORTION TO actual market share? Instead we are told "In the past even the US Army has moved its web servers over to MacOS in the mistaken belief that they will be more secure." They are more secure, and the US Army was not mistaken. Teenage crackers like Zarquon find the lack of command line in MacOS a very formidable obstacle. I have never heard of a non-brute force attack on an Appleshare server. There have been noticeably fewer articles about teenagers 0wning US Army servers since the move. "Another big problem Mac users don't think about is that they make perfect incubators for Windows viruses," Right - I get it now: we Mac users should worry ourselves sick about the risk that we represent to our socially conscious windows brethren because our software is more secure, and it is our fault that Windows is a gaping sore asking to be infested. Yeah, and if the Poles hadn't been so vulnerable that nice man Hitler would never have invaded. Middleton's article really is the most squalid piece of filth I have read in a long time. He is a twat and an unscrupulous liar. I have never used virus software nor propagated viruses in 8 years of Mac use. But then, I don't use software from the virus company.
  40. Re:24,295 virii o' fun! (Mac OS 9 Viruses) by Alex+Thorpe · · Score: 1

    True, and if I remember correctly, 3 or 4 of those 30 viruses won't run on System 7 or higher, so are only a danger to those who bought their Macs in the 80's and didn't upgrade their OS.

    This article was on Mac Central recently, and all the forum comments there labeled this as pure FUD. I ran NAV on my Performa 6400 for a few years, and it never found a virus. Never. Also, I don't own a copy of Office, so I'm not vulnerable that way. I suppose that someone could DOS my DSL connection, but even if I turn file sharing on, they'll need to figure out my IP address, my name, and my password to log in, and anyone who knows my name doesn't know my IP address(including me, I never memorized it)

    --
    "Common Sense Ain't" -Unknown
  41. True ... and what about an Access virus? by daviddennis · · Score: 2

    You took the words right out of my mouth. I've written legitimate Word and Excel macros (most of which wound up being incompatible the moment people upgraded to the next version), and there's no question Microsoft's implementation of macros makes it way too easy to write virii.

    I wonder why nobody's done an Access virus yet? Access is unique in the Microsoft canon, since startup macros are often genuinely legitimate applications. Therefore, shutting macros down in Access would harm functionality.

    Since most people with Office have Access lying around somewhere, I would think an Access virus would be a sure thing, and yet I haven't heard of one yet.

    Just a matter of time?

    D

  42. Hmmmm... by Anonymous Coward · · Score: 0

    Since Symantec can't seem to write a anti-virus program worth buying, their marketing team decided to switch tactics and try to pull one over on us *dumb* mac users. :-P

  43. They are right...almost by theolein · · Score: 3, Insightful

    The Mac, either Classic OS9 or OSX is generically not safer than Windows. The fact that Microsoft products are virus traps is not only because they are written without any real security in mind. It is also because the platform is so widley used. I can't substantiate this of course, but the sheer volume of Windows, IE, MSSQL and Outlook Virii does point to the fact that *a lot* of people are almost constantly on the lookout for ways to crack the system.

    The Classic Mac OS had the one built-in but not for that purpose security measure in that it didn't have a commandline. This prevented anyone from logging in via SSH or whatever and rooting the system. The only widespread server on the Classic OS was Webstar and by default it didn't have any way of getting in via a CGI or buffer overflow unless you installed plug-ins, and even then you could crack the serve but had no way of doing anything else on the computer.

    Mac OSX has had the occaisional security hole, the last one I remember (Apart from an IE hole but we won't talk about that) was the HFS case hole. Apple has simply been wise and turned off most of the daemons that are notoriously prone to sniffing etc by default such as telnetd, ftpd etc. If you turn these on, you stand a good chance of getting hacked.

    Apple also has a built in Scripting System on both the Classic and OSX systems: AppleScript. The only reason that there have not been more Virii coming in on this channel is because there is no automatic way to execute one of these as there is on windows. You could however easily use social engineering (i.e. trick someone into downloading a bad Applescript application) and wreak havoc on that persons machine.

    Anyone who has used Macs in the early '90s will remember many Virii such as mdbf or the CD autoplay worm, some of which were even spread on MacWorld CD's. Apple's loss of marketshare in the mid '90s coincided with less virii being written for the Mac. You work that out.

    With the rising marketshare of the *new* Apple under Jobs and Tevanian with the new OS I am willing to bet that the attempts to crack the system will incease.

    How Apple will eact to this will determine Apple reputation in this espect. Up until now Apple has been very good and fairly candid at reacting to and releasing patches and hasn't gone on any whining campaigns as MS has done in order to try to draw attention away from buggy products.

    So, the article is not entirely wrong but still misses the true issue.

  44. Yawn by Arcturax · · Score: 2

    This piece of FUD was already picked apart on Maccentral yesterday.

    In short, this was a piece of FUD backed by Symantec to try to sell more copyies of Norton Antivirus for the Mac. I've been using Mac's since the 80's and I've not had a virus since 1993 when I got a floppy infected with Scores and NVIR from an infected High school computer lab.

    --

    --Won't that be grand? Computers and the programs will start thinking and the people will stop. - Dr. Walter Gibbs
  45. less macs exist by kirn_malinus · · Score: 0, Redundant

    and it doesn't address the real- world fact that Macs are hit with viruses far less often than Windows machines

    mac os (any version) runs on far less machines than windows (any version). therefore less people who can code are on macs. therefore less people who write virii (speaking in percentages of the population) are on macs as opposed to pcs. this means that less mac viruses will exist.

    no one ever thought macs were less vulnerable than anything else. nothing is any more or less vulnerable really, everything probably has some exploitable bug if you look hard enough. there have just always been less people making virii and such for macs. percentage wise the amount of virii for macs is probably comparable to the market share of the os.

    --
    All circuits busy.
    1. Re:less macs exist by gerardrj · · Score: 1

      But even accounting for market share, the numbers don't add up.

      If you take the 95%/5% Microsoft Windows/MacOS numbers and extent that ratio to the known viruses we get something interesting.
      Symantec says they scan for 61,148 viruses. If we use the 7,000 macro virus as true, that should mean there are 54,148 Windows system viruses. 5% of that would be 2700+ viruses for Mac systems. Instead there are like 20, mostly left over from pre system 7 days.

      There must be something more than just lack of development making the Mac less virus prone.

      --
      Article X: The powers not delegated... by the Constitution...are reserved...to the people
    2. Re:less macs exist by ZigMonty · · Score: 2
      Let's say Microsoft has 95% of the market. Assume Apple has the remaining 5% of the market. There are what, 25000 known viruses for Windows?

      25000/95 = 263.158

      263.158*5 = 1315.79.

      Therefore we'd expect there to be over a thousand mac viruses. There are about 40 and most of those were HyperCard viruses. How do you account for the shortfall?

      Hmmm... maybe market share isn't the only factor?

  46. The problem isn't with the PC's or the Macs by gremlin_591002 · · Score: 1

    It's the users. I've worked for years on both PC's and Macs. We regularly bring in customer PCs that have viruses. Know how many virus's I've had? Zero. Why, because I'm not stupid. Properly set up security on shares, not opening every flipping 'look at me!' email that comes across my desk. Not using a root level account for everyday use. PC's don't spread viruses, people do.

  47. Re:24,295 virii o' fun! (Mac OS 9 Viruses) by Anonymous Coward · · Score: 0

    and if memory serves me, the auto start worm (the ONLY virus i have ever been affected with in 10 years of mac computing) turned itself off on dec 31 1999. It did cause problems in ad agency i was in, as it took us forever to get it cleaned off. But it was alot less damaging than it could have been. one virus in ten years of heavy computer traffic is awesome by any standard.

    Fuck Norton for spreading FUD.

  48. Bullshit by Anonymous Coward · · Score: 0

    Total crap. The mac does not ship with as many open doors as windows, and outlook does. As a former admin, I'd host a mac server on principle alone for mid to small organizations just because of all the nimda, sircam and code red worms out there.

    Every day, I get windows virii attempting to infect the WinNT directory of my mac but never in the past 3 years have gotten a virus on my macs.

    Actually, the last virus I got was the MS word glossary virus over 3 years ago.

    total bullshit
    - Zav

  49. US Army runs on OS9 by Anonymous Coward · · Score: 0

    In fact, the US Army moved their web servers over to MacOS in 1999, long before OSX or OSX Server was released! This was WebSTAR running on MacOS Classic, and NetCraft shows that www.army.mil is STILL running WebSTAR 4.2 on Classic.

    If the Army moved their web site to MacOS in the "mistaken belief" that it was more secure, where is the proof that they were mistaken? It's an extremely desirable target, yet in two and a half years has there been a single break-in?

    There has never been, to my knowledge, a SINGLE hack against a MacOS-based web site, except for a contest that was run once, which had a hole in a 3rd party plug-in. Classic MacOS, prior to OSX, has an unblemished security record.

    Also, that Sub7 rumour has been going around for many months, with nothing to substantiate it. How could a shill at Symantec know about a virus that has never been released? Have they been getting beta copies, or are they writing it themselves to sell more software?

    What a load of crap that original article is.

  50. Marketshare-numbers aside (poll) by Erik+K.+Veland · · Score: 1

    Can any of you name...

    Top three mac-viruses?

    The deadliest mac-virus and the damage it did?

    The virus that last affected your computer...

    ...and when?

    --
    "I tend to think of OS X as Linux with QA and Taste", James Gosling, creator of Java
    1. Re:Marketshare-numbers aside (poll) by Satan's+Librarian · · Score: 1

      WDEF, NVIR.a, and NVIR.b are the only ones I've ever seen in the wild (ITW). I think NVIR said something out of the speakers if you had that damned talking moose around, and that would be, oh, about '92 or so I think when I disinfected a high-school computer lab (MacWareZ was bad news back then, I guess....).

  51. Want a reality check on viruses in the wild? by Satan's+Librarian · · Score: 1
    Check the WildList for this month's viruses found in the wild. These are the only ones that actually pose a threat. Looks to me like if you don't run Microsoft Office products, and don't run Microsoft Windows or Microsoft DOS, you're pretty damn safe.

    For those of you unfamiliar with virus naming conventions, here's some basics:

    Most of the ones w/o a prefix are going to be DOS executeable or MBR/Bootsector infectors.

    Prefixes:
    JS/- Javascript VBS/ - Visual Basic Script
    W32/ - Win32
    W95/ - Windows 95
    W97M/ - MS Word 97 Macro
    WM/ - MS Word Macro
    X97M/ - Excel 97 Macro
    XM/ - Excel Macro
    O97M/ - Office 97 Macro

    Realize that Mac Classic OS's are just as vulnerable, and in fact there were viruses being written for them ~1990 or so and possibly before, but they just aren't widespread anymore (WDEF was pretty popular for a while though...). Obviously, with the file protections of *nix, OSX is a bit more resiliant to infection although still perfectly targettable.

    If you don't make sure your system is locked down properly, and you run executeable code from untrusted sources, well, you're taking a risk. It's just not all that big right now (contrasted, of course, with the 5+ .scr/.html and .exe/.html combo's I get in my mail box per day aimed at infecting windows...).

  52. Don't miss the best line in the article! by Snart+Barfunz · · Score: 1

    Kevin Chapman of Symantec said:... ...There's even a release of the infamous Sub7 Trojan in Alpha development at the moment, he added. " Do virus writers run formal testing programs? Use change control? Does Kevin Chapman work in the mail room? "Mr Virus Writer? I'd like to report a bug in the alpha of Sub7 - it consistently fails to infect my machine."

    --
    --- Yx3 = Delilah ---
  53. Perfect incubators! by Snart+Barfunz · · Score: 1

    "Another big problem Mac users don't think about is that they make perfect incubators for Windows viruses," said Chapman. What makes him so sure we don't think about it? Waa ha ha haaa!

    --
    --- Yx3 = Delilah ---
  54. You can bet a X virus will appear by mtec · · Score: 1

    The antivirus companies will make sure of it. The truth is out there.

    --
    Cake or Death? Cake Please!
  55. Popularity isn't the only reason... by freerangegeek · · Score: 1

    Try thinking about it this way...

    It's not only that OS X is less targetted, it's that the OS is inherently more secure. User and system level access are more distinct. Base system applications are less likely to 'autoexecute' damaging code.

    How about two point to point comparisons?

    1) How long has Outlook continued to leave programatic access to the user's address book and increased the spread of viruses? Can you demonstrate a similar bug in OS X's Mail.app?

    2) How many holes/viruses/problems are caused by IIS web servers? What percentage of Apache webservers show the same problem?

    I'm sure I could find other examples where a BSD based OS is more secure than a Microshaft machine. (Daemons run with non-root status, ...)

    And for the record, I still run virus protection and checking software, because I'm not stupid enough to believe I'm totally immune. That doesn't equate to my machine being AS VULNERABLE as a PC to being exploited, as the title of the article implies.

    Lee

    Mac OS X is to Windows as _______ is to swiss cheese.

    1. Re:Popularity isn't the only reason... by d3xt3r · · Score: 1
      There is no doubt that Microsoft products are shoddy and filled with security holes, and yes the Unix security model is superior to that of, say a Windoze 95/98/ME box. However, my point is just that a virus does not have to destroy the system in order to be effective. Simply trashing a user's home directory is enough to really hurt a PC or Mac user.

      Your point about the Mail.app vs Outlook address book argument is interesting, but I don't think that an OS X hacker would have a hard time getting into your address book as well. Once that virus is running, it can find a way to read anything that you have read access to (and is not encrypted). That includes your address book. A litte C program (maybe even apple script) could most likely find your address book and begin mailing itself to all your contacts.

  56. Re:Beeyatches by Anonymous Coward · · Score: 0

    Word nigga! Daaaaaaaayum!

  57. For those of you who wish to enlighten by Anonymous Coward · · Score: 0

    I took a while to find, because it disappeared the day after the slashdot post, but here is the contact email for the author of this well written piece of journalism. (elminate the spam reduction 'stuff', and notice the sarcasm)

    James Middleton: james_middleton@vnu.co.uk.Oh.So.He.Wont.Get.Abused . om

  58. phooey by deviator · · Score: 1
    This isn't exactly a technical white paper on the relative security of Macs. Like most of the crappy journalism in the computer industry these days, this article has no real substance or useful information in it. It just states "well, we think the Mac might be just as big of a target as Windows."

    Trust your instinct though - most people here know that Windows suffers from some symptoms no other platform has to contend with: lots of visibility and major security holes that many people never get around to fixing. _Every_ other currently viable desktop operating system is at _least_ less visible; in the case of Mac OS X (with an open-sourced FreeBSD-like core) it's even harder for a user-space application to attack critical system components.

    Yes, Mac users should get some virus protection. Heck, EVERYONE needs virus protection these days. But to ascribe the Mac as "not really more secure than Windows" is just bunk.

  59. Re:Interesting? Interesting? by Anonymous Coward · · Score: 0

    We'll assume you _do_ know that OS X is inherently a multi-user system, and that this wasn't quite the case in OS 9, and that you were simply an idiot when you posted that.

  60. PC users be glad that.... by Anonymous Coward · · Score: 0

    Microsoft isn't keeping up with their web comics.

  61. No Virus on MY Mac! by Anonymous Coward · · Score: 0

    My L-A-S-T PC died over 5 years ago due to a virus. None of my five Macs have ever had a virus.

  62. But Mac hardware -is- more secure! by mkldev · · Score: 1

    Not only are these guys blatant trolls, but they're also wrong. As anyone who has ever tried to crack a Mac will tell you, there are entire classes of buffer overflow attacks that can't be done on PowerPC that are instant root access on x86. And it's harder to write many other types of exploits on PowerPC.

    --
    120 character sigs suck. Make it 250.