Slashdot Mirror


Apple Says Macs Are Safe, No Antivirus Needed

lobridge writes "Over the last two days multiple news feeds (and Slashdot) have been reporting that Apple has been quietly recommending antivirus software for their machines. It appears now that Apple has deleted an entry on their forums that suggested this and are saying that Mac computers are 'safe out of the box.'"

449 comments

  1. Safe... until by revlayle · · Score: 5, Funny

    Safe out of the box... that is until a user starts clicking on things.

    1. Re:Safe... until by cslax · · Score: 5, Funny

      But but but... It just works!!

    2. Re:Safe... until by AKAImBatman · · Score: 4, Interesting

      Safe out of the box... that is until a user starts clicking on things.

      Even after the user starts clicking on things, Macs are generally safe. The user must explicitly punch holes in their system to create most vulnerabilities.

      Honestly, the original tech note struck me as an attempt by Apple to say something that Apple politically couldn't say: Mac antivirus software primarily protects against Windows viruses. If Windows exists on your network or runs on your Mac via virtualization, your windows systems will be safer if you run Mac antiviral software. (Macs can't get infected, but they can be carriers!) Thus running antiviral software is a "good idea" and presents "one more program" that must be defeated.

      Of course, once the press got wind of this poorly worded tech note, it made more sense for Apple to simply pull it rather than take the political hit of wording it correctly.

    3. Re:Safe... until by Anonymous Coward · · Score: 5, Insightful

      Whoa...hold on there,son. The fact that they publish security updates proves them wrong.

      Maybe there aren't many (or any) viruses, worms and whatnot targeting the platform today, but they will come, and when they arrive, it will be a good idea to have some protection installed beforehand. A relative few will still get infected before the AV industry can react, but the rest will be safe as soon as a definition update appears that detects the threat.

    4. Re:Safe... until by Anonymous Coward · · Score: 0

      Safe out of the box..... Until you plug-in the power and net connection...

    5. Re:Safe... until by LordKronos · · Score: 3, Insightful

      Yeah, but I think paying for antivirus software (and the likely yearly subscriptions) when there isn't even evidence of any viruses actually existing seems to me to be like paying for car insurance before you've bought a car or got your license. Should we also be vaccinating our bodies against theoretical illnesses that haven't even been discovered yet?

    6. Re:Safe... until by tbrex33 · · Score: 1

      As a user, I really do not care if Apple is vulnerable at all, it is if me using their platform makes me vulnerable as a user. The threat is not to Apple, but users like me. Those who are considered threats want login names and passwords.... Apple knows "they" are safe in the area..

    7. Re:Safe... until by JustinOpinion · · Score: 4, Insightful

      something that Apple politically couldn't say: Mac antivirus software primarily protects against Windows viruses

      Considering that Apple runs ads that directly state that "PCs" get viruses whereas "Macs" do not, I don't see why they would mind saying roughly the same thing in a tech note.* Seems to me that they have already taken a pretty visible stance on that political issue.

      That having been said, I suspect you are right: once this whole issue blew up, it was safer to completely distance themselves from the original tech note, rather than try and explain why they had originally issued it.

      [*] Conceivably the tech note was written by some lower-level employee who didn't want to say something controversial. So instead he/she left it vague and just suggested that "antivirus is a good idea" and so on.

    8. Re:Safe... until by Anonymous Coward · · Score: 0

      Yeah, it's rather like the OpenBSD in that regard, isn't it? OpenBSD, of course, boasts to only have had two remote holes in the default install in more than ten years, but while that's still an impressive feat, it becomes at least somewhat less impressive once you realise the default install doesn't actually contain anything to get any actual work done.

    9. Re:Safe... until by revscat · · Score: 4, Insightful

      Maybe there aren't many (or any) viruses, worms and whatnot targeting the platform today, but they will come, and when they arrive, it will be a good idea to have some protection installed beforehand.

      People have been saying the same damn thing for 8 years. "Just wait, one day OS X will get a virus. You'll see."

      Ok, well, after hearing this for almost a decade I'm kinda starting to get skeptical.

    10. Re:Safe... until by bennomatic · · Score: 0, Troll

      But but but... Don't be a troll. If you have something to say that provides constructive feedback to the discussion rather than simply throwing out an implied insult to "fanbois", don't post.

      At least you could have the guts to post a real insult if you have one. Like, "This flies in the face of the whole, 'it just works!' fanboi-ism. I believe that Apple has more style than substanc, and one day, this house of cards will collapse just like the failed policies of the Bush administration."

      I don't agree with that statement, but if you're going to pick a fight, pick a freakin' fight! Now where did I put that Zoloft?

      --
      The CB App. What's your 20?
    11. Re:Safe... until by megamerican · · Score: 0, Offtopic

      Should we also be vaccinating our bodies against theoretical illnesses that haven't even been discovered yet?

      According to Executive order 13295, yes, we should! But only if the government says so!

      Ex. Ord. No. 13295. Revised List of Quarantinable Communicable Diseases

      Ex. Ord. No. 13295, Apr. 4, 2003, 68 F.R. 17255, as amended by Ex. Ord. No. 13375, 1, Apr. 1, 2005, 70 F.R. 17299, provided:

      By the authority vested in me as President by the Constitution and the laws of the United States of America, including section 361(b) of the Public Health Service Act (42 U.S.C. 264 (b)), it is hereby ordered as follows:

      Section 1. Based upon the recommendation of the Secretary of Health and Human Services (the "Secretary"), in consultation with the Surgeon General, and for the purpose of specifying certain communicable diseases for regulations providing for the apprehension, detention, or conditional release of individuals to prevent the introduction, transmission, or spread of suspected communicable diseases, the following communicable diseases are hereby specified pursuant to section 361(b) of the Public Health Service Act:

      (a) Cholera; Diphtheria; infectious Tuberculosis; Plague; Smallpox; Yellow Fever; and Viral Hemorrhagic Fevers (Lassa, Marburg, Ebola, Crimean-Congo, South American, and others not yet isolated or named).

      (b) Severe Acute Respiratory Syndrome (SARS), which is a disease associated with fever and signs and symptoms of pneumonia or other respiratory illness, is transmitted from person to person predominantly by the aerosolized or droplet route, and, if spread in the population, would have severe public health consequences.

      (c) Influenza caused by novel or reemergent influenza viruses that are causing, or have the potential to cause, a pandemic.

      Sec. 2. The Secretary, in the Secretary's discretion, shall determine whether a particular condition constitutes a communicable disease of the type specified in section 1 of this order.

      Sec. 3. The functions of the President under sections 362 and 364(a) of the Public Health Service Act (42 U.S.C. 265 and 267 (a)) are assigned to the Secretary.

      Sec. 4. This order is not intended to, and does not, create any right or benefit enforceable at law or equity by any party against the United States, its departments, agencies, entities, officers, employees or agents, or any other person.

      Sec. 5. Executive Order 12452 of December 22, 1983, is hereby revoked.

      George W. Bush.

      --
      If you have something that you dont want anyone to know, maybe you shouldnt be doing it in the first place -Eric Schmidt
    12. Re:Safe... until by kaosfury · · Score: 1

      Why should he be any different than the average slashdotter?

      --
      "Trust that little voice in your head that says 'Wouldn't it be interesting if...' and then do it." - Duane Michals
    13. Re:Safe... until by dhavleak · · Score: 3, Insightful

      People have been saying the same damn thing for 8 years. "Just wait, one day OS X will get a virus. You'll see."

      Actually, people have been saying "One day, OS-X will have enough users that malware authors will target it the way they target Windows". That hasn't happened yet, but OS-X marketshare is trending upwards, so it might still happen.

      Also, please note the omission of "You'll see" and other such things. I don't want OS-X users to get viruses just so that my point gets proven. I do agree that in all likelihood if you run OS-X without an AV you'll be ok. That still doesn't negate the point -- OS-X does not have any inherent security advantage over Windows, and Apple's smug attitude towards security will bite them in the butt if their marketshare increases.

    14. Re:Safe... until by Anonymous Coward · · Score: 0

      Someone's sense of humor is broken. Way to go.

    15. Re:Safe... until by Anonymous Coward · · Score: 0

      It was a joke. Jokes are meant to be funny. I laughed, then I laughed at your post. Good job following up!

    16. Re:Safe... until by LandDolphin · · Score: 1

      Some of us like quips

      --
      Spelling and Grammar errors have been added to this post for your enjoyment
    17. Re:Safe... until by Anonymous Coward · · Score: 0, Insightful

      Yeah right. That's why Mac OS X got hacked while Vista and Linux were immune.

      Make all the excuses you want. Mac OS isn't invincible. It's not even secure.

    18. Re:Safe... until by Anonymous Coward · · Score: 1, Funny

      and some of us like trolls. I like combing their long hair, and putting stick on gems all over their faces!

    19. Re:Safe... until by FictionPimp · · Score: 0

      If Apple was serious about security, they would have you make a user account and an admin account. This run as admin by design crap is silly.

      It was the first thing I changed after getting my mac. I have not needed to login to my admin account besides the first time I set it up. When I need to do something that requires the privileges, it just asks for the user/pass. The upside is it prevents any problems that may develop from hurting anything but my user's home folder.

    20. Re:Safe... until by vulpinemac · · Score: 0, Troll

      Ummm.... you do know that today's drug companies create medicines for diseases that haven't been invented yet, right? I mean, before a specific drug came out, whoever heard of [i]Restless Leg Syndrome?[/i]

    21. Re:Safe... until by Yvan256 · · Score: 3, Funny

      You don't know how Macs work, dude. The internet connection is wireless, we don't even have to connect anythi...

      oh wait.

    22. Re:Safe... until by Nebu · · Score: 2, Insightful

      People have been saying the same damn thing for 8 years. "Just wait, one day OS X will get a virus. You'll see."

      Ok, well, after hearing this for almost a decade I'm kinda starting to get skeptical.

      I don't know about the people you've been hearing it from, but I am fairly confident that when/if OS X has a majority market share as a consumer OS, it will have viruses and other forms of malware. From a utilitarian point of view, if you're trying to create a botnet, it makes most sense to have your botnet target the most prevalent platform run by home users on the internet. In particular, you don't want to target the most prevalent platform run by system administrators, because they probably know how to take care of their machines.

      If the OS allows users to write to the harddisk, and to communicate over the internet, (and I can't imagine a useful consumer desktop OS that wouldn't allow these) then it contains everything necessary for malware to exist on that platform. If the OS allows user-written files to be executable (a very important feature if you want users to have hobbyist programmers on your platform), then the platform contains everything necessary for viruses to exist.

    23. Re:Safe... until by AndGodSed · · Score: 5, Informative

      Hey. If you wiki you will see that there are viruses for Linux (I think the count is 4000ish), and below is a link to at least one Mac virus that I could find on Wikipedia (one search, I am lazy)

      http://en.wikipedia.org/wiki/NVIR_(computer_virus)

      I agree strongly with the sentiment that Antivirus for Linux and MacOS are largely to protect against spreading windows virii

      If you pass along an infected e-mail you are spreading a virus that could have stopped with you.

      Another point to consider is weaknesses in other applications such as flash, Macoffice, silverlight (wich has a Linux beta) and so on.

      OS vulnerability (or lack thereof) is only part of the puzzle.

      If you are running apache php and firefox a simple script will crash your whole system regardless of OS.

      A simple script along the lines of while $value is less than 1000000000 do value+1 and echo "the value is".$value

      (I put in an EXTREMELY simplified version since /. did not want to show the full script, but most of you guys should get the idea)

      In fact I embedded it in php and I caused my machine to run out of memory and lock up by simply accessing localhost in firefox. This is on an ubuntu box, running apache and FF with PHP.

      If you are creative you can get up to a lot of mischief, regardless of platform.

    24. Re:Safe... until by Anonymous Coward · · Score: 4, Insightful

      Puh lease. For years there were far more Apache installations and they didn't get ass-raped the way IIS did/does.

      It has nothing to do with installation base and far more to do with idiot coding practices.

    25. Re:Safe... until by Low+Ranked+Craig · · Score: 1

      Maybe, maybe not. There are enough rabid anti-Mac coders out there that I think if the BSD underpinnings of OS X were that vulnerable there would be viruses out there already. Mac has a small share relative to Windows, but you know that there are Microsofties out there that want to take OS X down. So far they have failed.

      --
      I still cannot find the droids I am looking for...
    26. Re:Safe... until by Mr.+Firewall · · Score: 0, Flamebait

      OS-X does not have any inherent security advantage over Windows....

      I see that you don't know anything about either Windows or OS X. The latter has several inherent security advantages over Windows.

      --
      In times of universal deceit, telling the truth gets you modded -1 Troll
    27. Re:Safe... until by DesertBlade · · Score: 3, Insightful

      Technically that is not a crash of the system. While all the system resources are in use, you can kill Firefox and the system will return to normal. I have also seen poor javascript bring system to crawls, but the system stayed up. Virus software probably would not catch a scenario like this.

      --
      Half of writing history is hiding the truth.
    28. Re:Safe... until by LordKronos · · Score: 1, Interesting

      Not yet been invented != Not yet been named and publicized

    29. Re:Safe... until by 0100010001010011 · · Score: 1

      Macs are mostly safe from the 'remote execution' that take over most Windows machines, they are not safe from from spyware from stupid users. With more and more (dumb) college students owning Macs, I'm expecting a rush of "Get your Smilies Here!" apps being released for OS X.

      Pkg maker for OS X is insanely easy to use and very powerful. Complete with preflight and postflight scripting (in any language you choose.)

      As a proof of concept I've made a "PWNED.pkg". It included
      1) logKextClient and a script that would mail me the log nightly.
      2) autossh that would ssh back to my home computer and open a port.
      3) Some LaunchD scripts that would run all of those on system startup and periodically.

      It would be very very trivial to add a LaunchD script that ran once a night that downloaded "http://www.pwned.ru/script.pl" and executed it.
      All of the PHP IRC bots run natively on my Mac.

      Only thing I was missing was something MUST HAVE to wrap it around.

    30. Re:Safe... until by Anonymous Coward · · Score: 0

      Like less people using it?

    31. Re:Safe... until by Graff · · Score: 5, Informative

      below is a link to at least one Mac virus that I could find on Wikipedia (one search, I am lazy)

      http://en.wikipedia.org/wiki/NVIR_(computer_virus)

      I agree strongly with the sentiment that Antivirus for Linux and MacOS are largely to protect against spreading windows virii

      If you pass along an infected e-mail you are spreading a virus that could have stopped with you.

      The NVIR virus last worked on MacOS 8, it didn't work under MacOS 9 and it certainly doesn't work under Mac OS X. Basically the last operating system it worked on was obsolete over 10 years ago. There are no current Mac OS X viruses in the wild.

      In regards to spreading Windows viruses yeah I feel bad for Windows users but I won't spend my own money and processor cycles on worrying about their systems. If they want to protect their systems then they should take steps to protect themselves. They could also dump Windows and get an operating system that isn't so ridden with viruses and malware. That's their own choice and problem, not mine.

    32. Re:Safe... until by Anonymous Coward · · Score: 0, Insightful
    33. Re:Safe... until by Piranhaa · · Score: 3, Insightful

      That's one way of looking at it. Another way is hearing news that the East is infected with a certain illness that can't 'currently' affect Westerners. However, like with any viruses, they mutate constantly and can eventually cross over. So, in that sense, it can make sense to protect yourself with a vaccine.

      But, being properly aware is still much much better than what virus scanners can provide. Hell sometimes virus scanners cause more harm than good. System slow downs and wrongly detecting files as viruses when in fact they aren't are among reasons (just look what happened with AVG recently). I still don't run virus scanners on MY XP (Bootcamp) install, nor my main OSX install. I run an OpenBSD firewall, and am 'smart' when on the net. I, personally, don't ever really plan on running a virus scanner. If I'm opening a suspicious file, I'll simply create a snapshot of a Windows install, open the file and see if it does any damage. If I see ANY suspicious activity, I could simply revert to an old snapshot... Obviously this isn't (currently) a viable option for the general public, but I don't see it being too far off as pretty well all new computers come with Intel or AMD visualization technologies to allow speedy virtual machines.

    34. Re:Safe... until by Sancho · · Score: 1

      I still think it will, eventually.

      Of course, that just exposes my optimism that OS X will manage to grab enough market share to make it a worthwhile target to malware writers.

    35. Re:Safe... until by AndGodSed · · Score: 1

      Ugh - I forgot to differentiate between crash and thrash. You are correct.

      Point is that a virus is code, and code can do nasty things.

      I am gonna replace a nooby here at work's localhost with this. Ah office fun...

    36. Re:Safe... until by stewbacca · · Score: 1

      But it DOESN'T fly in the face of the "it just works" logic. They are saying you don't have to do anything out of the box, which is the definition of "it just works".

      Also, I have no idea why your well constructed post is -1 Troll and the lazy troll you are replying to is +5 Funny.

    37. Re:Safe... until by atraintocry · · Score: 2, Insightful

      Like lack of ActiveX.

    38. Re:Safe... until by nine-times · · Score: 4, Insightful

      A) The idea that Windows only gets compromised because of its large market share isn't firmly founded. Even if you think it's true, it's far from being widely accepted.

      B) Even if OSX becomes just as frequently compromised as Windows, it still doesn't make sense to buy an Antivirus program now. Most AV packages rely on databases of known-viruses, and aren't very effective against new/unknown viruses. Therefore, even if you have AV software for your Mac, they won't detect any threats until after they're known. Therefore, it doesn't make sense to bother to install anything until after there are known threats for OSX, and there aren't any yet.

      So mostly, installing AV software on OSX will just use up resources and *maybe* help to protect Windows machines you're trading files with.

      Also, I don't know about you, but I evaluate AV software before I buy it for what's most efficient and effective at the time when I buy it. Until there are real threats against OSX, there's no way to measure how effective it is at protecting you from those threats, so there's nothing to recommend one package over another except for what uses the least resources. And do you know what uses the least resources? Having no AV software installed.

    39. Re:Safe... until by HeronBlademaster · · Score: 1

      Saying "So far they have failed" implies that they've tried - do you have any evidence of that? A lack of viruses does not necessarily indicate the existence of failed attempts.

      I subscribe to the notion that malware authors (in general) won't target OSX unless it gains the kind of market penetration that would make it profitable. Something like 40-50%, is my off-the-seat-of-my-pants guess, but we won't know for sure until it happens.

    40. Re:Safe... until by MindlessAutomata · · Score: 5, Informative

      fyi, it really is "viruses", not virii.

    41. Re:Safe... until by recharged95 · · Score: 1
      Didn't macs have viruses back in the Apple IIc days. And we all bought Norton back then.

      It's history repeating itself, once Apple is popular again, the viruses will follow.

    42. Re:Safe... until by Piranhaa · · Score: 1

      Not to cause a flame war, but I wouldn't mind knowing how OSX doesn't have ANY security advantage over Windows. The Darwin kernel is open sourced, and has active development teams both inside and outside of Apple. If Apple finds a bug, it gets posted and same goes for the community. It's forked off proven BSD code (FreeBSD 5), and comes with plenty of Open Sourced softwares (Cups, Apache, OpenSSH, bash, etc). While the market share for these is generally smaller, except Apache, they do have huge developers constantly adding features, squashing bugs, and finding exploits. The same CANNOT be said for Microsoft software.

      I'm by no means saying OSX is flawless (saying that about ANY OS is foolish), but rather saying the base it's founded on has been proven to be stable and 'generally' safer than Windows alternatives. Yes, you can argue that it only supports THEIR hardware, but that's their strength. This allows them to keep their programming team smaller and much more inline with each other - Microsoft generally (contracts?) out chunks of coding. This can sometimes be efficient, but can be seen as a huge liability in terms of bugs, since many of these teams don't speak to one another.

      While I don't agree with all of Apple's practices (Suing Psystar, reducing 40% performance on new Macbook(Pros), choosing a mini Display Port), I do like some of their innovative practices, which can sometimes be rare to find nowadays.

    43. Re:Safe... until by Macthorpe · · Score: 2, Insightful

      Yeah, it's not like Apache installations are mostly maintained by experienced sysadmins whereas Windows computers are maintained by every idiot and his grandma.

      Wow, it really is hard not to be sarcastic about this stuff.

      --
      "It does not do to leave a live dragon out of your calculations, if you live near him." - Tolkien
    44. Re:Safe... until by AndGodSed · · Score: 2, Informative

      Heh.

      I tried both in that post and virii seemed so... sophisticated.

      Imagine that, a geek with aspirations to being sophisticated.

      And then he gets it wrong...

    45. Re:Safe... until by macs4all · · Score: 1, Informative

      If I understand my Unix jargon correctly, An "Admin" account on OS X is simply one that is on the "sudoers" list.

      An OS X "Admin" account ("User can Administer This Computer") != root.

      You've got to specifically enable root login capability. And in 9 years of using OS X on a daily basis, I have never come across a need to do that.

      Ipso facto, barring "social engineering", there is absolutely NO way for a self-propagating piece of code to be developed for OS X.

      And if it ain't self-propagating, it ain't goin' nowhere... fast!

    46. Re:Safe... until by cslax · · Score: 3, Insightful

      Is it possible for a Mac user to troll a post about macs? I used a Mac to post my previous comment and my comment now.

      I could have posted an eloquent, well thought out response, but instead decided that posting that would better serve my purpose.

      To add to the discussion at hand, at Apple stores, I have witnessed many people asking the "genius bar" people about AV protection for their Mac's, only to be told, "Apple computers do not get viruses, but you should protect your fellow Windows computers, by buying this AV software!" These people then dump extra money to buy antivirus, in order to make sure they are not carriers, which is what the comment in TFA seemed to suggest.

    47. Re:Safe... until by Wingsy · · Score: 1

      Not enough users? Why wouldn't 30 million UNPROTECTED computers appeal to a virus creator? Just think, he could get at least 3 million in his botnet in no time. A lot more than in any Windows botnet, and those users are typically a bit wealthier than the Windows variety so the chances of accumulating some significant bank account numbers would be mighty tempting. Are you telling me that 30 million unprotected computers is an insignificant target? Do you even believe yourself when you write that?

      --
      If I didn't have absolutely NOTHING to do, I wouldn't be here.
    48. Re:Safe... until by mr_josh · · Score: 1

      You make a good point, and I think one of the most rational here. I'd like to add to this, however, that I don't think the population of viruses and OS X malware is going to explode overnight. If it gradually starts creeping in, as I suspect it someday might, I hope that Apple WILL start preaching virus protection to its users, and maybe even take a page from the MS playbook and start offering virus protection with the OS itself (and in a better implementation than the lame thing they tried with .Mac a few years ago...)

    49. Re:Safe... until by xwizbt · · Score: 1

      Very few of us run systems that can be infected by MacOS viruses that run on pre-OS X systems. Check your facts a bit more carefully before just posting random search results.

    50. Re:Safe... until by lgw · · Score: 1

      Actually, during the time that IIS was a huge menace it was installed by default on WinNT. Most IIS instalations were on servers run by admins who didn't even realize they were running IIS (until the first big worm hit).

      Those days are long gone, however. Viruses (etc) these days are mostly about carefully maximizing returns, measured in new botnet members, and there's little reason to target even the second-most common platform.

      --
      Socialism: a lie told by totalitarians and believed by fools.
    51. Re:Safe... until by Seraph321 · · Score: 2, Insightful

      30 million is a lot, to be sure, but I wonder if malware authors look at them the same way. For one thing, I believe desktops must be much more desirable for spambots than laptops because they are left on more often. This is especially true for desktops in small businesses. I would guess that the vast majority of those 30 million macs are laptops.

    52. Re:Safe... until by lgw · · Score: 1

      Yup, the X-Box is a great example of a hardended Windows system. Of course, it can acually execute files that the user caused to be written to the hard drive, so I'm sure it's only a matter of time.

      --
      Socialism: a lie told by totalitarians and believed by fools.
    53. Re:Safe... until by Anonymous Coward · · Score: 0

      Should we also be vaccinating our bodies against theoretical illnesses that haven't even been discovered yet?

      i would.

    54. Re:Safe... until by stewbacca · · Score: 1, Insightful

      You're not redirecting us to the story about the hacked Mac where the guy built some code on his website and pointed the Mac to the malicious code HE BUILT WEEKS BEFORE THE CONTEST are you? Oh wait. Right, you are. And the OTHER guy's the shill?

    55. Re:Safe... until by Anonymous Coward · · Score: 0

      the gems go on the bellybutton not their face!

    56. Re:Safe... until by Tsujiku · · Score: 1

      You seem a little biased on the matter. ;)

      --
      Paradox
    57. Re:Safe... until by bledri · · Score: 3, Informative

      If Apple was serious about security, they would have you make a user account and an admin account. This run as admin by design crap is silly.

      I think you are confused about what an "Admin" account is on Mac OS X. It's not really an admin account, but a user that through sudo can temporarily have super-user access. There is no need to create separate account because without an explicit user action, the account has no special privileges. As a matter of fact, there is no root user unless you go out of your way and adding a root user is actually less secure. It's a UN*X thing, not a Mac thing and debian/Ubuntu work exactly the same way.

      --
      Some privacy policy Slashdot.
    58. Re:Safe... until by saintsfan · · Score: 0

      yes, i remember when these existed. they deffinately are not relevent anymore, but thanks for the fond memories!

    59. Re:Safe... until by Anonymous Coward · · Score: 0

      Hey I'm a windows user, but the only reason i use Windows is because its what most programs run on

    60. Re:Safe... until by terrahertz · · Score: 1

      non id est, gluteus-kaput!

      ;)

      --
      Slashdot? Oh, I just read it for the articles.
    61. Re:Safe... until by Low+Ranked+Craig · · Score: 1

      A lack of viruses does not necessarily indicate the existence of failed attempts.

      This is true, but so is the inverse. A lack of viruses does not necessarily indicate that no one has tried.

      No hard evidence, but I'd have to say that with millions of Macs out there the odds are good that it must been tried multiple times. On the other hand maybe possession of any kind of Apple device renders the user unable to create a virus.

      --
      I still cannot find the droids I am looking for...
    62. Re:Safe... until by el3mentary · · Score: 1

      You don't think that the desire to crush the smug sense of superiority held by us Mac users is enough reason for someone to write a virus for it? Hell, there's a virus for the DS version of Linux which must have perhaps a thousand users at most.

      --
      I reject your reality and substitute my own.
    63. Re:Safe... until by geminidomino · · Score: 2, Insightful

      Which would suggest that it wasn't particularly a problem until they discovered they could soak people for more money with it.

      Before RLS medication was invented, I had a surefire way of dealing with restless legs.

      I went for a walk.

    64. Re:Safe... until by 0100010001010011 · · Score: 1

      My "hardened" system is running XBMC installed via a SoftMod.

      Doesn't look very hardened to me.

    65. Re:Safe... until by jbezorg · · Score: 3, Insightful

      I wonder if the first OSX virus will be called "hubris". Has a nice ring to it. osx.hubris.v

      Malware On Mac OS X - Viruses, Trojans, and Worms
      http://www.macforensicslab.com/Malware_on_Mac_OS_X.pdf

      A white paper on the history and future of malware and how it can affect the Apple Mac OS X platform.

      This document discusses the technologies used in malware. These include viruses, Trojans and worms. The specific intention is to bring forth detailed discussion on how this affects the Apple Mac OS X platform. The document outlines a potential framework for a Mac OS X malware suite. The document closes with recommendations on what Apple Inc, and users of Mac OS X can do to defend against such technology.

      This paper was created to outline the results of research performed by the MacForensicsLab.com research and development team. These results are presented to the public in order to raise awareness of the situation and to prompt the relevant responsible parties to address the issues outlined within.

      The MacForensicsLab.com staff and SubRosaSoft.com Inc consider it important to bring such discussions out into the public and welcomes all opportunities to discuss the paper on info@subrosasoft.com.

      --
      I've lost all my marbles except one & It's fun to test angular & centripetal acceleration in my skull
    66. Re:Safe... until by spiffyman · · Score: 2, Insightful

      I actually contracted nVIR on a Centris 610 once, well over a decade ago. I also wanted to point out that the fact that nVIR was viable against System 4.1 machines should have been a big freaking sign that something was amiss when it was cited as an example of the Mac's vulnerability. If the virus is contemporaneous with System 4.1, it's over 20 years old.

      nVIR is in the wild like smallpox is in the wild.

      People need to understand that no one in the know is saying that OS X is vulnerability-free or that it will stay virus-free. But every time that's brought up we're practically told to start handcoding fixes for non-existent threats. It's absurd.

      --
      So you can laugh all you want to...
    67. Re:Safe... until by Veni+Vidi+Dormi · · Score: 1

      . . . when working on a project for my University. We were pretty far out in boonies working at a clinic and I was curious about the cell towers as they were surrounded by barbwire and really looked like fortresses.

      Come to find out, they'd tried to put up electrical and phone lines but as the posts were going up, they were cut down, the coating burnt and the scrap copper was sold. Odd, how a few thieves can affect a countries infrastructure so drastically.

    68. Re:Safe... until by Veni+Vidi+Dormi · · Score: 1

      damn tabs. i posted to the wrong article entirely.

    69. Re:Safe... until by Anonymous Coward · · Score: 0

      1. Dude, go to school - your post was insane to read.

      2. Virii is not a word.

    70. Re:Safe... until by B47h0ry'5+CuR53 · · Score: 2

      Unless XBMC was trojan installed on your Xbox, I'd say the Xbox is hardened.

      --
      The memory management on the PowerPC can be used to frighten small children. -Linus
    71. Re:Safe... until by p0tat03 · · Score: 3, Interesting

      Correction: You use Windows because it's what most programs *you know* run on. I've converted from Windows a long time ago and I can do everything I did on my old machine on the Mac. Ripping CDs? No problem, UI is better too. Web design? Photo manipulation? Video editing? Yes, yes, and yes. Coding, watching movies, playing music... need I go on?

    72. Re:Safe... until by sdpuppy · · Score: 1

      Mac has a small share relative to Windows

      Yes, but consider that 9% is a lot less small than it used to be... (a few years back = http://marketshare.hitslink.com/os-market-share.aspx?qprid=9

      (assuming the method they used to determine this metric is valid, of course)

      Amazing that there are no real exploits.

    73. Re:Safe... until by p0tat03 · · Score: 4, Insightful

      The point I think he's trying to make is that, as of yet anyhow, OS X viruses and malware have to be explicitly let in through the front door via user stupidity (or just plain ignorance/don't know better). On the other hand, MS's track record has shown numerous ways for software to sneak onto your machine without user intervention whatsoever.

      I personally think that OSX's sudo password prompt needs to be beefed up to show exactly what the app is attempting to access. If I'm installing some app that wants to add a file to /usr/bin, sure. If it wants to REMOVE a file I'd be a lot of more suspicious. As of right now both cases will simply show a nondescript "enter admin password" prompt, which is insufficient.

    74. Re:Safe... until by dscaife · · Score: 1

      Actually, people have been saying "One day, OS-X will have enough users that malware authors will target it the way they target Windows". That hasn't happened yet, but OS-X marketshare is trending upwards, so it might still happen.

      That "more users" argument holds next to zero weight. It's nothing more than a cheap finger-pointing excuse, attempting to deflect the excessive number of vulnerabilities and exploits as being related to the number of users of a particular system. I'm sure we've all heard the expression 'correlation is not causation'. Well, that's probably true in this case too. To anybody who actually think the argument is valid, I would ask this: what kind of person do you think writes viruses?

      If you don't think about it too hard, perhaps you will think they want to cause as much damage as possible, which is where the popularity argument comes in. That is true, but this kind of attitude stems from an apparent need to prove their skills to themselves and to others. Wouldn't it be reasonable, then, to say that this type of person would want to be able to say "look at me, I made the first really widespread severely destructive Mac/Linux/BSD/ virus ever!". Now wouldn't that be something!

      ...still waiting, though.

    75. Re:Safe... until by ch1lly · · Score: 2, Insightful

      ..and playing games. Oh, wait.

    76. Re:Safe... until by rjhubs · · Score: 1

      perhaps if you are just an angry windows fanboy.. however the most serious virus writers out there are more concerned with profit, not mischief.. viruses have come a long way since the 90's..

    77. Re:Safe... until by Anonymous Coward · · Score: 0

      Actually, if you are talking about latin it is

      Vira

    78. Re:Safe... until by p0tat03 · · Score: 2, Interesting

      I left the ridiculous upgrade cycle behind a long time ago. When I got into college (still into PC gaming at the time) I made the mistake of buying a clunker of a "gaming laptop". Never again. My laptop is for work and for mobility, I have an Xbox 360 at home for a good reason.

      But you're right, gaming isn't great on the Mac. But if you're talking about productivity tools - office suites, IM/chat, etc etc, the Mac is in every way comparable to the PC, and in many cases superior.

    79. Re:Safe... until by Anonymous Coward · · Score: 0

      "i use Windows is because its what most programs run on"

      Bull! There is just as much software availible, if not more, for non-Windows machines. They may not be what you want to use but that's a different story.

      I haven't owned a Windows box for over 10 years. I still do all the things a Windblows user does with the exception of some very specialized niches.

    80. Re:Safe... until by AlastairLynn · · Score: 2, Informative

      Actually, if you are talking about latin it is

      Vira

      'Virus' in latin means venom. Since this is something uncountable, latin has no plural for it. The 'correct' way to pluralise it has to come from English, since we're using a transliteration.

    81. Re:Safe... until by ekhben · · Score: 1

      Let's be generous and assume that, yes, Windows only gets targeted because of its massive market share. That still seems like a pretty good reason to ditch Windows and use something else. The effect is the same: move away from Windows, get a more secure environment.

    82. Re:Safe... until by Anonymous Coward · · Score: 0

      There are many forms of malware, in 2002 mac had about 2000 'in the wild' viruses. Worms are not viruses, but the Mac was afflicted by those too.

      All viruses and other malware have to be written for a specific platform. Sometimes that allows them to infect across more than one O/S. (For example, a Dos32 type may be able to infect Win95, Win98, WinXP, etc.) By the way, Microsoft Office is a Platform due to it's inclusion of Word Macro Basic.

      Since the cretins writing these things (most barely know how to program, just look at their code) usually want to infect as many machines as possible, there is little incentive for them to target Macs. (At the same time period Macs had around 2000, Windows had around 10000.)

      Due to greater numbers, and a proclivity to do security stupid things (mostly because they can), Windows PCs are under a much larger threat.

      If you don't believe Macs are now, and always have been at risk from viruses and other malware, not only do you believe in Magic Pixie Dust, but you've never sat in the middle of a group of Mac Antivirus Techs when they are having a bad call day... (I have)

    83. Re:Safe... until by ArsonSmith · · Score: 1

      Unless you consider that, even the manufacture is saying, "Don't worry you are safe."

      The number of OSX systems is higher than even the largest botnets. All are sitting there unprotected. With users that are mostly clueless to the existence of viruses. This would make quite a quick and easy botnet should there be a way to exploit it.

      --
      Paying taxes to buy civilization is like paying a hooker to buy love.
    84. Re:Safe... until by plasmacutter · · Score: 1

      Whoa...hold on there,son. The fact that they publish security updates proves them wrong.

      Maybe there aren't many (or any) viruses, worms and whatnot targeting the platform today, but they will come, and when they arrive, it will be a good idea to have some protection installed beforehand....

      If this were a headline, i would tag it "imminentdeathoftheinternet" because people have been claiming this on blogs for almost a decade now, and it's never happened.

      Also, if a virus comes along, having antivirus "beforehand" wouldn't work because they require definitions for the new malady, and IF it were to come along, it would probably beat war coverage to the front lines of organizations worldwide.

      In the mean time, you'll have anti-virus software eating resources and cash just like a key-logging worm watching you access online banking.

      --
      VLC FOR MAC IS DYING! IF YOU DEVELOP, PLEASE SAVE IT!!
    85. Re:Safe... until by Anonymous Coward · · Score: 0

      Besides, why recommend giving money to third parties? Once the AV industry start making money off macs there is one more reason for mac viruses to appear- following the money theory at least.

      I'd integrate clamav and work with them so malware is fought with the minimum effort.

    86. Re:Safe... until by plasmacutter · · Score: 1

      Every once in a while someone tries, and fails.

      --
      VLC FOR MAC IS DYING! IF YOU DEVELOP, PLEASE SAVE IT!!
    87. Re:Safe... until by fatalGlory · · Score: 2, Informative

      I once did something like this in javascript in IE on windows 98 and ME (this was before the XP days). I just copy pasted the javascript code "window.open(virus.html)" about 500-1000 times in the script (I was 13 and hadn't learned about loops yet). It managed to chew enough resources that the start menu wouldn't open and the comp had to be restarted. I thought I was so l33t. lol.

      Nowadays in XP, the system catches this sort of behaviour and asks if you want to kill the process. Don't know about Linux but will test in Ubuntu Intrepid today for fun.

      For now, consider the following:
      int main()
      {
      int *i;
      while (1)
      i = new int;
      return 0;
      }


      Shock horror! Windows XP will catch this and kill it when it takes up enough memory (without even asking! that's a little rude to the power users...), Ubuntu however (at least in hardy, yet to try in intrepid) will let it continue on its merry way until the system becomes, for all intents and purposes, completely unresponsive. Had fun running this and then starting a game of CS:Source in wine. Watched the framerate slowly drop until I didn't move at all anymore. So yes. The thrash-crash line may not always be so clear-cut.

      Having said that, this is all without the aid of any AV. I don't know if any AV would pick up an app that include such an intentional loop of leaking memory.

      --
      Censorship is the opposite of education. If neo-darwinism were defensible, people would not need to try and censor ID.
    88. Re:Safe... until by node+3 · · Score: 1

      Whoa...hold on there,son. The fact that they publish security updates proves them wrong.

      None of the security updates have anything to do with viruses.

      There are no Mac OS X viruses. None.

      Maybe there aren't many (or any) viruses, worms and whatnot targeting the platform today, but they will come, and when they arrive, it will be a good idea to have some protection installed beforehand. A relative few will still get infected before the AV industry can react, but the rest will be safe as soon as a definition update appears that detects the threat.

      Better still, run no antivirus/anti-malware software at all until viruses and malware become a problem.

      The reason is that it's foolish to expend resources protecting against something that isn't a problem, nor is there any indication that it's about to become a problem in the near term.

    89. Re:Safe... until by Risen888 · · Score: 2, Insightful

      It's also what most viruses run on. You're making a trade-off there, even if you're not aware of it.

      --
      Hey, I finally got my first freak! Took you long enough!
    90. Re:Safe... until by riggah · · Score: 1

      In regards to spreading Windows viruses yeah I feel bad for Windows users but I won't spend my own money and processor cycles on worrying about their systems. If they want to protect their systems then they should take steps to protect themselves. They could also dump Windows and get an operating system that isn't so ridden with viruses and malware. That's their own choice and problem, not mine.

      My thoughts exactly. It should be up to everyone else to protect themselves so that I'm protected by virtue of their diligence.

      I mean, I don't wear condoms because everyone else has been told to protect themselves with birth control and prophylactics. I have nothing to worry about, right?

    91. Re:Safe... until by MidnightBrewer · · Score: 1

      Citation needed. Where do you get the number that there were 2000 Mac viruses in the wild in 2002? You need something to back up that claim. I've had Macs for 12 years and haven't worried about viruses since about the first year.

      --
      "Give a man fire, and he'll be warm for a day; set a man on fire, and he'll be warm for the rest of his life
    92. Re:Safe... until by keramida · · Score: 1

      "If you pass along an infected e-mail you are spreading a virus that could have stopped with you."

      If you pass a long an infected email by forwarding an attachment that you didn't even open at all (the assumption here is that you are running a free operating system and Windows virri can't really do any damage), then you are not only spreading a virus that could have stopped with you. You are being stupid and unnecessarily annoying, and you deserve to be blacklisted.

      If an MTA passes along an infected email, then clamav and other filtering programs exist. It's probably a good idea to install one.

      --
      My other computer runs FreeBSD too.
    93. Re:Safe... until by quarkscat · · Score: 2, Interesting

      And why would you PAY for anti-virus software, when even the big commercial AV vendors cannot protect against zero-day viruses? For Mac OS X, check out: ClamXAV and for other UNIXes try: ClamAV They are both based upon the same anti-virus scan engine, and both make use of anti-virus definition files which are updated DAILY (see "daily.cvd" on these websites. As far as the Mac OS X platform NOT being vulnerable - don't you believe it for one minute! I have a PPC-based Mac, a Ti Powerbook that is running 10.5.5 (as an update from 10.3.9, not installed to a bare disk.) I generally have it "locked down" pretty well, having had made use of Apple's security guidelines PDFs from their website. Not very long ago, I visited some "naughty" websites, and my computer "caught" something. I cannot say that it was a virus or a worm, but it DID catch something. A portion of the display (a rectangular section in the middle of the screen) went blank, and I found that I could not shut down the laptop, even using the "kill -9" routine as the root account user. Finder had been corrupted (in memory only, praise bob). I resorted to disconnecting power, AND removing the battery, which I left out for nearly 2 hours (to make certain that all its' memory had "zeroed out". When I replaced the battery, reconnected the power cord, and booted up,, I found that all appeared to be normal. I immediately downloaded the most recent "daily.cvd" (see above), and scanned the entire hard disk for viruses. None were found, and since that time I am confident that "whatever" struck my laptop was only able to affect program memory. I also use a free version of "Tripwire", and it could not find any files that had become corrupted. (This is not a fast process, I can assure you of that!) I am convinced that I was hit by a virus or worm, and that I was able to expel it from my computer. Unfortunately, Apple has done a number of things to make it far easier for a virus or worm to strike the Mac platform. Switching to the i386 from the PPC was okay, except that Apple has been messing with the OS in bad ways: (1) changing the built-in firewall from a root-based service to an application, then (2) including Google verification in Safari without allowing the user any means of altering or disabling this feature, AND then (3) beginning to incorporate Win32 compatibility with the inclusion of .NET libraries. The Mac OS X platform has not become less vulnerable, but way more so (IMHO).

    94. Re:Safe... until by Anonymous Coward · · Score: 0

      You are equivalently saying if you had HIV that you would go have unprotected sex and tell your partners "It's your problem, not mine" if they get AIDS.

      You suck.

    95. Re:Safe... until by Anonymous Coward · · Score: 0

      The plural of virus is viruses.

    96. Re:Safe... until by Anonymous Coward · · Score: 0

      Bullshit. I wrote such an app, which would allocate 1 byte at a time, indefinitely. Once it reached the memory limit, the kernel (Linux) killed it, displaying the words "Process killed", or something to that effect. Dumbass.

      (I'm running slackware 12.1 btw)

    97. Re:Safe... until by TheNetAvenger · · Score: 1

      Even after the user starts clicking on things, Macs are generally safe. The user must explicitly punch holes in their system to create most vulnerabilities.

      Um... No...

      All OSes now have UAC and *nix root priveledge request prompts. It is now the same for users on these OSes 99.9% of the time. Macs have nothing 'better' than anyone else in this area.

      As for 'needing the user to punch holes', again this is false. If you even consider non-OS X items a Flash or Java exploit would hit the user quite easily. In fact if done via the browser would hit OS X easier than it would Vista, as IE on Vista runs with lower privledges than the user and can't even mess with user files, let alone system files, so JAVA or Flash launching from IE get the same low level of permissions.

      (This is where I say, Firefox needs to move to a low security mode of operation to again be as secure as IE, and that is very sad for me to say.)

      Mac users that insist OS X is more secure or safe are either ignorant about security or so smug they assume they are under the radar.

      WindowsNT during the 90s only had one or two Anti-Virus products even made for it, and it was considered to be above viruses in contrast to Win9x.

      This is EXACTLY like OS X is now, as it was fairly tight for the timeframe, and under the radar of hackers.

      Guess what, when XP replaced Win9x, it was no longer under the radar and even NT's security based core couldn't help the debacle that was to come.

      Apple is already now releasing more security updates by a factor or 20 to 1 compared to Vista, and with a bit more market share and the evil eye of a few good hackers will crumble the Mac user base a few times before Apple pulls their users out of the hole, a repeat of what happened to MS and Windows is to come for Apple and OS X.

      Of course the world will have to rely on non-Apple sources, as Apple will continue to delete all evidence of these attacks from their forums and message boards, as they do today.

      And yes they do occur today, and yes Apple deletes the hell out of them to keep their 'image' as secure...

      It needs to happen to a few journalists before they will get printed and not hidden behind the Apple 'aluminum' curtain.

    98. Re:Safe... until by Anonymous Coward · · Score: 0

      If I had a mac, I would tell people to stick to windows. Every convert is one step closer to making macs important enough to write viruses for. Security through obscurity is bs from the get-go.

    99. Re:Safe... until by Graff · · Score: 0

      ..and playing games. Oh, wait.

      That's why it's nice that all Macs made now can run both Windows and Mac OS X. There's a game only out for Windows? Boot into Windows or run Parallels under Mac OS X. You get the best of both worlds in one machine.

    100. Re:Safe... until by Bullet-Dodger · · Score: 1

      It was the first thing I changed after getting my mac. I have not needed to login to my admin account besides the first time I set it up. When I need to do something that requires the privileges, it just asks for the user/pass.

      That's exactly what an admin account does. Are you sure you know what the hell you're talking about?

    101. Re:Safe... until by therealmalcontent · · Score: 1

      But they won't be right-clicking on things!

    102. Re:Safe... until by twitchard · · Score: 1

      Most 'viruses' for Linux are theoretical and don't even come close to posing a legitimate threat to anybody. If you check out the list of viruses currently going around at http://www.wildlist.org/ you'll see that there are, when it comes down to it, zero real Linux viruses. And though a simple script can crash any system, a malicious person attempting to hack through security to place the script is a very different story.

    103. Re:Safe... until by dhavleak · · Score: 1

      Yes and no -- it depends.

      The pretext to this is that you're in the market for a new computer. It's conceivable that for the price of a Mac you will get a PC + Vista + AV that meets your needs. Of course there are other factors (like you might just want a Mac no matter what -- or you need to run xyz program that's only available on one of these options), but I'm just pointing out that moving to a Mac for security purposes isn't an automatic choice.

      Also note that the very nature of malware is changing (think cross-site scripting attacks and such). These kind of attacks might not necessarily care what OS you're running -- they might just succeed against say IE, or Firefox on any OS, or say Safari on whatever OS, or even all of them..

    104. Re:Safe... until by lgw · · Score: 3, Insightful

      You're a botnet owner. You hijack a web site and add a flash trojan to the banner add. Flash exploits exist for most OSs, but you only get 1 payload - you can affect just 1 kernel. Which payload do you choose? As long as one kernel has more that 50% market share, no one will ever attack anything else.

      My 64-bit Windows home OS has never been (successfully) attacked, for the same reason a Mac will never be (successfully) attacked any time soon: the only payload is the 32-bit NT root kit. Don't kid yourself that it's somehow "impossible" to attack OSX and gain root from a user-mode process - that's been demonstrated repeatedly in competitions and the like. It's just not a threat in the wild, because viruses (etc) are a *business* now, and so are engineered to maximize returns.

      --
      Socialism: a lie told by totalitarians and believed by fools.
    105. Re:Safe... until by Lars+T. · · Score: 1

      Citation needed. Where do you get the number that there were 2000 Mac viruses in the wild in 2002? You need something to back up that claim. I've had Macs for 12 years and haven't worried about viruses since about the first year.

      If you count in Office/Word/Excell Macro viruses (the ones that work in the Mac versions of those apps), that number may be right.

      --

      Lars T.

      To the guy who modded me down from perfect to terrible Karma - Apple haters still suck

    106. Re:Safe... until by drspliff · · Score: 1

      Well, after installing our OSX anti-virus product none of our customers computers have been infected by anything, perhaps I could also interest you in our range of tiger repelling medallions, not one tiger attack in over 20 years.

    107. Re:Safe... until by dhavleak · · Score: 1

      Not to cause a flame war ... The Darwin kernel is open sourced, and has active development teams both inside and outside of Apple ... The same CANNOT be said for Microsoft software.

      You sure about the flame war part? :)

      Anyway - you're essentially equating open-source development with secure development practices, which is a fallacy -- you can be any combination of open/closed and secure/insecure. I have absolutely no insight into the security aspects of Apple's development processes whether it's banned APIs, developer education, security audits (code audits), actual attacks, static source analyzers or what have you -- so I wouldn't call the OS-X kernel insecure. At the same time, open source development by itself isn't enough for me to call it secure.

    108. Re:Safe... until by blai · · Score: 1

      well yeah! it JUST works!

      --
      In soviet Russia, God creates you!
    109. Re:Safe... until by jhol13 · · Score: 1

      it will have viruses

      When, or rather if, that day arrives I have had at least twenty, yes 20, years of virus, anti-virus and worry free surfing.

      And counting.

    110. Re:Safe... until by CFBMoo1 · · Score: 1

      Maybe there aren't many (or any) viruses, worms and whatnot targeting the platform today, but they will come, and when they arrive, it will be a good idea to have some protection installed beforehand.

      People have been saying the same damn thing for 8 years. "Just wait, one day OS X will get a virus. You'll see."

      Ok, well, after hearing this for almost a decade I'm kinda starting to get skeptical.

      That is because they are on the Duke Nuke'm release schedule for Macs.

      --
      ~~ Behold the flying cow with a rail gun! ~~
    111. Re:Safe... until by FictionPimp · · Score: 4, Informative

      Well, as my Admin account, I can download an application and drop it in my Application folder. No password is required. Now I can run that application and it can access /Library /Applications, my files, etc. It would stand to reason it could also replace apps in the /Application folder with compromised ones without issue.

      With my non-admin account, it prompts for an admin password before letting me copy files in to the /Applications folder.

      In fact from apples own security guidelines document they state,
      "Each user needing administrator access should have an administrator account in addition to a standard or managed account. Administrator users should only use their administrator accounts for administrator purposes. By requiring an administrator to have a personal account for typical use and an administrator account for administrator purposes, you reduce the risk of an administrator performing actions like accidentally reconfiguring secure system preferences."

      Seems to the the admin account lets you do some pretty dangerous things without realizing they are dangerous. Like maybe run a script that installs a comprised version of a application.

      This is different then ubuntu. In ubuntu you can not simply copy files from your desktop into /usr/local/bin and let anyone run them. You have to specify your password.

      Running as an admin is OSX is not a good practice.

    112. Re:Safe... until by FictionPimp · · Score: 1

      Read my comment to Bullet-Dodger below.

    113. Re:Safe... until by LtGordon · · Score: 1

      Honestly, you have to look at the target audience that this information is going to reach. Try explaining to Average Joe that, while there aren't any viruses aimed at Mac to speak of, your Mac can act as a carrier for Windows viruses, which isn't good for you, but definitely bad for Windows computers that you might theoretically interact with. Odds are good that all they will get out of that is "Macs can sort-of get Windows viruses".

      It's easier to just keep a distance and say "nope, no need for antivirus, move along". Besides, the more infected Windows machines, the greater the market pull towards Apple. It's a win-win for them, really.

    114. Re:Safe... until by Anonymous Coward · · Score: 0

      lol. the Windows OS doesn't come with viruses and malware as you state. Usually it is the users fault when they do get a virus on a windows box, I have not had a virus problem on any of my windows boxes for about 10 years (and it was my fault when I did.) It's not even really a bother to avoid if you are a half way intelligent user. If you have a clue, there really are not problems with windows and viruses, if you don't know how to surf the web without getting infected, than it is a good idea to use a Mac, definitely more idiot proof there. This works out well because these users are the same ones who have no interest in customizing their rig, upgrading it, personalizing it, over-clocking and water cooling it etc. They really don't need a PC, a Mac is definitely best and safest for your average non-computer using user.

    115. Re:Safe... until by Repossessed · · Score: 1

      The user must explicitly punch holes in their system to create most vulnerabilities.

      Like by installing Quicktime. Wait...

      Macs don't get viruses because they aren't common enough for people to bother, as they become more common, this may change, very quickly, especially given Apple's track record on patching holes and bugs in its application/plugin level products.

      --
      Liberte, Egalite, Fraternite (TM)
    116. Re:Safe... until by pseudonomous · · Score: 2, Insightful

      Yeah, on a mac the viruses just WORK, you don't have to worry about finding drivers or system crashes to prevent viruses from running optimally, and they offer easy drag and drop installations, right?

    117. Re:Safe... until by pikine · · Score: 1

      What about the "ulimit" command?

      --
      I once had a signature.
    118. Re:Safe... until by Anonymous Coward · · Score: 0

      Should they get a powerdrill to punch them?

    119. Re:Safe... until by ToasterMonkey · · Score: 1

      ROFL, killed it, and how many _other_ random processes beforehand? I don't think modern Linux kernels do this any more.
      Or do you mean your process died on it's own from lack of error checking when a memory allocation finally failed?

      Linux certainly makes no assumptions about the _intent_ of a process using lots of memory. I can't think of an OS that would for that matter.

    120. Re:Safe... until by Khyber · · Score: 1

      "I would guess that the vast majority of those 30 million macs are laptops."

      Hooray! A MOBILE botnet that I can toy with and make ever so much harder to trace as the unwitting user carries their laptop everywhere and opens it up at every Starbucks, McDs, and any other place with open wifi.

      --
      Still waiting on Serviscope_minor to wake up to fucking reality and realize that Jessica Price isn't going to fuck him.
    121. Re:Safe... until by Anonymous Coward · · Score: 0

      Ok, so for starters- the mac virus you found was for system 4.1 and higher. MacOS X is not the same OS. I'm not saying there are no MacOS X virii, I'm just pointing out you were only able to find a (15-20?) year old virus.

      Second - while your php script is "effective" - in order for it to work on a MacOS X system the user would not only have to manually install the payload (admin access required) but would also have to manually start web sharing, and then point their browser of choice to the loopback.

      Because you can't do any of that without supplying an admin password, it's only possible to do as a trojan - which, while plausable, is not probable.

    122. Re:Safe... until by Anonymous Coward · · Score: 0

      I don't agree. Mac AV software was valuable in the old days of floppy disks when you could be infected with a "true" virus by running a foreign program, but the fact is there haven't been any wild exploits on a Mac for years. AV software exists for the Mac, but it doesn't protect you against actual threats, and the odds are excellent that if a threat does appear, none of the Mac AV programs will detect or block it in any way.

      I like to think of Mac AV programs as being like small-town sheriffs in the Wild West. You might keep them around for a sense of security, but in a crisis you can't actually count on them for very much.

      If you want to get serious about Mac security, the first step is to partition your hard drive so / is on a read-only volume and /var and /Users are on a separate volume, and boot to single-user mode if you want to do upgrades. That will be a minor inconvenience for you, but give you better protection against worms and viruses than any anti-virus program anywhere.

    123. Re:Safe... until by Anonymous Coward · · Score: 0

      Terms and Conditions apply.

    124. Re:Safe... until by Anonymous Coward · · Score: 0

      He's correct. It is only virii when it's a biological (OK, I know viruses aren't biological, but I'm not totally sure what they are in real life) virus.

    125. Re:Safe... until by fatalGlory · · Score: 1

      Hmmm, hadn't heard of that before. Seems like it would do the job.

      --
      Censorship is the opposite of education. If neo-darwinism were defensible, people would not need to try and censor ID.
    126. Re:Safe... until by wild_quinine · · Score: 3, Insightful

      In regards to spreading Windows viruses yeah I feel bad for Windows users but I won't spend my own money and processor cycles on worrying about their systems. If they want to protect their systems then they should take steps to protect themselves. They could also dump Windows and get an operating system that isn't so ridden with viruses and malware. That's their own choice and problem, not mine.

      To paraphrase: I'm one of those lucky people who's immune to AIDS. I just fuck anything. I mean, sure, I can carry AIDS, and I can pass it on. But since I can't get it, it's no problem of mine. The responsibility for that lies completely on the other side of the fence. Hey, but I've run out of posting time - another orgy to attend.

    127. Re:Safe... until by ernst_mulder · · Score: 1

      The administrator password prompt needs to change but for another reason in my view.

      It's just too easy to fake one. And by reflex anyone will type in their administrator password without thinking. Malware writers could easily make use of that (and I'm still surprised why they don't). For instance simply hibernate in the background without root privileges and wait until it sees an Installer running and then prompt for an administrator password.

      What I would like to see is a password prompt that can be verified as being genuine. I have no idea however how that could be accomplished.

      Ernst.
          >

    128. Re:Safe... until by Weedlekin · · Score: 1

      "they do have huge developers constantly adding features"

      As president of the International Council For Being Offended On Behalf Of Everyone, I am haughtily informing you that those who don't want to be accused of blatant hugeism should use the more politically correct "circumference-challenged" term when referring to larger than average people. Please bear this in mind when posting in the future, because developers do after all have feelings that can be hurt just like everyone else.

      --
      I'm not going to change your sheets again, Mr. Hastings.
    129. Re:Safe... until by Anonymous Coward · · Score: 0

      That's one way of looking at it. Another way is hearing news that the East is infected with a certain illness that can't 'currently' affect Westerners. However, like with any viruses, they mutate constantly and can eventually cross over. So, in that sense, it can make sense to protect yourself with a vaccine.

      And like vaccines for humans, you can't actually produce them in advance for some unknown future mutation.

      So the only thing you actually get is the virus scanner infrastructure (hooks into the system for on-access scanning etc.) with an empty list of virus definitions. While it makes sense for the software company to create that infrastructure ahead of time in order to have it available when needed, it makes no sense whatsoever for the customer to buy it until it actually does something useful.

    130. Re:Safe... until by konohitowa · · Score: 1

      Umm... and PCs had viruses back in the System/360 days. And we all wrote Cobol back then. I see your point.

    131. Re:Safe... until by Weedlekin · · Score: 1

      "Running as an admin is OSX is not a good practice."

      An excellent piece of advice. IMO one of the flaws with OS X is the fact that the installer doesn't automatically set up a standard user account in addition to the admin account, and then lets the admin account be used for automatic log-ins when the machine boots.

      --
      I'm not going to change your sheets again, Mr. Hastings.
    132. Re:Safe... until by nomad-9 · · Score: 1

      It has nothing to do with installation base and far more to do with idiot coding practices.

      It has to do with both. Virus writers target what is the most used, for max impact. Win over Mac. MS Outlook over other mail clients. It does not mean that other mail software is "secure". As for Apache installs, getting ass-raped or not has also to do with the quality of sysadmins and how fast they update security patches.

    133. Re:Safe... until by Anonymous Coward · · Score: 0

      The user must explicitly punch holes in their system to create most vulnerabilities.

      Ohhh really?

    134. Re:Safe... until by shutdown+-p+now · · Score: 1

      Puh lease. For years there were far more Apache installations and they didn't get ass-raped the way IIS did/does.

      Care to show the stats? Number of exploits on Apache vs IIS?

      Though even that is rather irrelevant, as we're talking about viruses, not arbitrary exploits. Viruses always required an element of human interaction in one way or another.

      It has nothing to do with installation base and far more to do with idiot coding practices.

      Can you specifically identify some "idiot coding practices" that made IIS less secure than Apache?

    135. Re:Safe... until by shutdown+-p+now · · Score: 1

      You know, it had been ages since unsigned ActiveX controls weren't ignored by IE outright, and even signed require 2 prompts to click through.

    136. Re:Safe... until by shutdown+-p+now · · Score: 1

      I think you are confused about what an "Admin" account is on Mac OS X. It's not really an admin account, but a user that through sudo can temporarily have super-user access. There is no need to create separate account because without an explicit user action, the account has no special privileges. As a matter of fact, there is no root user unless you go out of your way and adding a root user is actually less secure. It's a UN*X thing, not a Mac thing and debian/Ubuntu work exactly the same way.

      It's not even a Unix thing anymore... Vista also works exactly the same way.

    137. Re:Safe... until by mgblst · · Score: 1

      Look I have a Mac OS virus right here. I will send it to you. Please double click, clikc past the internet warning, drag to application folder, enter your password, and then run it. See, anyone could get infected.

    138. Re:Safe... until by skiman1979 · · Score: 1

      Seems to the the admin account lets you do some pretty dangerous things without realizing they are dangerous. Like maybe run a script that installs a comprised version of a application.

      This is different then ubuntu. In ubuntu you can not simply copy files from your desktop into /usr/local/bin and let anyone run them. You have to specify your password.

      Running as an admin is OSX is not a good practice.

      Running as an admin in any OS is not a good practice.

      You can log in as root in Ubuntu. You just have to create a root password first. Either that or kill the X server and then 'sudo startx' from the console. You could also 'sudo bash' and then trash your system to your heart's content :)

      I've never actually used OS X, but if it allows you, out of the box, to log in as an admin user (rather than simply escalating privileges on a per-process basis) then Ubuntu sounds better in that regard.

      --
      Having a smoking section in a public restaurant is like having a peeing section in a public swimming pool.
    139. Re:Safe... until by Paradise+Pete · · Score: 1

      I am fairly confident that when/if OS X has a majority market share as a consumer OS, it will have viruses and other forms of malware.

      Of course it will. But they won't be the kind that run silently for months, cranking out spam without detection.

    140. Re:Safe... until by hmar · · Score: 1

      Unfortunately, the AV out right now won't protect a mac. It is designed to catch Windows bugs, and when they come for the Mac, even those with AV will be unprotected.

    141. Re:Safe... until by tehcyder · · Score: 2, Funny

      I could have posted an eloquent, well thought out response

      That's sort of frowned upon around here.

      --
      To have a right to do a thing is not at all the same as to be right in doing it
    142. Re:Safe... until by LanMan04 · · Score: 1

      IIRC, the way to tell is if the word is Latin or Greek rooted.

      If it's Latin rooted, you do the "i" thing. If it's Greek rooted, you do the "ses" thing.

      E.g. "octopus" is Greek rooted, so it's "octopuses", not "octopi". Quoth wikipedia:

      "The Oxford English Dictionary ... notes that octopi derives from the mistaken assumption that octps is a second declension Latin noun, which it is not. Rather, it is (Latinized) Greek, from oktpous (), gender masculine, whose plural is oktpodes ()."

      So maybe "octopodes" is most accurate? Eh, I'm hanging up my amateur pendant hat.

      --
      With the first link, the chain is forged.
    143. Re:Safe... until by Anonymous Coward · · Score: 0

      It would also be nice if you were prompted before every app was allowed to access the network/internet. And I do mean every app - including things that access DNS etc !

      Obviously the system would need to "remember" which apps you always want to allow access but running Zone Alarm on a Windows box is a simply splendid way of finding virus/worms etc.

      e.g. WTF is "xyz.exe" and why is it trying to access the internet ?

    144. Re:Safe... until by bytethese · · Score: 1

      PS3? Oh wait...

    145. Re:Safe... until by Anonymous Coward · · Score: 0

      You're making the mistaken impression that a Mac convert / user is the kind of person who can shut the fuck up about what type of computer they use.

    146. Re:Safe... until by Anonymous Coward · · Score: 0

      There are more computers out there running Mac OS X than there ever were in the old DOS and Windows 3.1 days, and they are far more interconnected - most being connected to the internet, many on always-on broadband connectioins - than they were in those days, and yet there are no Mac OS X viruses in the wild while there were so many DOS viruses

    147. Re:Safe... until by Anonymous Coward · · Score: 0

      An infinite loop eats memory. You didn't discover the holy grail.

    148. Re:Safe... until by mdwh2 · · Score: 1

      No, he's quite right by saying it's what most programs run on. The fact that you can still do a range of tasks on a Mac, Amiga or whatever else doesn't change that point.

      Whether it's a useful statistic or not is another matter. I guess one point is that I find it handy that whenever I come across a new program, it's most likely to run on my platform. Yes, there might exist a similar program for a niche platform - in which case, it's extra effort to find it - or there might not (you only list the mainstream obvious computer uses, which is far from the full list of tasks that programs that out there can perform).

    149. Re:Safe... until by MindlessAutomata · · Score: 1

      Nope.

    150. Re:Safe... until by mdwh2 · · Score: 1

      By that reasoning, you should advocate a Commodore 64. You won't get any viruses from the Internet, because nothing new runs on it anymore anyway. Or perhaps not use a computer at all - then you certainly won't run any viruses.

      The point is that running software (even if it includes viruses) is still better than not running software. It seems rather odd to me to suggest that one should protect yourself against viruses by reducing your ability to run any kind of software!

      (I've never had a virus in almost 10 years of Windows use, btw. Nor have I ever spent any money on anti-virus software.)

    151. Re:Safe... until by arminw · · Score: 1

      ...As of right now both cases will simply show a nondescript "enter admin password" prompt, which is insufficient....

      It is sufficient if the user doesn't know what that password is. This can easily be done in a business situation where only the boss and/or the IT person has that password. In a family, the head of the household could be that person. That would prevent kids and their friends from installing anything that requires admin.

      --
      All theory is gray
    152. Re:Safe... until by mdwh2 · · Score: 2, Insightful

      In which case, you are then vulnerable to viruses (along with all the other faults that Mac users claim Windows has).

      I don't understand this argument - saying Windows is crap, but then saying Macs can avoid the failings of OS X by running Windows.

    153. Re:Safe... until by mdwh2 · · Score: 1

      On the other hand, MS's track record has shown numerous ways for software to sneak onto your machine without user intervention whatsoever.

      This was only true in the past though, and has changed with Vista, if not earlier (although oddly people now bash Vista for its careful prompting of the user - it seems that Microsoft can't win). And even in the past, most viruses on Windows still required user ignorance (running dubious email attachments, or clicking "Yes of course I want to install this" on some dodgy website).

    154. Re:Safe... until by Graff · · Score: 1

      In which case, you are then vulnerable to viruses (along with all the other faults that Mac users claim Windows has).

      I don't understand this argument - saying Windows is crap, but then saying Macs can avoid the failings of OS X by running Windows.

      Oh, if I dual booted then I'd run every kind of protection I could for the Windows partition. I'm not saying that antivirus is completely useless, just that right now it's not useful for the Mac OS.

      I'd only be running Windows to shore up the one serious flaw I find in running Mac OS X, a shortage of games and some specialized software. Other than that my Windows installs lie idle.

      Honestly I don't think that Windows is total crap, just that overall I like Mac OS X much better. Both operating systems have their shortcomings. If I can fix a major Mac OS X one by dual booting then I think that's a good solution, at least until more game manufacturers get on board with Mac OS X - something that has been happening lately.

    155. Re:Safe... until by bennomatic · · Score: 1

      Also, I have no idea why your well constructed post is -1 Troll and the lazy troll you are replying to is +5 Funny.

      Well, to use a lazy troll response, "You must be new here!" Moderation by the masses is a fickle mistress. It's OK by me, though, I knew I was going to lose some karma with that post. Thanks for the compliment on my construction!

      --
      The CB App. What's your 20?
    156. Re:Safe... until by bennomatic · · Score: 1

      While it is possible for a mac user to write a troll about macs, it's also possible for someone who doesn't like trolls to troll. I am guilty of that latter charge. I proffer my apologies and hope there has not been any lasting harm done.

      --
      The CB App. What's your 20?
    157. Re:Safe... until by cslax · · Score: 1

      You're good, don't worry.

    158. Re:Safe... until by Anonymous Coward · · Score: 0

      yeah I feel bad for Windows users but I won't spend my own money and processor cycles on worrying about their systems

      Me too! My computer sends out 1 million spam emails with virus attachments daily, but since I don't use any email, it's up to the other people to filter it out.

      To quote you, "That's their own choice and problem, not mine."

      So sending viruses to other people is somehow not your fault? Listen buddy, you send me anything with a virus or other malware, regardless of what system it targets, and things will not go well for you.
      That's like saying "Well I have the Clap, but I'm just a carrier, so to hell with the Women I fuck, it's their own fault".

      Asshole.

    159. Re:Safe... until by Anonymous Coward · · Score: 0

      That's true (http://www.linguistlist.org/issues/15/15-1540.html),

      But, priceless coming from a guy whose nickname, if referring to himself and no other, should really be MindlessAutomaton, not MindlessAutomata. Go back to Latin class!

    160. Re:Safe... until by Deekin_Scalesinger · · Score: 1

      A shame - I used to be an Apple Genius and I never once heard that advice dispensed. This is in Boca Raton - sounds like YMMV at your local store.

      --
      "As the intrepid kobold companion continues his journey, he begins to wonder... if priests raises dead, why anybody die?
    161. Re:Safe... until by Anonymous Coward · · Score: 0

      In regards to spreading HIV yeah I feel bad for other people but I won't spend my own money and time worrying about their bodies. If they want to protect their bodies then they should take steps to protect themselves. They could also dump me and find someone that isn't so ridden with viruses and malware. That's their own choice and problem, not mine.

    162. Re:Safe... until by Graff · · Score: 1

      My thoughts exactly. It should be up to everyone else to protect themselves so that I'm protected by virtue of their diligence.

      I mean, I don't wear condoms because everyone else has been told to protect themselves with birth control and prophylactics. I have nothing to worry about, right?

      Ya know, it's funny how there are all these people who are offended by the notion that I won't waste my money and time on a problem that doesn't affect me one bit. Well here's a clue, I'm not passing on any viruses in the first place.

      • I'm running Mac OS X and there are no viruses that can infect my system right now which means I can't be a carrier. If that ever changes then I'll re-evaluate the situation.
      • I don't forward attachments so I'm not passing on viruses that way.
      • I don't use Microsoft Office so there is no chance of VBScript macro viruses.
      • Pretty much every service is shut down, I'm behind a firewall, and I don't run as an admin user, plus I regularly monitor my machines for any intrusion so my risk of being part of a botnet is pretty slim.

      I don't feel the need to pay blood money to some antivirus company for the privilege of them wasting processing power and memory on my home machines. This is not being irresponsible, this is being smart. To me the real fools are the people who happily waste their money on cleaning up infections after the fact rather than taking sensible steps to prevent infection in the first place.

    163. Re:Safe... until by j-beda · · Score: 1
      I've never actually used OS X, but if it allows you, out of the box, to log in as an admin user (rather than simply escalating privileges on a per-process basis) then Ubuntu sounds better in that regard.

      The admin user group gets write privileges for the /Applications folder and also has sudo abilities, but does not have any abilities beyond that, so it is not equivalent to being looked in as root - it is much closer to the model of escalating privileges on a per-process basis. But with that said, it is slightly more secure, and slightly less convenient, to use a non-admin account for day-to-day activities.

    164. Re:Safe... until by LordKronos · · Score: 1

      If that "cured" your RLS, then I'm sorry to inform you that you didn't have RLS. What you said is idiotic. It's like telling someone with a pull hamstring that they are complaining about nothing, because when you pulled your hamstring, all you did was sit down for 10 minutes and it was all better. Just because you have a symptom that sounds like the name of a condition doesn't mean you have that condition.

      You are obviously showing your ignorance. Just because you never heard of RLS before a few years back doesn't make it a made up condition. There have been numerous studies on the condition going back to the 1600s.
      http://en.wikipedia.org/wiki/Restless_legs_syndrome#History

    165. Re:Safe... until by Aram+Fingal · · Score: 1

      Let me add to that... There are not well established procedures to remove viruses on a Mac either. My institution recently went through an evaluation of AV vendors. We grilled each one on various topics, including a few things related to Macs since we have about 20-30% Macs on our network. One thing was an incident where Sophos AV did some damage trying to remove an OS X system file which was incorrectly identified as a virus. The Sophos guy said that they try to do the best that they can with lab tests but it's not the same as having experience with real viruses. Since there isn't a significant amount of any kind of malware for OS X, they don't have much to go on.

    166. Re:Safe... until by Aram+Fingal · · Score: 2, Funny

      Microsoft generally (contracts?) out chunks of coding.

      It seems like more often they see some piece of software that they like and buy the company that wrote it.

    167. Re:Safe... until by cslax · · Score: 1

      I have heard this about 3-5x at 2 different Apple stores by me. Not sure if it's new training, or what.

    168. Re:Safe... until by Anonymous Coward · · Score: 0

      On the other hand, MS's track record has shown numerous ways for software to sneak onto your machine without user intervention whatsoever.

      While this may be true to a certain extent, I have several Windows machines, one of which has no AV software. I have never had a virus on that system.
      Before anyone says "well, without AV how would you know" I do occasionally mirror the drive out, and the system I keep my mirror images on does run scans on the images, so yes it has been scanned.

      In my personal experience, 99% off all Windows infections (on home machines) are caused by users doing dumb things like running the "fr33pr0n.exe" attached to the Penis Pill spam emails. However, it is true that Windows machines are more vulnerable than other OS's to user error infecting them, for a variety of reasons.

      The reason why market share matters is only partly because the virus makers like a large target- The primary reason why market share matters is because most of the complete idiot users are on Windows systems, not Mac, Linux, etc.
      Although I have seen quite a few idiot Mac users... One of whom is a personal friend of mine.
      He had trouble with a DNS poisoning exploit that resulted in sort of a browser hijack, and tried to convince me it was the ISP's problem. He was using some fly-by-night 3rd party external DNS server, which had been poisoned, which then of course poisoned his own DNS cache, which directed all his inquiries to various phishing & porn sites. I changed his DNS to his ISP's servers & flushed the cache, and like magic the problem was solved.
      I guess this is just more proof that any OS can be vulnerable to user stupidity, especially when that user opens a door up to exploitation.

      The problem I have with the constant message that "Mac's don't get viruses" is that while they might not catch viruses in the pure sense, they are capable of being exploited, and the marketing campaign is giving Mac users a false sense of confidence.
      In the example I gave above, my friend was really, really mad- he had the idea that his Mac was some magical, bulletproof box that could take the electronic equivilant of a Nuclear strike & still stand up... he even thought he was immue to DDOS attacks (until I showed him otherwise ;).

    169. Re:Safe... until by Anonymous Coward · · Score: 0

      This must mean that Windows is not a piece of crap, right?

    170. Re:Safe... until by mdwh2 · · Score: 1

      If I can fix a major Mac OS X one by dual booting then I think that's a good solution

      I think that dual booting is a very bad solution. If I want to play a game or run this application, then I have to shut down all my applications, reboot, then afterwards, reboot again, and reopen all my applications. If I only want to play a game for a few minutes, it's too much hassle. If I'm playing a game for a long time, or running an application, then I want to have email, IM, web browsing and so on accessible in case I want to quickly check something, or someone contacts me, in the meantime. I also don't want to have to interrupt any background tasks (downloading, or whatever else).

      This might have been acceptable in 1990 when you typically had to reboot between games, but not now (and even in 1990, I multitasked between several applications).

      I use an OS that serves all of my needs, and doesn't need me to dual boot into another OS because it isn't up to the job.

    171. Re:Safe... until by thtrgremlin · · Score: 1
      Gotta agree your post is MUCH funnier than the parent. Either the modder didn't read your whole post, or they didn't get it. Not to mention I really thought the

      if you're going to pick a fight, pick a freakin' fight! Now where did I put that Zoloft?

      was really the give away for the slow people, but oh well. Some people arn't loosers, and some don't rtfc when they mod. Oh well.

      --
      Want Big Business out of government? Take away the incentive and start by getting government out of big business!
    172. Re:Safe... until by riggah · · Score: 1

      I was actually commenting on the elitist tone of your post, not your security practices.

      I take steps to avoid affection, too. These steps include practices such as yours. Prevention is the best defense, right? However, I'm not about to claim that any of the 3 OSes I run are completely impenetrable and invulnerable whether the system is Windows, OS X, or a flavor of Linux. To make such a claim would be arrogant, not sensible.

      But, hey, we are talking about Mac users; arrogance is part of Apple's marketing strategy.

      Safety and security is everyone's problem, not everyone else's.

      I also think that slashdotters tend to forget that they are atypical computer users. You may have your comp locked down, but for every one of you there are 100 other people who wouldn't even have a clue what you're talking about, let alone "dump Windows" and fork out thousands of dollars for OS X. And for every one of you there are 100 people who are terrified of Linux.
      Just because the typical user isn't as "geek" as you doesn't mean they're fools; it just means you're a geek. And I use the word in the nicest possible way. It's a compliment, actually.

      Incidentally, I run AV on my Windows box (not Linux or OS X) because Windows is a target; I've never had an infection, yet I still run an AV program. Strange, huh?

    173. Re:Safe... until by bennomatic · · Score: 1

      Thank you. Um, I'm here all week!

      --
      The CB App. What's your 20?
    174. Re:Safe... until by Graff · · Score: 1

      I think that dual booting is a very bad solution. If I want to play a game or run this application, then I have to shut down all my applications, reboot, then afterwards, reboot again, and reopen all my applications. If I only want to play a game for a few minutes, it's too much hassle. If I'm playing a game for a long time, or running an application, then I want to have email, IM, web browsing and so on accessible in case I want to quickly check something, or someone contacts me, in the meantime. I also don't want to have to interrupt any background tasks (downloading, or whatever else).

      Or you can just run Parallels or any one of the several programs that let you run Windows binaries directly under Mac OS X, no need to reboot at all.

      I use an OS that serves all of my needs, and doesn't need me to dual boot into another OS because it isn't up to the job

      It's unfortunate that there are game programmers out there that only program for Windows. That doesn't mean that Mac OS X "isn't up to the job", it can run games just fine, it means that sometimes programmers only target one platform. There are tons of games out there that are only for the Wii, does that mean that the XBox "isn't up to the job" to run them?

      There are things that Mac OS X does better than Windows, just like there are things Windows does better than Mac OS X. Fortunately my Mac OS X box can run both so I get the best of both worlds.

    175. Re:Safe... until by dust11 · · Score: 1

      That script was running in PHP, not Firefox. Though your point still stands, kill PHP.exe and the system stabilises. Also, Firefox is designed to run so that only one core is used up at a time to increase stability, henceforth running an endless loop in javascript will only crash the browser. PHP on the other hand, I would assume uses multithreading as it is server side software designed to generate a page as fast as possible. When all your cores are in use, it's a lot harder to kill a task.

    176. Re:Safe... until by jbezorg · · Score: 1

      I completely agree. As soon as you say (with some certainty) that your OS is "safe", you're proper fucked.

      OSX.RSPlug.E Trojan Horse Discovered Dec. 2 2008

      --
      I've lost all my marbles except one & It's fun to test angular & centripetal acceleration in my skull
    177. Re:Safe... until by mdwh2 · · Score: 1

      Running applications through parallels is much better than dual-booting, I agree, although I'd still be curious to know how well the integration is? (E.g., how well does copy/paste or drag and drop between apps work, can I rearrange windows from different OSs, and how well do the filesystems work together?)

      Plus there is the cost of both Parallels (not to mention buying two OSs rather than one).

      There are tons of games out there that are only for the Wii, does that mean that the XBox "isn't up to the job" to run them?

      If my interest was that I wanted to run a game that was only available on Wii, then yes, the XBox wouldn't be up to the job for my needs.

      There are things that Mac OS X does better than Windows, just like there are things Windows does better than Mac OS X. Fortunately my Mac OS X box can run both so I get the best of both worlds.

      Fortunately for me, Windows is up to the job for all my needs. It may or may not be true that OS X does a few things better than Windows (do you have examples?), but the same could be said for AmigaOS, BeOS or whatever else. It's not that I haven't tried running multiple OSs - at some times in the past I've had several OSs installed, and still run Amiga software under Windows, just out of interest, but I find it far more productive to run an OS that can suit all of my needs, rather than having to be dependent on another one when it isn't up to the job.

    178. Re:Safe... until by RazorSharp · · Score: 1

      Admin isn't root in OS X, it's one step below. To run as root you need to use the terminal, and if you know how to use the terminal it's unlikely that your system will be compromised.

      --
      "From the depths of my skeptical and rationalist soul, I ask the Lord to protect me from California touchie-feeliedom."
    179. Re:Safe... until by Anonymous Coward · · Score: 0

      But can it play crysis?

  2. Wrong, and bad summary, as usual by daveschroeder · · Score: 5, Insightful

    First, that article had been there for quite some time (but was just updated in the last week of November, when the IT press noticed it), and was just a generic recommendation for antivirus software on Mac OS X, and pointed at some third parties who provide such software. Second, the representative did NOT say "No Antivirus Needed"; on the contrary, the representative said antivirus software offers additional protection.

    Antivirus software has always been recommended in our environment on all systems, including Mac OS X. But the very real fact is that -- for whatever reasons, many of which can be argued to no end -- Macs have far less problems with malware and serious security vulnerabilities that have a real impact on users.

    As Macs are increasingly used in mixed environments, antivirus software is always prudent, as Mac antivirus software also recognizes and captures Windows viruses in addition to Mac, stopping inadvertent spread. For example, Symantec's full array of virus definitions for Windows and Mac OS are included in the definitions on both platforms.

    Malware exists for Mac OS X (and Mac OS before), and always has in various forms. Nearly all of them -- even the recent highly publicized cases -- are trojans requiring deliberate user interaction, and have no mechanism for mass-propagation. The proliferation of hardware- and software-based firewalls and other changes have helped the situation on all platforms.

    Porn video codec trojans requiring user interaction -- even as their prevalence increases as Mac marketshare grows -- do not rise to the level of vulnerabilities potentially allowing remote administrative control of all versions of Windows without any user interaction or knowledge, nor the massive worms of old costing untold manhours and untold billions in recovery and lost productivity.

    Macs have very real security problems, and Macs have malware specifically targeted at the platform. But for a variety of reasons, Mac OS X is, in a very real sense, a more secure computing platform with respect to malware. This does not mean there are not legitimate concerns and gripes, does not mean Apple has made some poor decisions with respect to security, and does not excuse gloating fanboys.

    But frankly, Mac users always should have been running some kind of antivirus software, even if only to prevent unknowing propagation of Windows malware, and institutions such as ours have recommended this as policy for years. But since Apple updated a knowledgebase article, and since the trend has been to give an inordinate level of coverage to any Mac security issue, however minor, I'm sure this will continue to be melodramatically blown out of proportion.

    Macs have far less problems with "malware" and related issues than Windows. Not all of this is only due to marketshare. Some is due to changing strategies of malware writers, new attacks on browsers and other cross-platform applications, increased attention to network security, better user education, and number of other factors. But even as Mac marketshare grows and the platform is increasingly targeted, there still have not been any high-impact massive issues with malware and/or severe security vulnerabilities as there have been on Windows.

    Apple has come a long way on security response from its attitudes even a couple of years ago, and still has a long way to go. But if a benign recommendation for AV software get blown up into a huge issue with media extrapolating that this must mean Apple is under heavy attack, and indeed, Apple may even be aware of an impending flood of malware, I'm not surprised Apple responded by simply pulling the article altogether. The perception in the marketplace is that Macs have a lot less problems with malware. That's completely accurate. Why would Apple want that correct perception tarnished by a bunch of sensationalism?

    1. Re:Wrong, and bad summary, as usual by ericrost · · Score: 5, Informative

      Nice long post, but you have one MAJOR fallacy included:

      As Macs are increasingly used in mixed environments, antivirus software is always prudent, as Mac antivirus software also recognizes and captures Windows viruses in addition to Mac, stopping inadvertent spread. For example, Symantec's full array of virus definitions for Windows and Mac OS are included in the definitions on both platforms.

      Wrong. Totally wrong. Mac antivirus software ONLY scans for W32 viruses as those are the only payloads that there are definitions for. You run that as a dontation of CPU cycles to your clueless Windows running counterparts who can't be bothered to run an OS designed from the ground up for multi-user networked security (like Linux, BSD, or as a result, MacOS)

    2. Re:Wrong, and bad summary, as usual by maxume · · Score: 0, Troll

      Haha, Linux isn't an OS.

      --
      Nerd rage is the funniest rage.
    3. Re:Wrong, and bad summary, as usual by fermion · · Score: 1
      The reason for antivirus on the mac is the same for universal inoculation. If everything is inoculated, then the virus will tend to no longer be a problem. With Macs not inoculated, even though macs may be immune, the could be a vector.

      Because of this many, including me, have chosen not to use malware detectors, not wishing to sacrifice the money, the cycles, the headache of updating, the headache of flaky software. This does, however, leave macs as a potential target if anyone feels like taking the time to make the delivery package.

      It would be good for apple to piggy back on some general malware project, like spybot, and create a scanner for the mac. Spybot could keep the signatures up to date, and Apple could maintain the app.

      --
      "She's a scientist and a lesbian. She's not going to let it slide." Orphan Black
    4. Re:Wrong, and bad summary, as usual by daveschroeder · · Score: 1

      Wrong. Totally wrong. Mac antivirus software ONLY scans for W32 viruses as those are the only payloads that there are definitions for. You run that as a dontation of CPU cycles to your clueless Windows running counterparts who can't be bothered to run an OS designed from the ground up for multi-user networked security (like Linux, BSD, or as a result, MacOS)

      Mac antivirus software from vendors like Symantec, Sophos, and Intego all include definitions for malware specifically designed for Windows and Mac OS X, in addition to other cases (e.g., Office macro viruses). Now, if you're asserting that there are no "viruses"-proper for Mac OS X, I must say that my statement intended to simply reflect "malware" in general.

    5. Re:Wrong, and bad summary, as usual by Anonymous Coward · · Score: 0

      A long post indeed, but absolutely agree.

      Speaking of trojans/rootkits, bad news, ask your local AV-product how much of a % of the stuff out it's gonna recognize...

      Concerning Mac OS * in the business I feel that you can more easily manage (security wise) M$ clients (group policies, ...) than MACs (unless you want users to do what they want with your computer, might be a strategy as well).

      But then again I might be mistaken, anybody with insides or advice about Mac's in an enterprise (with significant deployment rate) using Mac OS X?

    6. Re:Wrong, and bad summary, as usual by ericrost · · Score: 1

      Reference please?

    7. Re:Wrong, and bad summary, as usual by radish · · Score: 3, Informative

      Wrong. Totally wrong. A cursory search of the Symantec (for example) DB shows a number of Mac specific attack signatures, including a fun looking AppleScript mass-mailing worm, an OS-level buffer overflow vuln, etc. A tiny minority of the total, sure, but not zero.

      OS designed from the ground up for multi-user networked security (like Linux, BSD, or as a result, MacOS)

      Pull the other one, it's got bells on! BSD I can maybe buy, but Linux is no more "designed from the ground up for multi-user networked security" than XP. Single root user with unlimited power and an unchangable ID? Overly coarse-grained FS ACLs? The problem with Windows isn't the design (at least, not in anything post-NT), it's the fact that most installations intentionally defeat the security model to make things "easier".

      --

      ---- Den ene knappen er powerknapp, den andre er Bender voice knapp "Bite My Shiny Metal Ass"

    8. Re:Wrong, and bad summary, as usual by Graff · · Score: 4, Informative

      Here's a better article that's less inflammatory and also contains a statement directly from Apple:

      "We have removed the KnowledgeBase article because it was old and inaccurate," an Apple spokesman said in an e-mailed statement. "The Mac is designed with built-in technologies that provide protection against malicious software and security threats right out of the box. However, since no system can be 100% immune from every threat, running antivirus software may offer additional protection."

      Sounds a bit more reasonable than the story text posted here on Slashdot.

    9. Re:Wrong, and bad summary, as usual by Z00L00K · · Score: 1

      There were MAC viruses already during the early 90's.

      But that was for the 68k architecture.

      Anyway - ignorance in the case of security issues is dangerous. But the anti-virus softwares that are around aren't really useful. They only look for known evil code.

      --
      If builders built buildings the way programmers wrote programs, then the first woodpecker would destroy civilization.
    10. Re:Wrong, and bad summary, as usual by ericrost · · Score: 4, Informative

      Ok,

      but read the DB closely:

      # Number of Infections: 0 - 49
      # Number of Sites: 0 - 2

      So, its been detected at somewhere in the area of 1 or 2 sites. Ever. Not really losing sleep over it, but I'll concede the point that there kinda sorta is one virus definition in the virus scanner.

      the second one isn't even protected against by the AV software.

    11. Re:Wrong, and bad summary, as usual by brkello · · Score: 2, Insightful

      If you really think Linux and Macs are safe because they are "designed from the ground up for multi-user networked security", then you don't know what you are talking about. It may be more secure than other OS's...but if you are connected to a network, you are not safe. Mac zealots need to stop thinking and telling other people they are immune because they use this OS. It is ridiculous and will only make it that much harder to get "clueless" Mac users to properly use their computer.

      And it isn't that people can't be bothered to run Macs or Linux. The majority of the software out there still is written for Windows. I find it amusing that the first thing most Mac users do is set up there box to dual boot Windows or set up some Windows VM. If you really want to talk about security, sit down at the grown up table and realize that there are a heck of a lot of people who use Windows. That all systems that are connected to a network are vulnerable. And that you shouldn't put down someone for their choice of OS. Each OS is a tool that can be used effectively for different purposes. It is good to have choice and if we want to secure things, then yes, it sure is helpful to have Mac users running AV and not clicking on every shady link that comes their way.

      --
      Support a great indie game: http://www.abaddon360.com
    12. Re:Wrong, and bad summary, as usual by ericrost · · Score: 1

      Oh,

      And MS Word macros have a much cheaper solution:

      http://porting.openoffice.org/mac/

    13. Re:Wrong, and bad summary, as usual by ericrost · · Score: 1

      I don't use a Mac, and I tend to look at the AV/Security "industry" as very small amount above goombas asking for "protection" money. They are leeches that are simply a result of Microsoft not designing their OS properly.

      There would be a MUCH higher payoff for having a remote code execution vulnerability exploit on a Linux server target since a large amount of very valuable data is stored on linux servers, yet none has been captured in the wild. Instead viruses continue to be written targeting a poorly designed OS to turn the clients into spam spewing zombies.

      Plus, if you want to spew spam out across the net, how about zombie-ing a server sitting on a nice piece of fiber, that's a trusted mail packet source instead of a machine sitting on at best a 1.5 Mbps shared bandwidth line that any mail server with half a brain discards the payload coming off it?

      Get your own chair at the grown up table and stop using Windows. Spam will stop, and vendors will "magically" make their software for other OS's.

    14. Re:Wrong, and bad summary, as usual by girlintraining · · Score: 1

      to your clueless Windows running counterparts who can't be bothered to run an OS designed from the ground up for

      Compared to your clueless MacOS running counterparts who can't be bothered to run an OS that has more applications, software, games, and hardware available? Oh, right... That's not important when we're comparing Apples and PCs... We should judge them based on esoteric crap like "multi-user networked security" that the average user could care less about.

      --
      #fuckbeta #iamslashdot #dicemustdie
    15. Re:Wrong, and bad summary, as usual by ThrowAwaySociety · · Score: 2, Interesting

      Nice post, but you have one MAJOR fallacy included.

      Wrong. Totally wrong. Mac antivirus software ONLY scans for W32 viruses as those are the only payloads that there are definitions for.

      Wrong. Totally wrong.

      http://www.symantec.com/security_response/threatexplorer/azlisting.jsp?azid=O

      Yes, there are fewer than a dozen OSX.* malware variatns for which definitions exist, and most of them are essentially never seen in the wild...but that's infintely more than none.

    16. Re:Wrong, and bad summary, as usual by Anonymous Coward · · Score: 0

      If the hundreds of security holes just this year including some incredibly idiotic ones are the result of well designed security from the ground up I think we all better just unplug our machines. Mac OS.X has perhaps the WORST security record of any OS on the market BAR NONE. by that I mean, amount of vulnerabilities, time taken to patch those vulnerabilities and incompetence during patching those vulnerabilities, Apple loses on all fronts. In many ways I wish people would attack it more, it is swiss cheese. Many of the virus's written for windows I could modify and have working on a Mac in under an hour, sadly though I have some ethics.

    17. Re:Wrong, and bad summary, as usual by ericrost · · Score: 1

      The average user (like say my mother this last weekend) cares a lot about paying a Norton subscription every year rather than running a system that doesn't have those problems. So she bought one of the new HP 10" netbooks and had me install Ubuntu Netbook Remix on it.

      She feels better knowing that the OS is designed securely and that she doesn't need to worry about getting more viruses and cruft on there like on her Windows computers. She specifically told me this. She is the epitome of an average user, but she knows enough to ask someone who is computer savvy when making purchasing decisions and actually listen to their advice.

      To say that the average computer user doesn't care about these things would negate the entire "security" industry as that's exactly what they prey on. The care and worry of the average user that the OS they are using was not designed securely and is vulnerable to attack vectors by people who know more than they do about the machine.

    18. Re:Wrong, and bad summary, as usual by ericrost · · Score: 1

      If that were true, someone would have taken the less than an hours time to do it as there are many more people than you, who are far smarter and more skilled, with far fewer ethical mores. I'll believe it when I see it, but then again, on that front I'm more of a curious observer as I don't own a Mac (though I do an iPod).

    19. Re:Wrong, and bad summary, as usual by Anonymous Coward · · Score: 0

      +5 Informative for something that's almost entirely false?

      Though there are a small (pretty much insignificantly small) number of Mac malware threats, they certainly exist (eg, Lamzev, RSPlug). There are a large number of Linux and Unix rootkits (presumably some of these might work on OSX if compiled for it - some are distributed as source and compiled on the target system) and a smaller amount of other malware. Mac antivirus should scan for these as well as for W32 (and W64!) threats.

      And it's not stupid to scan for W32 malware, no matter your operating system. If you receive an infected attachment via email, don't notice, and forward it on to someone else, that would be stupid.

    20. Re:Wrong, and bad summary, as usual by atraintocry · · Score: 1

      Sometimes the truth hurts.

    21. Re:Wrong, and bad summary, as usual by Savage-Rabbit · · Score: 1

      And it isn't that people can't be bothered to run Macs or Linux. The majority of the software out there still is written for Windows. I find it amusing that the first thing most Mac users do is set up there box to dual boot Windows or set up some Windows VM.

      Most?? In my experience Mac users that run a VM are usually either developers or enterprise users and they aren't the majority of Mac users. The VM usually doesn't get used much by developers except for testing or for running the odd Windows only app (Which are getting rarer these days). That is usually also what most enterprise users use a VM for as well. For me one of the few Windows only apps is Visio because Omnigraffle's Visio compatibility still isn't quite good enough. Dual booting is something I usually only see with gamers. The one major concession most of the Mac users I know make to Microsoft, is neither dual booting XP nor installing it on a VM. It's installing some version of Microsoft Office suite for Mac. Once they have that the basic OS X and it's software selection usually serves their need quite well.

      --
      Only to idiots, are orders laws.
      -- Henning von Tresckow
    22. Re:Wrong, and bad summary, as usual by supernova_hq · · Score: 3, Funny

      Sorry about going a little offtarget here, but out of all the computers I have had to fix, I haven't found a virus I couldn't get rid of yet!

      In fact the only thing I have ever failed to get rid of is NORTON!!! I uninstalled it from a machine quite a few years ago, 6 months later I installed Tribes. Tribes required an update to connect to 90% of the servers. While installing said update I got "File c:\....\Symantec\Norton...\somefile.dll" is missing. The only way I could fix it was to create an empty text file (with notepad) called "somefile.dll".

      I would rather remove 300 trojans, viruses and worms from an unprotected horse porn machine than try to uninstall a legitimate copy of Norton Antivirus.

    23. Re:Wrong, and bad summary, as usual by treeves · · Score: 1

      What do you think this is, Wikipedia? [citation needed][weasel-words][and stuff]

      --
      ...the future crusty old bastards are already drinking the Kool-Aid.
    24. Re:Wrong, and bad summary, as usual by Low+Ranked+Craig · · Score: 1

      As a Mac user why do I care if Windows viruses come flying by / through my system? Why should I take a performance hit to protect a clueless Windows user?

      --
      I still cannot find the droids I am looking for...
    25. Re:Wrong, and bad summary, as usual by Achromatic1978 · · Score: 1

      The average user (like say my mother this last weekend) cares a lot about paying a Norton subscription every year rather than running a system that doesn't have those problems. So she bought one of the new HP 10" netbooks and had me install Ubuntu Netbook Remix on it.

      Wait, your MOTHER knew enough to ask you to install "Ubuntu Netbook Remix", but not enough to do it herself?!?

    26. Re:Wrong, and bad summary, as usual by w32jon · · Score: 1

      The people who own that server sitting on a nice piece of fiber will probably notice that you've put malware on the machine, and take steps to fix it; it won't stay on your botnet for long.

      If you hijack a Windows machine used by a non-technical user, your malware is more likely to stay there.

    27. Re:Wrong, and bad summary, as usual by plasmacutter · · Score: 1

      You do realize all those OSX definitions are from stupid proof of concept fud exploits like this.

      I say that if a virusmust begiven a root password to infect and propagate that it can't be classified as a virus. It is, at best, malware, and, as a mac user since '03, I can state with certainty that a user would have to be incredibly stupid to allow it to run(osx does not badger with constant permission requests like vista, so you know it's serious when it asks)

      --
      VLC FOR MAC IS DYING! IF YOU DEVELOP, PLEASE SAVE IT!!
    28. Re:Wrong, and bad summary, as usual by plasmacutter · · Score: 1

      If the hundreds of security holes just this year including some incredibly idiotic ones are the result of well designed security from the ground up I think we all better just unplug our machines. Mac OS.X has perhaps the WORST security record of any OS on the market BAR NONE. by that I mean, amount of vulnerabilities, time taken to patch those vulnerabilities and incompetence during patching those vulnerabilities, Apple loses on all fronts. In many ways I wish people would attack it more, it is swiss cheese. Many of the virus's written for windows I could modify and have working on a Mac in under an hour, sadly though I have some ethics.

      Ok, so you measure your number of vulnerabilities by patches rather than actual time open in the wild?
      If I were you i'd re-examine that outlook. I personally feel more assured when I see patches. It means someone is on the ball and responding quickly. With the average number of virii and malware on work machines I'd say windows is behind on several hundred of those patches, and may never release them at all.

      The amount of time widely known and in the wild should be the metric you should use, and the only problem i've heard that has persisted for any significant amount of time on osx has been an old mozilla exploit to snoop people's history.

      Then, there's also the fact that the unix system provides truly compartmentalized permissions, meaning a compromise may not necessarily be systemic.

      --
      VLC FOR MAC IS DYING! IF YOU DEVELOP, PLEASE SAVE IT!!
    29. Re:Wrong, and bad summary, as usual by Akzo · · Score: 0

      So... Where/what exactly is the fallacy? As far as I'm aware if you disagree with someone it doesn't make it a fallacy.

      --
      Sig is for Signature, so you don't have to manually sign every post.
    30. Re:Wrong, and bad summary, as usual by Anonymous Coward · · Score: 0
    31. Re:Wrong, and bad summary, as usual by Bryan+Ischo · · Score: 1

      I've been using Linux machines connected to the internet since 1994. I've used Linux as my primary operating system, from which I access every net service available to me, since that year. I have NEVER had a single problem with spyware, viruses, or other malware on my Linux system. And I have NEVER taken any significant steps to keep my system protected aside from occasionally updating software at my whim.

      If that's not safe, then I'm not sure what is.

    32. Re:Wrong, and bad summary, as usual by Khyber · · Score: 1

      "Get your own chair at the grown up table and stop using Windows. Spam will stop, and vendors will "magically" make their software for other OS's."

      First you need to graduate from your high-chair.

      SPAM WILL NEVER STOP UNLESS THE NETWORKS ARE SHUT DOWN.

      And even THEN, we'll get in the form of faxes, phone calls, and junk snail mail.

      I think you need to grow up and open your eyes to the PAST, where anything you see today could just as easily be found 20 or more years ago, albeit in a different format. Spam back then was on paper, and in unwarranted telephone calls - now it's email and text messages.

      What, you thought spam was something new, little one?

      --
      Still waiting on Serviscope_minor to wake up to fucking reality and realize that Jessica Price isn't going to fuck him.
    33. Re:Wrong, and bad summary, as usual by ericrost · · Score: 1

      Yes, but if you make the attack vector more costly either in physical resources (forcing it to snail mail), time (forcing it back into phone calls), or effort (having to find a legitimate mail server that will relay your ridiculous amounts of messages), it will drastically improve. Its not new, but Windows botnets have certainly raised it to new heights.

    34. Re:Wrong, and bad summary, as usual by ericrost · · Score: 1

      Comprehend what you read. I said HAD me not ASKED me. She ASKED me for a solution (as I mentioned later in the same post) and listened to my advice. Now she's happily using Ubuntu on her machine and Norton can go to hell. Simply because the appropriate hardware is not available with the correct OS preinstalled isn't her fault. Luckily she had someone who could offer her a solution other than bogging down an Atom processor based machine with Norton.

  3. Bullshit by TheLostSamurai · · Score: 3, Insightful

    If you're on the internet, you're vulnerable. Period.

    --
    I am Jack's complete lack of surprise.
    1. Re:Bullshit by Anonymous Coward · · Score: 0

      if you're not on a mac on the internet you mean. Period.

    2. Re:Bullshit by Penguinoflight · · Score: 1

      Your use of "the internet" is rather open. Does an internet user need to listen for connections from others to be considered as one? Any time a network daemon is listening for connections, it is vulnerable to potential code exploits.

      Relying on targets to first connect to you in order to initiate an attack seems overly difficult (even tedious), although it would still be possible.

      --
      "And we have seen and do testify that the Father sent the Son to be the Savior of the World"
      1 John 4:14
    3. Re:Bullshit by Henry+V+.009 · · Score: 5, Funny

      If you're on the internet, you're vulnerable. Period.

      I browse the web using telnet. Sometimes I do have to break out my calculator to handle https sites.

    4. Re:Bullshit by TheLostSamurai · · Score: 2, Interesting

      I browse the web using telnet. Sometimes I do have to break out my calculator to handle https sites.

      You jest, but having written several web server applications in the past, I have essentially had to browse web sites via a console interface in order to debug my programs. You actually get used to reconstructing the web page in your head, much like web developers can see their sites when writing code.

      --
      I am Jack's complete lack of surprise.
    5. Re:Bullshit by Anonymous Coward · · Score: 0

      If you're on the internet, you're vulnerable. Period.

      Unless you're running a VAX, and then no one wants to talk to you.

    6. Re:Bullshit by _Sprocket_ · · Score: 1

      If you're on the internet, you're vulnerable. Period.

      You're so right. Hackers really have true digital power. If you don't believe hackers have true digital power, you better get a life right now or they'll hack your computer off the Internet! Hackers flip out and hack computers ALL the time. They are also mammals.

    7. Re:Bullshit by revscat · · Score: 0, Flamebait

      If you're on the internet, you're vulnerable. Period.

      I really can't think of any response more appropriate than this: you, sir, are a moron.

      Have a nice day.

    8. Re:Bullshit by CambodiaSam · · Score: 1

      True. I've even seen Thinclients running embedded Windows get infected. Management had been fed a line that "thinclients can't get infected because there's no hard drive" as a major selling point. They were really surprised by the pricetag for a mountain of usb memory sticks with OS updates, and the third party labor to make lots of roadtrips.

    9. Re:Bullshit by gardyloo · · Score: 1

      Do you love them with all of your body (including your pee pee)?

    10. Re:Bullshit by myz24 · · Score: 2, Funny

      you're doing it wrong

    11. Re:Bullshit by TheLostSamurai · · Score: 1

      I really can't think of any response more appropriate than this: you, sir, are a moron.

      Try not to think, it will only cause your head to hurt.

      Judging by the shallow depth of your wit, I will leave it to Samuel Clemens to respond; "In a battle of wits, it is poor sport to fight an unarmed man"

      --
      I am Jack's complete lack of surprise.
    12. Re:Bullshit by Abreu · · Score: 5, Funny

      ...You actually get used to reconstructing the web page in your head, much like web developers can see their sites when writing code.

      I don't even see the code anymore. I just see blond, brunette, redhead...

      --
      No sig for the moment.
    13. Re:Bullshit by TheLostSamurai · · Score: 1

      you're doing it wrong

      Have you been talking to my girlfriend?

      --
      I am Jack's complete lack of surprise.
    14. Re:Bullshit by noidentity · · Score: 1

      I browse the web using telnet. Sometimes I do have to break out my calculator to handle https sites.

      Bruce Schneier doesn't have to.

    15. Re:Bullshit by Anonymous Coward · · Score: 0

      I hope your terminal you're running telnet in is secure, wouldn't want a bad implementation of the ansi title setting or printing codes to lead to remote code execution, as has happened before.

    16. Re:Bullshit by gmuslera · · Score: 1

      Vulnerable? Yes
      Vulnerable to virus? Maybe, but with low odds.

      Trojans, backdoors, application vulnerabilities, social engineering are more a threat than at least "traditional" virus (code running in user access that requires modifying system files?), for Linux and i suppose that for Mac too.

      But even for windows the biggest threat by now are not so much virus but trojans too, programs disguised as i.e. video codecs that are in fact keyloggers or botnet nodes.

      Not sure how is for mac, but for windows installing programs usually goes going to the web, getting an exe and running it. In linux is a bit more complicated, as you can install things that comes with your distribution (most that you will ever need, and are authenticated), or do things that requires root access (like installing a .deb/.rpm or adding new repositories) or install something under your user only (there could be a binary directly). Its possible, but much harder than in windows.

    17. Re:Bullshit by shvytejimas · · Score: 1

      Neo: Is that...
      Cypher: The Matrix? Yeah.
      Neo: Do you always look at it encoded?
      Cypher: Well you have to. The image translators work for the construct program. But there's way too much information to decode the Matrix. You get used to it. I...I don't even see the code. All I see is blonde, brunette, red-head. Hey, you a... want a drink?

    18. Re:Bullshit by Anonymous Coward · · Score: 0

      If you're on the internet, you're vulnerable. Period.

      Unless your one of those users who, for some weird fucked up reason, doesn't download, save, chmod +x, and then sudo-run everything that anyone asks them to.

      But everyone agrees: those people are weirdos, so even if they don't choose to run viruses, they're going to have lots of other problems, such as not getting to see th1$ c00l v1de0!!!!!1

    19. Re:Bullshit by Anonymous Coward · · Score: 0

      I concur

    20. Re:Bullshit by _Sprocket_ · · Score: 1

      All kidding aside... malware writers do not have mystical ninja powers. Absolute statements like "anything can be compromised" are as baseless as claiming something is "un-hackable." The actual situation depends a lot on the details and shouldn't be glossed over with tough-talk fluff.

      The claim that "if you're on the internet, you're vulnerable" sounds good as it appears to fall in line with a history of bugs, exploits, and infamous examples of exploits being acted on in various ways. However, one is not actually vulnerable until that vulnerability that affects you is discovered. There's certainly a risk of such a thing happening. But there are also practices that tend to mitigate those risks. Following those practices (as well as looking for additional ways to mitigate risk) are a lot more productive than snide remarks about theoretical vulnerability.

    21. Re:Bullshit by Anonymous Coward · · Score: 0

      If you're on the internet, you're vulnerable. Period.

      That is a bold claim. Exclamation point. Can you prove it. Question mark.

    22. Re:Bullshit by francium+de+neobie · · Score: 1

      I see dead people.

    23. Re:Bullshit by shutdown+-p+now · · Score: 1

      I browse the web using telnet. Sometimes I do have to break out my calculator to handle https sites.

      Mr. Stallman, is that you?

  4. Better title by 427_ci_505 · · Score: 1

    "Apple quietly makes up its mind"?

    Seriously, though. There might not be much out there in the wild, but it would certainly nice to see all computer come with anti-virus software that checks for the virii of other platforms, to reduce overall infection rates.

    1. Re:Better title by overcaffein8d · · Score: 3, Funny

      brilliant idea!

      only thing is, apple fanboys wouldn't be able to criticize PCs as much for having viruses--the more viruses on PCs, the more macs get sold

      --
      Those of us who think they know everything annoy those of us who do.
    2. Re:Better title by Anonymous Coward · · Score: 1, Informative
    3. Re:Better title by Anonymous Coward · · Score: 2, Interesting

      VIrologists might prefer that you use virii.

      A computer virus is not a virus, but rather something new so go ahead and make up a new word with an arbitrary plural form.

      That way, virologists can search databases for viruses safely without worrying about contaminating hits for references about virii.

    4. Re:Better title by betterunixthanunix · · Score: 1

      Why should a home user, running an OS with no known viruses in the wild, be checking for viruses on other platforms? We are not talking about a file server that thousands of people are sharing, we are talking about a single desktop machine running (theoretically) a single OS. If Windows is being run in a VM, the AV software should be run in that same VM, especially since it is possible (not sure if this is common on Mac, but it is becoming common on Linux) to set up multi-boot machines where the user has the option of running the other installed OSes in virtual machines OR rebooting to use them natively.

      --
      Palm trees and 8
    5. Re:Better title by mortonda · · Score: 1

      but it would certainly nice to see all computer come with anti-virus software that checks for the virii of other platforms, to reduce overall infection rates.

      You mean like all those Linux and BSD mail servers out there that constantly scan email for Windows viruses and malware?

    6. Re:Better title by ogdenk · · Score: 1

      Should I scan for Apple II and Atari 8-bit virii too?

      I'm not going to take a 20% performance hit on my old G4 just to make life slightly easier for Windows users. They have their own solutions on their own bugridden platform for dealing with that. Not my problem.

      The last virus threat I had on a mac was NVIR on my old Mac Plus. I'm not going to waste CPU cycles I don't have to.

      There's plenty of other operating systems Windows users can run to alleviate this problem. Most are even designed from the ground up with multiple users and security in mind and have been around a lot longer than Windows (as an OS platform, not the graphical DOS shell).

    7. Re:Better title by 427_ci_505 · · Score: 1

      The use case would be:

      A owns PC (with virus)
      B owns Mac
      C owns PC (no virus but currently vulnerable)

      A sends infected file to B who is immune, who then sends it to C. C gets infected.

      I guess it would be too much to ask mac users to be altruistic wrt. their power bills and cpu cycles to lower overall virus rates, though.

    8. Re:Better title by Lars+T. · · Score: 1

      I guess it would be too much to ask mac users to be altruistic wrt. their power bills and cpu cycles to lower overall virus rates, though.

      It would be too much to ask them and make fun of them for doing so at the same time.

      --

      Lars T.

      To the guy who modded me down from perfect to terrible Karma - Apple haters still suck

  5. Overhyped by xav_jones · · Score: 2, Insightful

    The whole story about Apple encouraging anti-virus software was severely over-hyped anyway. There are malicious bits out there that will damage your system if you do something stupid, like install a Trojan or run an untrusted Office macro. OS X is still quite secure out-of-the-box and *this* is where it is most different to Microsoft's offerings.

  6. Are there any Mac Viruses? by LWATCDR · · Score: 4, Insightful

    I mean is there? Anti-virus programs work by looking for specific code. If that code doesn't exists yet what does it look for? Windows viruses?

    --
    See my blog http://ilovecookes.blogspot.com/ for light hearted technical information.
    1. Re:Are there any Mac Viruses? by LWATCDR · · Score: 3, Insightful

      Wow that is well into the tinfoil hat area. What viruses are their for OS/X? What current exploits are out for it.
      I really don't buy into there are but they are secret.

      --
      See my blog http://ilovecookes.blogspot.com/ for light hearted technical information.
    2. Re:Are there any Mac Viruses? by Anonymous Coward · · Score: 1, Insightful

      Of course there are. Apple however does a pretty good job of stopping any disclosure. If their "ignore the man behind the curtain" attitude extends to virii, there won't be any to check against.

      What? That makes no sense. It's not as if Apple can put a stop to a virus written by and released by someone else just by wishing it so.

      "And we have seen and do testify that the Father sent the Son to be the Savior of the World" 1 John 4:14

      Oh right. You're not used to dealing with sense.

    3. Re:Are there any Mac Viruses? by denzacar · · Score: 1

      Did you buy that 5-digit Slashdot ID?
      Sure there are. A LOT fewer but there have always been some out there.

      Only reason that there aren't that many is low market share. Writing viruses for Windows is more cost effective.

      --
      Mit der Dummheit kämpfen Götter selbst vergebens
    4. Re:Are there any Mac Viruses? by revscat · · Score: 3, Insightful
      The page you linked to shows malware, not viruses. No system is immune to malware. And as far as viruses are concerned, there has never an OS X virus. Ever.

      And the market share thing has been debunked time and time again. You think that if virus writers could capture 100% of 8% of the market that they wouldn't have done so sometime in the past 8 years?

    5. Re:Are there any Mac Viruses? by LWATCDR · · Score: 1

      I looked at that page and I saw mainly malware not viruses per say. Also if you look a good number of them are not even for OS/X some are for System 6.
      It does look like there are some threats but they are pretty few and far it would seem.

      --
      See my blog http://ilovecookes.blogspot.com/ for light hearted technical information.
    6. Re:Are there any Mac Viruses? by Graff · · Score: 2, Insightful

      What viruses are their for OS/X? What current exploits are out for it.

      There are no viruses in the wild for Mac OS X, a few people made some proof of concept viruses but they had crazy requirements and potential vulnerabilities were patched quickly. There are some user interaction based exploits but again they are pretty hard to pull off and most of them have been patched.

      No sane person is saying that Mac OS X is immune to potential viruses and exploits but overall the security model of the OS is pretty solid. Yes Mac OS X is a smaller target than Windows but it's still a big enough target that if it was easy to exploit then people would already be doing it. Eventually I'm sure there will be some serious malware out for Mac OS X but right now it's a waste to run antivirus software because there is NOTHING out there that Mac OS X needs to be protected from.

      Right now antivirus software for the Mac is simply a waste of money and computer cycles. Again, that may change some day but until then don't bother with antivirus for the Mac.

    7. Re:Are there any Mac Viruses? by Holdstrong · · Score: 1

      I'd like to see this debunking... can you point me toward any evidence of it?

    8. Re:Are there any Mac Viruses? by Anonymous Coward · · Score: 0

      Yes, there are, if by virus you include the broader term "malware". There might even be a real virus or two (there are certainly a few for Mac OS 9).

      Do a quick search for Lamzev and RSPlug and you'll get some information on OSX malware. Not very good malware, but that doesn't matter so much when you can send it to a million people at once.

      AV programs certainly use checks for specific code as one way of detecting malicious programs, but there are other methods, such as checking for overwriting the memory of other running tasks, editing a system file, or changing the entry point of a file. These kinds of checks can detect malicious programs that have never been seen before.

    9. Re:Are there any Mac Viruses? by nmg196 · · Score: 1

      > You think that if virus writers could capture 100% of 8% of the market that
      > they wouldn't have done so sometime in the past 8 years?

      I wouldn't suprise me at all if when that 8% is more like 25%, that quite a few viruses and malware apps might start showing up for OS X. Apple patches OS X with security fixes. That means there were holes in it. If there WERE holes, that means there are probably still more which haven't been fixed yet. There's absolutely NOTHING stopping anybody writing a virus for OS X, and when they do, no users will have any protection, because they believe they are already secure. So just imagine what that virus will do and imagine the impact to Apple's image in the aftermath.

    10. Re:Are there any Mac Viruses? by funkatron · · Score: 1

      Does anyone even bother to write viruses anymore? I got the impression that phishing and possibly trojans were far more effective and profitable.

      --
      "Welcome to our world. We are the wasted youth. And we are the future too." Yes, I know these are stupid lyrics.
    11. Re:Are there any Mac Viruses? by denzacar · · Score: 1

      No system is immune to malware.

      Can I quote you on that next time someone pulls up their HolyOS_TM?

      As for viruses per se - when was the last time you saw a virus infection?
      I think the last time I saw one was back in 1999 when secretaries where I worked kept pulling out floppies from god knows where days after I'd clean all the machines.
      Some of them being Win 3.11 boxes most of the cleaning was done by manually running the antivirus on each of them.

      In fact... Last virus I saw was an annoying copy of 666 that kept popping up at my other place of employment.
      Thanks entirely to my boss who kept downloading various Mac warez on his iMac - which was the only machine on the network with internet access.
      At the same time we were not allowed to use internet for antivirus updates. Macs were supposed to disintegrate viruses according to him.
      That piece of shit was still on all networked Macs when I finally left in 2005.

      And as far as viruses are concerned, there has never an OS X virus. Ever.

      Let me guess... Now you will argue that it is NOT a virus.

      And the market share thing has been debunked time and time again. You think that if virus writers could capture 100% of 8% of the market that they wouldn't have done so sometime in the past 8 years?

      Wait... Didn't you just say that NO OS is immune to malware? Right up there. At the beginning of your post.

      So... OSX not being immune, Macs still get a whole lot less malware than a Windows box.
      Shouldn't the situation be the same? No OS is immune to malware, right?
      And Macs should be even more vulnerable - with their limited hardware support.
      There should be hardware exploits, not just malware and viruses. Its not like there are thousands of motherboards, processors, network, graphic and sound cards out there that come with Macs, right?

      Security through obscurity - nothing more.
      Get couple of million Macs into hands of Russian and Chinese script kiddies and see what happens.

      --
      Mit der Dummheit kämpfen Götter selbst vergebens
    12. Re:Are there any Mac Viruses? by denzacar · · Score: 1

      Like I said - Windows boxes are where the money is.

      Botnets need numbers - not credits for "hacking a Jobs-on".
      Like I said above - when was the last time someone had a "virus" problem?
      Its all trojans and worms these days.

      --
      Mit der Dummheit kämpfen Götter selbst vergebens
    13. Re:Are there any Mac Viruses? by DeathElk · · Score: 1

      I'm sorry, but you are a paranoid, misguided fool.

    14. Re:Are there any Mac Viruses? by Anonymous Coward · · Score: 0

      There's only been one identified proper "virus" on Mac OS X, Leap (wiki it). There are a couple of vulnerabilities that have popped up and been fixed, there are probably a few more nobody's discovered. Apple's done a good job of flagging things with "This has been downloaded from the Internet, do you want to run it?" dialogs and things like that, so most threats are indeed overstated.

      But really, Mac OS X, like all unix-lixe, is sufficiently secure that most attacks will be via social engineering, not technical exploits.

  7. PR move by UnknowingFool · · Score: 3, Insightful

    I guess this is knee-jerk reaction to bad PR. Really, the way most viruses work today, Windows machines are the most susceptible. OS X (and other BSD based OS) and Linux are based on different design principles and mostly immune to viruses. Trojans are probably more likely for these systems. I think having a virus check now and then is beneficial in removing those Windows viruses that manage to get onto a Mac so they don't become repositories.

    --
    Well, there's spam egg sausage and spam, that's not got much spam in it.
    1. Re:PR move by Jamie's+Nightmare · · Score: 1

      OS X (and other BSD based OS) and Linux are based on different design principles and mostly immune to viruses.

      The design principals play a minor role. It's the obscurity that offers the most protection.

      --
      "When you see a unixer brainwashed beyond saving, kick him out of the door." - Xah Lee
    2. Re:PR move by girlintraining · · Score: 1

      Really, the way most viruses work today, Windows machines are the most susceptible.

      Nice of you to put in that qualifier. Because you know, if MacOS ruled the world they of course wouldn't have tons of hackers picking it apart to find a weakness to exploit. I suppose it would be because the lack of a right mouse button would make developing software impossible... Or they'd be so confused by the dogcow their head would explode. The malware writers go where the money is and the money is on Windows.

      It's the same as me saying "Well, OS/2 is the most secure operating system, or DOS, or BeOS, because the way most viruses work today..."

      Puh-leze!

      --
      #fuckbeta #iamslashdot #dicemustdie
    3. Re:PR move by maxume · · Score: 1

      Default configuration has a lot of skin in the game.

      If OS X were a hilarious sieve, people would be exploiting it for the resources that are available at this point. Windows being a softer, more valuable target it a contributor, but there are plenty of Mac resources just sitting there on the internet.

      The relative lack of major incident in the last several years suggests that adding Anti-Virus software to Windows, and the better default firewall post XP SP2 have had some impact, supporting my point (and I don't know, but I would guess that the Malware situation on Vista is a lot better than on XP, at least for the people that use UAC).

      --
      Nerd rage is the funniest rage.
    4. Re:PR move by toadlife · · Score: 1

      OS X (and other BSD based OS) and Linux are based on different design principles and mostly immune to viruses.

      lol!

      --
      I don't always use unix-like operating systems; but when I do, I prefer FreeBSD.
    5. Re:PR move by prockcore · · Score: 2, Interesting

      OS X (and other BSD based OS) and Linux are based on different design principles and mostly immune to viruses.

      OSX might be immune to worms, it is *not* immune to viruses.

      Here is how OSX is wide open to viruses: I put out a shareware app that does something useful on the mac. When you download and run the program, it first infects a random app in your applications folder, like iTunes, then does whatever it was supposed to do. When you next run iTunes, it too infects a random app in your applications folder, and so forth. Soon, all of your applications are infected, and you don't even know about it.

      This is possible because the default user can write to the applications folder without needing a password. Thus any application you run on OSX can silently modify iTunes, Safari, iPhoto, whatever.

    6. Re:PR move by UnknowingFool · · Score: 2, Insightful

      Please, this is myth that has been busted. Viruses self replicate and infect Windows systems because they can. In Unix and Linux systems, applications have to be explicitly run. And even then, applications only have permissions to run in certain ways and affect certain files. They cannot affect system files unless given permissions. In that way Trojans are more likely to be successful.

      --
      Well, there's spam egg sausage and spam, that's not got much spam in it.
    7. Re:PR move by UnknowingFool · · Score: 1

      Downloading and running a program makes the program a Trojan. By definition, viruses self-replicate and propagate without the user's knowledge and permission.

      --
      Well, there's spam egg sausage and spam, that's not got much spam in it.
    8. Re:PR move by shmlco · · Score: 1

      There are about several things wrong with that scenario, including trying to alter iTunes, protected code, keychains, and a few other things. Try to do so, and "silently" won't come into it.

      --
      Any sect, cult, or religion will legislate its creed into law if it acquires the political power to do so.
    9. Re:PR move by prockcore · · Score: 1

      It does self-replicate. It infects all the apps on your computer.

    10. Re:PR move by illumin8 · · Score: 1

      This is possible because the default user can write to the applications folder without needing a password. Thus any application you run on OSX can silently modify iTunes, Safari, iPhoto, whatever.

      That's not true. The user can write to ~/Applications, but hardly any applications are ever stored there, especially iTunes, Safari, iPhoto, and the bundled Mac OSX Applications. They are all stored under the root in /Applications, and OS X most assuredly WILL ask you for an administrator password before modifying anything there.

      OSX might be immune to worms, it is *not* immune to viruses.

      Your argument is invalid, because your basic premise is false, QED.

      --
      "When the president does it, that means it's not illegal." - Richard M. Nixon
    11. Re:PR move by AstrumPreliator · · Score: 1

      No OS can protect itself against a stupid user.

    12. Re:PR move by UnknowingFool · · Score: 1

      Again downloading and running a program is a technically a trojan. Viruses do not need to be run to spread.

      --
      Well, there's spam egg sausage and spam, that's not got much spam in it.
    13. Re:PR move by prockcore · · Score: 1

      The user can write to ~/Applications, but hardly any applications are ever stored there, especially iTunes, Safari, iPhoto, and the bundled Mac OSX Applications. They are all stored under the root in /Applications, and OS X most assuredly WILL ask you for an administrator password before modifying anything there.

      Sorry, but no. /Applications, and all the files inside, are group writable by the admin group. The first user account is in the admin group.

    14. Re:PR move by Weedlekin · · Score: 1

      It would be more correct to say that idiot-proofing anything results in it ending up as something that only an idiot would want.

      --
      I'm not going to change your sheets again, Mr. Hastings.
    15. Re:PR move by shutdown+-p+now · · Score: 2, Insightful

      In Unix and Linux systems, applications have to be explicitly run. And even then, applications only have permissions to run in certain ways and affect certain files. They cannot affect system files unless given permissions.

      Guess what, everything you said equally applies to XP if running under normal user, and Vista out of the box.

    16. Re:PR move by illumin8 · · Score: 1

      Sorry, but no. /Applications, and all the files inside, are group writable by the admin group. The first user account is in the admin group.

      Except any attempt to write to /Applications, even by an administrative user, will result in a password dialog box.

      What part of this security model do you not understand?

      --
      "When the president does it, that means it's not illegal." - Richard M. Nixon
    17. Re:PR move by UnknowingFool · · Score: 1

      True but viruses in Windows can still self execute and replicate whereas they cannot in *nix based systems

      --
      Well, there's spam egg sausage and spam, that's not got much spam in it.
    18. Re:PR move by shutdown+-p+now · · Score: 1

      True but viruses in Windows can still self execute and replicate whereas they cannot in *nix based systems

      I don't see the difference. Viruses still cannot self-execute in Windows unless someone starts them first - same as on Unix. Once executed, they can register themselves to automatically run whenever the user logs in - same as on Unix (~/.bashrc). They can replicate by infecting writable executable files (of which few, if any, are writable on Vista to anyone, or on XP to non-admin) - same as on Unix.

    19. Re:PR move by UnknowingFool · · Score: 1

      Download a virus and see where it ends up on your Windows box. Not always where you downloaded it. It might move itself, make copies of itself, etc. When you download a virus in Unix or Linux, it stays exactly where you downloaded it. It will not automatically run. As a *nix user you must explicitly tell it to run. That's the difference. Now Windows has evolved so that system files are not as vulnerable as they once were. Yes once any malware runs, they can infect many different places like startup files. But the fact that Windows viruses can still run on their own is still a matter of concern.

      --
      Well, there's spam egg sausage and spam, that's not got much spam in it.
    20. Re:PR move by shutdown+-p+now · · Score: 1

      Download a virus and see where it ends up on your Windows box. Not always where you downloaded it. It might move itself, make copies of itself, etc. When you download a virus in Unix or Linux, it stays exactly where you downloaded it. It will not automatically run.

      *sigh* Yes, I have seen live viruses. And what about you, have you actually ever seen a virus on a DOS or Windows box? No, it does not automatically run once it's downloaded. How do you think it would even work? Do you seriously believe that Windows has some magic hooks that any executable can use to tell it run itself immediately once it's downloaded?

    21. Re:PR move by toadlife · · Score: 1

      So just install into ~

      Malware does not need anything more than regular user rights to do 'useful' things.

      --
      I don't always use unix-like operating systems; but when I do, I prefer FreeBSD.
  8. Validation? by NatasRevol · · Score: 1

    Not actual validation, but a good starting point for Apple's argument:
    http://milw0rm.com/platforms/osX

    --
    There are two types of people in the world: Those who crave closure
  9. Don't need security updates either? by Gorgonzolanoid · · Score: 1

    The fact that they publish security updates proves them wrong.

    Maybe there aren't many (or any) viruses, worms and whatnot targeting the platform today, but they will come, and when they arrive, it will be a good idea to have some protection installed beforehand. A relative few will still get infected before the AV industry can react, but the rest will be safe as soon as a definition update appears that detects the threat.

    1. Re:Don't need security updates either? by pauljlucas · · Score: 3, Insightful

      Maybe there aren't many (or any) viruses, worms and whatnot targeting the platform today, but they will come, and when they arrive, it will be a good idea to have some protection installed beforehand.

      I've never understood the reason for anti-virus software in general. If there's an exploit, then just fix the security hole. Apple does this with their security updates.

      That said, I understand the reason for anti-virus software on Windows: Microsoft can't or won't fix the security holes. (They tried with Vista and UAC, but that's a mess.)

      --
      If you reply, do so only to what I explicitly wrote. If I didn't write it, don't assume or infer it.
    2. Re:Don't need security updates either? by crmarvin42 · · Score: 1

      I agree that someday Macs will have to deal with real, self-propagating, platform targeted viruses. However, the incessant "Comming Soon!" chant coming from the security groups (read antivirus peddlers) is just noise at this point.

      I'll install a virus scanner once I'm reasonably sure that a self propagating virus that affects mac's is in the wild. Until then I have better things to do with my CPU cycles. I have faith in my own browsing habits that I'm not going to get naild by one of the handful of trojans that target Macs (I only know of 3).

      I'm also going to feel free to brag about not needing to run a virus scanner, or deal with any viruses as long as they continue to be "Comming Soon!" I don't care what the reasons are (BSD, Market Share, etc.) my bragging will still be acurate and a valid reason to at least consider the mac platform.

      --
      Bureaucracy expands to meet the needs of the expanding bureaucracy.-Oscar Wilde
    3. Re:Don't need security updates either? by Nebu · · Score: 1

      I've never understood the reason for anti-virus software in general. If there's an exploit, then just fix the security hole. Apple does this with their security updates.

      The only capability a platform needs to provide for viruses to be possible on that platform is the ability for users to write to executable files. If your platform is programmable -- in other words, if it is possible to be a hobbyist programmer, and to write your own programs on the platform -- then your platform is vulnerable to viruses.

      This has nothing to do with "security holes". When you download a random program off of the internet, run it, and it tries to modify another program, there is no way for the OS to know whether that thing you downloaded is (A) a virus or (B) a legitimate patch, such as security update to one of your existing programs.

    4. Re:Don't need security updates either? by mario_grgic · · Score: 2, Informative

      Yes, that's called a worm or trojan etc, which is different from virus.

      To get infected with a worm or trojan user must download it, give it permissions to run and execute it. (So it usually requires some social engineering to get someone to do all this for you if you are malware writer).

      Virus, on the other hand usually means user does not have to do anything but use computer normally to get infected.

      Unpatched Windows XP (no service packs) connected to the Internet with no firewall and left unattended will get infected within seconds.

      This is what we are talking about. OS X, BSD, Linux do not currently get infected with anything in the same scenarios.

      No OS is safe from worms or malware that requires user cooperation. E.g. someone can send you an install script that has a line

      rm -rf /

      hidden among lots of comment lines it it. If you run it as super user, well you delete everything on your system partition. But this requires YOU to RUN it, it won't happen on its own.

      --
      As the island of our knowledge grows, so does the shore of our ignorance.
    5. Re:Don't need security updates either? by pauljlucas · · Score: 1

      When you download a random program off of the internet, run it, and it tries to modify another program, there is no way for the OS to know whether that thing you downloaded is (A) a virus or (B) a legitimate patch, such as security update to one of your existing programs.

      In the Mac's case, security updates come only from Apple so, clearly, both the OS (and I) know it's a security update. For non-Apple updates, I've already established a "circle of trust" in which are the set of 3rd-party applications I use. Updates for those come only from their vendors.

      Now if I want to try running some random program downloaded from the internet, then (A) Mac OS X will alert me the first time I run it (yes, I realize this is like UAC, but, unlike UAC, Mac OS X asks me only the first time), but, more importantly (B) it won't be running with super-user privileges by default (unlike Windows).

      --
      If you reply, do so only to what I explicitly wrote. If I didn't write it, don't assume or infer it.
    6. Re:Don't need security updates either? by Anonymous Coward · · Score: 0

      Is there any modern (i.e. fully-patched) Windows distribution which is vulnerable to infection in this way?

    7. Re:Don't need security updates either? by Your.Master · · Score: 1

      You're assuming a bit about authentication of the source of applications, which is a potential attack vector.

      Also, if you try running a random program downloaded from the Internet, the default of Windows Vista is:

      a) Medium-rights (aka user priveleges in *Nix-land, not super-user).
      b) Alert the first time you run it (not UAC).

      You will only see UAC and it running as super-user if, for some ungodly reason, this application tries an operation that requires super-user privileges. In which case, of course you'll see a UAC prompt and run as super-user. Now, it is a historical Windows fault that applications could get away with requiring super-user priveleges and so some applications in the wild still do out of inertia (never updated). There's some metrics that I don't want to bother looking up that suggest that this problem has dropped off dramatically in the past year and a half, but they are still there.

      Now, the marking of a file as being sourced from the Internet isn't done correctly in every browser -- IE and Firefox do it right, but Safari for Windows does not the last time I checked (which was part of how the carpet-bombing attack was made possible), and I'm not sure about the other browsers.

    8. Re:Don't need security updates either? by mario_grgic · · Score: 1

      If you are up to date with all the updates and don't run unnecessary services, software etc, then perhaps you might be ok (it is most dangerous on days patches are released since that also means that details of vulnerabilities are made known too. So if users are not pro active with updates as soon as they are available, technically they might be exposed.)

      But the point is that Windows has had problems like that not too long ago, and that there is a stigma attached to it because of it.

      I'm sure Windows security is getting better as well and users might be getting more educated, but it certainly took a long time :D.

      --
      As the island of our knowledge grows, so does the shore of our ignorance.
    9. Re:Don't need security updates either? by Anonymous Coward · · Score: 0

      Well, of course unpatched XP gets exploited, that's why it was patched

      I could set up a Linux box with an old version of Apache, exploit a buffer overflow or something that was later patched, does that mean anything?

    10. Re:Don't need security updates either? by Nebu · · Score: 1

      Yes, that's called a worm or trojan etc, which is different from virus.

      To get infected with a worm or trojan user must download it, give it permissions to run and execute it. (So it usually requires some social engineering to get someone to do all this for you if you are malware writer).

      Virus, on the other hand usually means user does not have to do anything but use computer normally to get infected.

      Actually, the term "virus" refers to code which lies inside another executable, but which cannot exist on its own. Computer viruses are so named because of the analogy to the biological virus.

      Because a virus must be attached to some other executable, it usually DOES require "user cooperation", in the form of executing the infected executable.

      You actually seemed to have gotten the concept of a worm and a virus reversed. See Wikipedia

      A computer worm is a self-replicating computer program. It uses a network to send copies of itself to other nodes (computer terminals on the network) and it may do so without any user intervention. Unlike a virus, it does not need to attach itself to an existing program. Worms almost always cause harm to the network, if only by consuming bandwidth, whereas viruses almost always corrupt or modify files on a targeted computer.

      Recall that viruses existed way back in the 1980s, and possibly earlier. They were transmitted via floppy diskettes back then. So viruses certainly do not require "unsecure ports" or anything like that to transfer themselves without user interaction. That's a worm.

    11. Re:Don't need security updates either? by Anonymous Coward · · Score: 0

      You seem to assume two things:
      1) That every user will install every security update the moment it becomes available. Remember that, just a few years ago, Apple asked people money for security updates, selling them as an OS upgrade?
      2) That no malware maker will ever know about a security hole before there's a patch for it.

      "If there's an exploit, then just fix the security hole" -- you must be kidding.
      So when a worm appears, people are expected to just let it go rampant until Apple has a fix for the hole it uses to propagate?

    12. Re:Don't need security updates either? by shutdown+-p+now · · Score: 1

      To get infected with a worm or trojan user must download it, give it permissions to run and execute it. (So it usually requires some social engineering to get someone to do all this for you if you are malware writer).

      Virus, on the other hand usually means user does not have to do anything but use computer normally to get infected.

      Wrong. The latter is not a virus, it's a worm (and a worm is different from a trojan).

      A virus is something that you still have to run explicitly. It's different from the trojan in that the first thing it does is trying to infect as many other executables as possible, to propagate itself. This modus operandi was particularly efficient in DOS days, as it relied on people sharing (possibly infected) software on floppies.

      A virus can be installed "automatically" by exploiting OS by means of an arbitrary code execution vulnerability. But so can a trojan. The difference between a virus and a trojan is not related to that.
      From Wikipedia:

      A computer virus is a computer program that can copy itself and infect a computer without permission or knowledge of the user ... A virus can only spread from one computer to another when its host is taken to the uninfected computer, for instance by a user sending it over a network or the Internet, or by carrying it on a removable medium such as a floppy disk, CD, or USB drive. Viruses are sometimes confused with computer worms and Trojan horses. Meanwhile viruses can spread to other computers by infecting files on a network file system or a file system that is accessed by another computer. A worm can spread itself to other computers without needing to be transferred as part of a host, and a Trojan horse is a file that appears harmless.

    13. Re:Don't need security updates either? by skiman1979 · · Score: 1

      I've often wondered this myself. If a vulnerability gets exposed, there are two options: the application (or OS) vendor can patch it, or antivirus vendors can put out a fix for it. Either option will take a certain amount of time. However, it should be the job of the software/OS vendor to fix their stuff.

      If they don't want to or can't fix their own stuff, just don't use it. Why put a bandaid on it when you can just go with another vendor that is more proactive with their fixes? Or one that has their code configured properly in the first place?

      --
      Having a smoking section in a public restaurant is like having a peeing section in a public swimming pool.
  10. Taking the past for granted? by tbrex33 · · Score: 1

    Even if there has not been great threats to Mac in the past regarding malicious programs and viruses, the increase in Mac users should still bring attention to the possibility of such attacks like AppleScript.THT. The attention brought by Apple on the subject of virus software the last few days may have just increased the possibility of one.

  11. Father Steve was just testing our loyalty by elrous0 · · Score: 4, Funny

    He was separating out the false believers from the flock.

    --
    SJW: Someone who has run out of real oppression, and has to fake it.
    1. Re:Father Steve was just testing our loyalty by Anonymous Coward · · Score: 0

      He was separating out the false believers from the flock.

      No worries. No sane person wants to use an Apple computer anyway. :-) Just like no sane person would use Windows on a PC.

      PC + Linux = Sane persons computer.

    2. Re:Father Steve was just testing our loyalty by Akzo · · Score: 0

      -1: WHOOOOSH

      --
      Sig is for Signature, so you don't have to manually sign every post.
  12. Is it just me... by supersloshy · · Score: 1

    ...or does it sound like Apple's tempting virus/malware writers to come up with something for Mac OS X? "This Just In: Massive Mac Malware Epidemic"

    --
    "Our country is not nearly so overrun with the bigoted as it is overrun with the broadminded." -Archbishop Fulton Sheen
  13. hexually transmitted by girlintraining · · Score: 5, Funny

    Could you have maybe said that shorter? Something like "Hey, they're only suggesting that you wrap your system before practicing unsafe hex. But we have a lower rate of hexually transmitted malware than Windows. We do advise that you contact your vendor immediately if you have a software install lasting longer than four hours as this could indicate a more serious technical condition."

    --
    #fuckbeta #iamslashdot #dicemustdie
    1. Re:hexually transmitted by morgan_greywolf · · Score: 2, Informative

      Could you have maybe said that shorter?

      Don't read many of daveschroeder's posts, eh? He has a tendency to be a bit wordy, but much of what he has to say is actual useful information, especially relating to Macs, even if he is an Apple fanboy at heart. ;)

    2. Re:hexually transmitted by girlintraining · · Score: 0, Troll

      Don't read many of daveschroeder's posts, eh? He has a tendency to be a bit wordy, but much of what he has to say is actual useful information, especially relating to Macs, even if he is an Apple fanboy at heart. ;)

      I didn't even read that one; I skimmed it. Probably something to do with being attention-deficit you know. If I have to scroll a comment, chances are good it's a religious/fanboy posting. If you ask me, anyone who'd devote that much time to a post is either on Apple's payroll or needs to get out of the basement and get some sunshine.

      --
      #fuckbeta #iamslashdot #dicemustdie
    3. Re:hexually transmitted by bennomatic · · Score: 2, Funny

      Could you have maybe said that shorter?

      Yes.

      --
      The CB App. What's your 20?
    4. Re:hexually transmitted by Reality+Master+201 · · Score: 1

      Truthfully, very little of what he has to say is actually that useful or informative. Dave's kind of an intellectually dishonest ass.

    5. Re:hexually transmitted by erroneus · · Score: 5, Insightful

      So it is unlikely that people with things to say have no desire to be complete and accurate in their thoughts, ideas and expressions? It only takes one quick generalization before people start blasting you with "that's not true because it's not true for me."

      While there may be some moments when it is possible to be both brief, accurate and complete, I would suggest that those moments are the exception and not the rule. Just as with your short conclusion, it is completely presumptive and incorrect. I would be neither on Apple's payroll nor in a basement if I were to have responded in similar fashion. Your mind has been dulled by 30 minute episodes and 10 minute commercial breaks.

    6. Re:hexually transmitted by girlintraining · · Score: 0, Flamebait

      So it is unlikely that people with things to say have no desire to be complete and accurate in their thoughts, ideas and expressions?

      Average people try to make things more complicated to win the argument. Smart people try to make it simpler to understand the argument.

      .
      P.S. My mind hasn't been dulled by 30 minute episodes and 10 minute commercial breaks. It's been dulled by listening to people like you who take themselves so seriously they'll probably have a heart attack before they're 40. Get out of the house once in awhile and maybe you'd learn to take a joke once in awhile and laugh at yourself.

      --
      #fuckbeta #iamslashdot #dicemustdie
    7. Re:hexually transmitted by Anonymous Coward · · Score: 0

      I'm sure he would, if anything you ever posted was funny rather than cringe-inducing and dumb.

    8. Re:hexually transmitted by Sancho · · Score: 1

      Could you have maybe said that shorter?

      Yes, but then you'd miss the long, technological discussion of OS X in a mixed environment and how computer security doesn't just rely on software vulnerabilities to manifest. Indeed, Wikipedia offers this insight:

      A computer virus is a computer program that can copy itself and infect a computer without permission or knowledge of the user. The term "virus" is also commonly used, albeit erroneously, to refer to many different types of malware and adware programs. The original virus may modify the copies, or the copies may modify themselves, as occurs in a metamorphic virus. A virus can only spread from one computer to another when its host is taken to the uninfected computer, for instance by a user sending it over a network or the Internet, or by carrying it on a removable medium such as a floppy disk, CD, or USB drive. Meanwhile viruses can spread to other computers by infecting files on a network file system or a file system that is accessed by another computer. Viruses are sometimes confused with computer worms and Trojan horses. A worm can spread itself to other computers without needing to be transferred as part of a host, and a Trojan horse is a file that appears harmless. Worms and Trojans may cause harm to either a computer system's hosted data, functional performance, or networking throughput, when executed. In general, a worm does not actually harm either the system's hardware or software, while at least in theory, a Trojan's payload may be capable of almost any type of harm if executed. Some can't be seen when the program is not running, but as soon as the infected code is run, the Trojan horse kicks in. That is why it is so hard for people to find viruses and other malware themselves and why they have to use spyware programs and registry processors.

      The entry on Trojan Horses may be more apropos:
      n the context of computing and software, a Trojan horse, also known as a trojan, is malware that appears to perform a desirable function but in fact performs undisclosed malicious functions. Therefore, a computer worm or virus may be a Trojan horse. The term is derived from the classical story of the Trojan Horse. ...
      Types of Trojan horse payloads

      Trojan horse payloads are almost always designed to cause harm, but can also be harmless. They are classified based on how they breach and damage systems. The six main types of Trojan horse payloads are:

              * Remote Accessing
              * Data Destruction
              * Downloader
              * Server Trojan(Proxy, FTP , IRC, Email, HTTP/HTTPS, etc.)
              * Security software disabler
              * Denial-of-service attack (DoS)

      Without extensive elucidation, we are reduced to mere physiological grunting, albeit grunting in text form on a user forum. One wonders, then, whether or not the initial answer to your question might have been better answered with the short, ironic, two-letter response of:
      No.

    9. Re:hexually transmitted by Anonymous Coward · · Score: 0

      Your loss, sparky.

    10. Re:hexually transmitted by Anonymous Coward · · Score: 0

      I like how your post, and this one, require no scrolling for me.

      Jus' sayin'.

    11. Re:hexually transmitted by stewbacca · · Score: 1

      First they don't read the article. Now they don't even read the parent before they reply. I love slashdot!

    12. Re:hexually transmitted by Anonymous Coward · · Score: 0

      I get the idea that you think "hextually transmitted" is a very clever joke.

    13. Re:hexually transmitted by Anonymous Coward · · Score: 0

      Informative? Shouldn't this be +5 Funny?

    14. Re:hexually transmitted by morgan_greywolf · · Score: 1

      Sometimes he can be intellectually dishonest. That's why I said he's an Apple fanboy at heart with a ;) (in the sense of 'HHOS'). But when it comes down to it, Dave is very well informed about Apple and Apple's products -- but then to inflate Apple's position and standing in any Apple criticism article, he'll often either leave out important details or inflate other details. You have to do with Dave's posts what you do with a research paper or when reading a book -- separate out the wheat from chafe and decide what is real and what is BS.

      Of course, I'm probably expecting too much to ask people to think for themselves. :-/

    15. Re:hexually transmitted by Reality+Master+201 · · Score: 1

      Of course, I'm probably expecting too much to ask people to think for themselves. :-/

      Man, you're kind of a fucking tool yourself, aren't you?

    16. Re:hexually transmitted by morgan_greywolf · · Score: 1

      Uhhhh...that wasn't what I meant by that...sorry you took it that way. :( I didn't mean you specifically.

  14. Sure has been a lot of Apple bashing on the net by NinthAgendaDotCom · · Score: 5, Insightful

    Lately I've seen a few of these posts on various sites. I think it's the case of Apple being big enough and successful enough over the past few years that they fall into the same category as Google, Microsoft, etc.: no longer a cute underdog, no longer immune from attacks. There's always been some anti-Apple sentiment ("one button mouse!" etc.), but lately it seems more pointed and directed, more tactical.

    --
    -- http://ninthagenda.com/
    1. Re:Sure has been a lot of Apple bashing on the net by Shados · · Score: 0

      Because more people tried it, not everyone who tried it actually liked it, so they know better about its flaws than Apple bashers of old, who were bad mouthing it from an ivory tower.

      Simple as that, IMO.

    2. Re:Sure has been a lot of Apple bashing on the net by atraintocry · · Score: 1

      I think there's also a type of person who starts out by assuming that because you are in the minority, that there must be something wrong with you. "What, a *regular* computer isn't good enough for this guy?" Then they have to rationalize that after the fact, since they made up their mind emotionally to begin with.

      I personally feel that Apple's advertising has become obnoxious, both in quantity and in tone. I use a Mac lately and it's somewhat embarrassing that someone could assume that I'm a "switcher" when in reality I've just added to the palette of technology that I'm familiar with.

    3. Re:Sure has been a lot of Apple bashing on the net by bill_mcgonigle · · Score: 1

      but lately it seems more pointed and directed

      Back in the 90's most people here were Apple haters. Then with OSX they started to come around, embracing open source and giving back. Then Apple dropped OSX to work on their phone, which is locked down and proprietary, before picking it back up for long enough to get a release out the door that is so bad they're doing a major rev that's only a bugfix/architecture-fix release.

      At the same time their quality went downhill and they started using sub-par parts in their computers. They also decided to pit technology against their business model, e.g. not supporting BluRay for the sake of iTunes.

      Apple gives every indication that iTunes/iPhone is their desired business model these days and it runs contrary to those who favor a participatory culture.

      --
      My God, it's Full of Source!
      OUTSIDE_IP=$(dig +short my.ip @outsideip.net)
  15. They are still recommending antivirus! by secmartin · · Score: 4, Informative
    Actually, they are still recommending the use of antivirus. Cnet quotes an Apple spokesperson saying:

    The Mac is designed with built-in technologies that provide protection against malicious software and security threats right out of the box. However, since no system can be 100 percent immune from every threat, running antivirus software may offer additional protection.

    Windows Vista is full of "protection", but I use antivirus on that as well. I love MacOS X, and I'm sure it's more secure, but there will be viruses and other malware on MacOS sooner or later.

    By the way, isn't it ironic that Apple is still offering ClamXav for download on their own website?

    1. Re:They are still recommending antivirus! by gEvil+(beta) · · Score: 2, Insightful

      By the way, isn't it ironic that Apple is still offering ClamXav for download on their own website?

      Look! They're also promoting software piracy!!!

      In case you don't get it, providing links for software some people may find useful is not the same thing as endorsing it.

      --
      This guy's the limit!
    2. Re:They are still recommending antivirus! by daveywest · · Score: 1

      I'll admit I'm a fanboi, but seriously, when was the last time you had a virus on a Mac? I think I had an infected zip disk when I was using System 9. Most antivirus software will identify signatures of known viruses or virus like behavior. Since there aren't any know viruses for the Mac to date, what is their software doing other than protecting my wallet from getting fat?

    3. Re:They are still recommending antivirus! by jdbausch · · Score: 2, Funny

      ...what is their software doing other than protecting my wallet from getting fat?

      and you don't need that protection, because buying apple products does that for you...

    4. Re:They are still recommending antivirus! by dentree4 · · Score: 1

      "Apple is providing links to these applications as a courtesy, and makes no representations regarding the applications or any information related thereto. Any questions, complaints or claims regarding the applications must be directed to the appropriate software vendor." read the fine print

  16. Not at ALL like security updates by argent · · Score: 1

    when they arrive, it will be a good idea to have some protection installed beforehand

    Antivirus software has to by its very nature integrate itself deeply into the OS and libraries and modify many many calls to insert checks for viruses. Even setting aside the fact that these programs are using unsupported and internal APIs, and the OS vendor does not get to update them as they update the APIs they depend on, they are additional code in a critical path AND they are designed to make normal operations by applications fail when they trigger a signature.

    The result is that it is impossible for this kind of software to NOT reduce the performance and stability of your system. Installing AV software WILL cause a certain amount of failures and data loss among the people who use it. Until the risk of data loss from malicious worms and viruses (currently zero) increases to the point where it's greater than the risk from antivirus software (currently non-zero), you are better off without AV software.

    This is not theoretical: antivirus companies have been pushing AV software for Palms and Windows CE handhelds since about 2000. In that time there have been zero examples of malware for these handhelds propagating in the wild, and a number of cases where false positives led to data loss.

  17. Keeping users in the dark? by Velmoor · · Score: 1

    The fact that they had it up there just says they want their users to be safer and just in case kind of security. i think a lot of people overreacted to the issue. yes they are more resilient to viruses and malware, but not immune. and the fact that they took it down shows that Apple likes their users to remain in the dark on the issues, no matter how unlikely.

    1. Re:Keeping users in the dark? by Shados · · Score: 1

      A large part of the security issues with Windows is that Windows users were trained in a world where viruses werent a big threat. Sure there was the occasional malware, but back in the days, people barely ever had the internet, nevermind downloading viruses for it.

      I think that will be the downfall of Apple security eventually. Linux users tend to take security a bit more seriously. Windows users are starting to. Apple users? Nada. They stick their fingers in their ears and go "LALALA IM NOT USING WINDOWS LAlALALA". Once a new attack vector is discovered that can target OSX "by design" (think ActiveX, but more subtle), things are going to go downhill from there, and Apple users will be totally unprepared for it.

  18. Nothing to see here! by Beelzebud · · Score: 1

    Nothing to see here! Please move along!

  19. win by ufoolme · · Score: 1

    So what Windows is safer left in the box!

  20. Special Olympics by Anonymous Coward · · Score: 0

    This just in, the Special Olympics are cool and it's impressive to win...but being in it still makes you a....(think about it and this joke is highly relevant...and not in the bashing sorta way)

    Seriously, anybody who suggests not using AV software is an idiot. Anybody who falsely claims somebody else is recommending people to not use AV software should be treated equally so. The article doesn't have anything about avoiding AV software, and it's only reasonable to assume that no press release from apple would make such a foolish recommendation, at least for the sake of liability.

    1. Re:Special Olympics by Dan+Ost · · Score: 1

      Do you use AV software with Linux?

      If not, why not? It seems like your argument is that *everyone* should use AV software regardless of OS.

      disclaimer: I run linux. I don't use any AV software at all. Just a firewall.

      --

      *sigh* back to work...
  21. -1 retarded by yabos · · Score: 1

    You can find all the past worms and exploit code on any of the antivirus vendor's websites. Most of them are so old and have been patched for years.

  22. Reimburse by grapes911 · · Score: 3, Funny

    And who's going to reimburse me for the 7 AV programs I just ordered?

  23. Why don't they recommend common sense by dedazo · · Score: 2, Interesting

    That's what I've been using with various versions of Windows the last 12 years and I've never had any problems.

    --
    Web2.0: I love when people Flickr my cuil and digg my boingboing until my google is reddit and I start to yahoo
    1. Re:Why don't they recommend common sense by maxume · · Score: 1

      Despite the name, there is a shocking lack of supply.

      --
      Nerd rage is the funniest rage.
    2. Re:Why don't they recommend common sense by Reziac · · Score: 1

      Because if they had any common sense, they wouldn't be using Macs in the first place ;)

      --
      ~REZ~ #43301. Who'd fake being me anyway?
    3. Re:Why don't they recommend common sense by Dogtanian · · Score: 1

      That's what I've been using with various versions of Windows the last 12 years and I've never had any problems.

      I'm not keen on that Common Sense software. I tried it out once and it overwrote my whole damn Windows installation with Linux!

      --
      "Slashdot - News and Chat Sites Deviant". (Click "homepage" link above for details).
  24. Security updates by Jabbrwokk · · Score: 2, Interesting

    Good point, after reading your post I ran Software Update on my Tiger machine at work and found a 72.5 MB security update waiting to be downloaded and installed.

    And most of the updates seem to be the kind of stuff that gets patched on Windows machines.

    I guess Apples and PCs have many of the same security issues, the difference is that fewer people care to exploit them on Macs and also that it's easier to take advantage of click-happy users on a Windows computer to pull off an exploit. "Durr... naked pictures of Britney? CLICKCLICKCLICKCLICKpwned."

  25. Ironically... by Nemyst · · Score: 1

    The more they say how secure OSX is, the more people might flock to it. In turn, that will increase the potential market of users on the system and will likely increase the number of hackers roaming through OSX's code for vulnerabilities. I don't believe OSX is THAT more secure (sure, UNIX is more secure than Windows, but not by the huge margin some are trying to push) and I'm sure a dedicated, interested person would find some exploits to use which would cause a huge panic among the OSX hordes.

    But for the time being, OSX is pretty safe. It's all dependent on how far they grow! The larger they are, the bigger target they get...

    1. Re:Ironically... by betterunixthanunix · · Score: 1

      Actually, the measure of a system's security is a lot more than just the number of viruses, or even the number of exploits on the system. For home users, security generally entails susceptibility to viruses, but for higher security installations (banks, governments, etc.), security considerations are more complex. How are user privileges separated? Can a user who misbehaves be terminated before they can cause further damage? Will everything be audited? Resource protection? These are all very real considerations, especially because an exploit can be patched easily, but a core architecture change is a lot more difficult and incurs a high cost.

      --
      Palm trees and 8
  26. Bad summary by Anonymous Coward · · Score: 0
  27. Nobody by speroni · · Score: 3, Funny

    MAC: Can't even get negative attention.

    Picture

    --
    Eschew Obfuscation
    1. Re:Nobody by Anonymous Coward · · Score: 0

      ctrl-alt-del is a terrible comic and you are terrible for referencing it

    2. Re:Nobody by duckInferno · · Score: 1

      You're a walking cliche.

      --
      Fool me once, shame on you. Fool me twice, watch it -- I'm huge!
    3. Re:Nobody by stewbacca · · Score: 1

      Wow. That is a horrible web site. I mean...just...wow. You actually think that comic strip is funny? Wow. That comic strip is about 5-times as douchy as the Mac guy it's trying to make fun of.

    4. Re:Nobody by Anonymous Coward · · Score: 0

      It's not brilliant, but compared to the badly drawn and unfunny User Friendly, it's bloody genius.

    5. Re:Nobody by Anonymous Coward · · Score: 0

      He's not wrong though.

  28. Apple: "You don't need AV!" by eagee · · Score: 2, Funny

    Even if they were safe before, they won't be for long. That's just asking for it!

  29. I don't think it was a good sales man. by CYDVicious · · Score: 1

    I have an all-in-one solution for you, it may be 4 times more expensive than the 7 you just purchased, but if you purchase this solution, we'll gladly reimburse you for your troubles, and you will just have one program to manage.

    --
    //Nothing to see here, please move along.
  30. Anti-virus software companies by Monkey_Genius · · Score: 1

    With the 'huge' gains in Mac market share in the last view years anti-virus companies are looking to a new market to grow their brands into. What better way than for some blogger and Mac noob like Brian Krebs -owner of his first Mac for three weeks- to slip them a bone by getting the other Mac noobs and recent Windows converts into a lather over some less than spectacular information. Granted, most Unixes and Unix-like OSes have a great deal more security 'out-of-the-box' than the other 'leading brand', to run anti-virus software is just being a good citizen, especially on a corporate network. Anyway, at least the wags over at ElReg apologized and they included a cute little bit of parody in their apology, Mr. Krebs and the other wonks haven't.

    --
    I've got your sig, right here.
  31. Apple Learning PR from the US Government? by n122vu · · Score: 1

    "We definitely recovered the remains of a flying disk near Roswell, New Mexico."

    "It was not a flying disk that was recovered at Roswell. It was in fact a US Air Force weather balloon."

  32. Everyone needs anti-virus software these days! by unix_geek_512 · · Score: 4, Insightful

    C'mon apple, get real!

    Everyone needs anti-virus software these days!

    Apple, Linux, *BSD and Unix included.

    I don't care what apple or anyone else says, you need all the protection you can get.

    I have been using anti-virus software on *nix systems for years and will continue to do so.

    Semper Fi!

    1. Re:Everyone needs anti-virus software these days! by Paradigm_Complex · · Score: 2, Insightful

      Would you mind sharing what software you use? All of the antivirus software I'm aware of for Linux or *BSD is designed to look for Windows viruses/malware. Good for cleaning up my neighbor's computer from a live USB but not so useful for protecting any of my *nix boxen.

      --
      "A witty saying proves nothing." - Voltaire
    2. Re:Everyone needs anti-virus software these days! by ratboy666 · · Score: 1

      Probably the ones I use -- tripwire (or other IDS software), SELinux (or other MAC software), or, on older systems, anti stack-smash software, like libsafe, and anti-hack software like denyhosts.

      All of which are not, strictly speaking, "anti-virus" software; they simply look for, alert, or stop, misbehavior.

      --
      Just another "Cubible(sic) Joe" 2 17 3061
    3. Re:Everyone needs anti-virus software these days! by 99BottlesOfBeerInMyF · · Score: 1

      C'mon apple, get real! Everyone needs anti-virus software these days!

      So far, this just hasn't lined up with the real risks. To date, more Mac users have suffered because of malfunctioning antivirus software than because of intentional malware. I'm not opposed to antivirus and I wish Apple would take ClamAV and run with it as part of the system (as well as other anti-malware technologies) but really the malware risk has been so low they don't have a lot of incentive.

    4. Re:Everyone needs anti-virus software these days! by francium+de+neobie · · Score: 1

      The closest thing you have in Linux to virus is rootkit. And yes, there are things you can use to look for rootkits.

    5. Re:Everyone needs anti-virus software these days! by texroot · · Score: 1

      How many viruses have you caught in your years of running antivirus software on *nix? I mean ones that were capable of infecting the *nix system, not Windows viruses.

  33. The strength of Mac by guruevi · · Score: 3, Interesting

    The strength of Mac against viruses lays solely in the use of very stable FOSS solutions for the basics (very close to stable Debian versions) and then building on top of that (Aqua, CoreAudio, CoreImage etc. don't have any links to sockets). Really, what services CAN lay bare on a Mac to the internet: SSH (OpenSSH), E-mail (Postfix), Webserver (Apache). On the program side, you have Safari (Webkit) or Mozilla with Flash (Adobe) or Java (Sun) and those don't come above user level without requiring extreme interaction from the user (passwords). There is no such thing as ~/Library/StartupItems or ~/Library/LaunchDaemons and you need to become root to put stuff in /Library.

    Of course as soon as a vulnerability is reported the community fixes it which trickles down to other vendors like Apple, RedHat etc. and many of those vulnerabilities for Apache or Postfix are hardly exploitable or only for rare setups (usually buffer overflows which could lead to an exploit if somebody was savvy enough to analyze all of them and see where they have space enough to load their own stuff and then call it too).

    To have a successful attack on a Mac would also mean that you can successfully attack Linux or other Unixes or it would require a serious bug in certain programs (like Safari or Mail) which also allows to unnoticeable have a huge payload to replace things like Safari with a 'hacked' version or implement a plugin that does something weird.

    --
    Custom electronics and digital signage for your business: www.evcircuits.com
    1. Re:The strength of Mac by Anonymous Coward · · Score: 0

      There is no such thing as ~/Library/StartupItems or ~/Library/LaunchDaemons

      There is ~/Library/LaunchAgents which executes when you login.

      Also, it seems most of your post simply assumes that Apple's developed products (CoreAudio, QE/CI, etc) can't be vulnerable. AFAIK, those are not all FOSS and so how can you be certain they're so safe? How does the rest of your post even apply at that point?

    2. Re:The strength of Mac by 99BottlesOfBeerInMyF · · Score: 1

      The strength of Mac against viruses lays solely in the use of very stable FOSS solutions for the basics (very close to stable Debian versions) and then building on top of that (Aqua, CoreAudio, CoreImage etc. don't have any links to sockets). Really, what services CAN lay bare on a Mac to the internet: SSH (OpenSSH), E-mail (Postfix), Webserver (Apache).

      I'd say a lot of the strength is in not exposing those services in the default configuration so most machines are not vulnerable to attacks on unneeded services. For those services that are exposed, Apple has done a decent job of sandboxing via their ACL framework (like their zeroconf deamon).

      On the program side, you have Safari (Webkit) or Mozilla with Flash (Adobe) or Java (Sun) and those don't come above user level without requiring extreme interaction from the user (passwords).

      I'd say those don't really matter much since the user level access is sufficient to be useful to malware authors. There are holes in said programs, but lower market share, less familiarity by malware authors, and implementation details make it less of an issue for OS X, as well as the need to use a trojan, which slows the spread of any malware.

      There is no such thing as ~/Library/StartupItems or ~/Library/LaunchDaemons and you need to become root to put stuff in /Library.

      Someone else already pointed out there are places a user can put things to make them autorun. Rather, it is Apple doing an okay job with identifying applications and the first time they run that provides some, limited buffer against trojans.

  34. What about the itunes virus? by shadowrat · · Score: 0, Flamebait

    i got this virus on my vista machine. It runs at boot. It's constantly trying to install other software like mobile me and safari. It constantly tries to reboot my machine at the worst times. And worst of all half of my music files won't play on any other machine since i got this virus.

    It seems likely that osx is also susceptable to the itunes virus

  35. Epiphany! by Bobfrankly1 · · Score: 1

    Don't you guys get it? Mac OSX IS the virus!

  36. Political correctness? by Ralish · · Score: 1

    an attempt by Apple to say something that Apple politically couldn't say: Mac antivirus software primarily protects against Windows viruses.

    Are you serious?

    Apple has spent the last several years directly bashing Microsoft and especially Windows through something close at times to saturation advertising. There's been a complete and total lack of subtlety. This being the case, I can't see Apple being too worried about political correctness and not trodding on the toes of MS. ;)

  37. What's up with your sig? by earlymon · · Score: 0, Offtopic

    I've been meaning to ask, this is as good a time and place as any - where did you get this quote for your sig?

    All difficult things have their origin in that which is easy, and great things in that which is small. ~ Lao Tzu

    I have studied The Old Man for 35 years and have no idea where he said this. It's not in the Tao Te Ching. Neither are these quotes:

    "Being deeply loved by someone gives you strength; loving someone deeply gives you courage." http://www.whatquote.com/quotes/Lao-Tzu/1399-Being-deeply-loved-b.htm

    "Ambition has one heel nailed in well, though she stretch her fingers to touch the heavens." http://www.whatquote.com/quotes/Lao-Tzu/24946-Ambition-has-one-hee.htm

    It would be ludicrous to attribute either of the above to Lao Tse.

    Your quote is more akin to this passage from the Hagakure:

    Among the maxims on Lord Naoshige's wall there was this one: ''Matters of great concern should be treated lightly.''
    Master lttei commented, "Matters of small concern should be treated seriously."

    http://www.rosenoire.org/archives/Hagakure.pdf

    In fact, I dispute virtually all of these quotes attributed to The Old Man - http://www.brainyquote.com/quotes/authors/l/lao_tzu.html - cleverly, there are a few of his actual quotes there - not very many.

    In keeping with the spirit of the Hagakure - GirlInTraining wrote that if you have to scroll a comment, chances are good it's a religious/fanboy posting. To which EarlyMon commented that if you believe ahead of time that long comments are religious/fanboy ones, you will scroll them.

    --
    Pathological kinda promises Path + Logical - but instead, you get stuck with pathetic.
    1. Re:What's up with your sig? by girlintraining · · Score: 1

      I would answer only that the history of Lao Tzu has many ambiguities, and like Confuscius and many others quotations are often misattributed. Even when language is not a barrier, Einstein for example has been quoted to have had many different sources of inspiration for his theory of relativity.

      --
      #fuckbeta #iamslashdot #dicemustdie
    2. Re:What's up with your sig? by earlymon · · Score: 1

      Thanks for the kind reply.

      The history of Lao Tse may have ambiguities, but I'm aware of none that would so bastardize the man's beliefs and philosophies into the quote you've attributed. Neither Lao Tse nor Chuang Tse would be attributed with the spirit of your sig by any means - it is anti-Taoist in the extreme.

      More than language, the flexibility of the Chinese mind is a very marvelous thing (nothing negative meant or implied). That's allowed for some - flexible - ideas as to what the Way of the Old Man may be - but your sig contains none of that. It's akin to the "Give a man a fish..." quote.

      Your follow-on remark regarding Einstein would by implication mean that you're (your sig is) giving a antecedent thought for Lao Tse's philosophy - is that your intention?

      Or are you saying that it's ok to misquote Lao Tse because even Einstein is misquoted?

      I hate the use of the net for the propagation of fallacious information.

      --
      Pathological kinda promises Path + Logical - but instead, you get stuck with pathetic.
    3. Re:What's up with your sig? by girlintraining · · Score: 1

      I don't have any intentions. I just thought it was a cool quote. From my english translation of Tao Te Ching, section LXIII (2); I have a translation of:

      Anticipate difficulties while things are still easy;
      achieve great things with small beginnings.

      --
      #fuckbeta #iamslashdot #dicemustdie
    4. Re:What's up with your sig? by morgan_greywolf · · Score: 1

      That's quite a bit different than your sig, though. There's a Grand Canyon's worth of difference between 'Anticipate difficulties while things are still easy; achieve great things with small beginnings.' and 'All difficult things have their origin in that which is easy, and great things in that which is small.' The first implies that that there are some things that are easy that will become difficult, the second says that all things that are difficult start out easy. At best, it's a misquote, at worst it is a deliberate mischaracterization of Lao Tse's words designed to deceive.

    5. Re:What's up with your sig? by girlintraining · · Score: 1

      The first implies that that there are some things that are easy that will become difficult, the second says that all things that are difficult start out easy. At best, it's a misquote, at worst it is a deliberate mischaracterization of Lao Tse's words designed to deceive.

      I was asked for a source. I think that's where it came from. There's no intent to deceive; Chineseenglish translations aren't easy, and my understanding of his teachings would find this an agreeable statement. This is really splitting hairs, and its pretty elitist to grind on someone for it. As long as we're quoting Lao Tse, I end this thread on this note:

      My words are easy to understand, and very easy to practise;
      yet there is no one in the world who can understand them and practise them.

      --
      #fuckbeta #iamslashdot #dicemustdie
    6. Re:What's up with your sig? by earlymon · · Score: 1

      I was asked for a source. I think that's where it came from. There's no intent to deceive; Chineseenglish translations aren't easy, and my understanding of his teachings would find this an agreeable statement.

      I appreciate the citation and don't think you're being deceiving. The progenitor of the alleged translation/quote is incorrect.

      This is really splitting hairs, and its pretty elitist to grind on someone for it.

      You turn a phrase nicely. On the other hand, asking a potential pal if they meant to do something isn't elitist - neither is it grinding on someone.

      Hold fast to center.

      --
      Pathological kinda promises Path + Logical - but instead, you get stuck with pathetic.
  38. Pulled Outdated Tech Note by macs4all · · Score: 5, Informative

    Does ANYONE RTFA?

    Oh, I forgot! This is Slashdot.

    Apple pulled the tech note because it was OUTDATED, not because they wanted to "censor" it.

    The "real" question is "Why was this a 'story' in the first place?" I believe it was 'planted' by Microsoft, to attempt to derail serious holiday Mac purchasing, by sowing the seeds of FUD.

    Show me even ONE true worm-type virus for OS X, and I will entertain the idea that there is something "there".

    Until then, it's just disingenuous FUD. (Which I think is the only kind of FUD available)...

  39. Dual-boot by jDeepbeep · · Score: 2, Informative
    The Apple Store description for Intego VirusBarrier X5 says this:

    Now that you've installed Windows on your Intel-based Mac, you're vulnerable to a whole new range of security threats: Viruses, spyware, adware, and hackers are all waiting to compromise your Windows setup. No matter if you're running Windows in Boot Camp, Parallels Desktop, or VMWare's Fusion, it requires Windows-specific protection. VirusBarrier Dual Protection is the answer. It provides security for both Mac OS X and Windows, ensuring that you'll have total protection for both operating systems.

    --
    Reply to That ||
  40. Safe! by kuzb · · Score: 1

    Any PC, Mac or otherwise, is 'safe out of the box'. It's not until you plug them in to the internet that you start to have problems. Looks like Apple is going to have to learn the hard way.

    --
    BeauHD. Worst editor since kdawson.
  41. Windows isn't that different by Fred+Ferrigno · · Score: 1

    There are malicious bits out there that will damage your system if you do something stupid, like install a Trojan or run an untrusted Office macro.

    Saying they require the user to do something stupid doesn't mean much because users do stupid things all the time. If you've ever tried to clean up someone's malware-laden Windows PC, you can usually track it down to something they did. Systems that were actually remotely exploited with no user interaction are rare in my experience.

  42. Mod parent Troll by csartanis · · Score: 1

    Microsoft can't or won't fix the security holes.

    Really? What are all those security updates on windows update then?

    I've never understood the reason for anti-virus software in general.

    Most security vulnerabilities are publicly disclosed before the vendor is notified. Virus writers can exploit a hole much quicker than a vendor can create, test and distribute a reliable fix. Once you have a virus, getting the patch for the vunerability doesn't magically disable it.

    1. Re:Mod parent Troll by pauljlucas · · Score: 1

      Virus writers can exploit a hole much quicker than a vendor can create, test and distribute a reliable fix.

      So then how is an anti-virus vendor able to react faster than the OS vendor? If they can't act faster, well then the OS vendor should simply incorporate what the anti-virus vendor is doing into the OS directly and then there's no need for separate anti-virus software: it's just part of the OS; if they can act faster, well then that's just lethargy on the part of the OS vendor and not a great argument to justify the existence of anti-virus software.

      P.S.: Modding as "troll" is the moderation equivalent of "anonymous coward."

      --
      If you reply, do so only to what I explicitly wrote. If I didn't write it, don't assume or infer it.
  43. Something to try: by kuzb · · Score: 2, Interesting

    Next time you think operating system XYZ is so secure that nothing unwanted can get in, go to defcon, turn on your laptop and it's wifi and connect to the local access point. I give you 10 minutes before someone is downloading all your porn.

    People who think anything is immune on a network are laughable.

    --
    BeauHD. Worst editor since kdawson.
    1. Re:Something to try: by rgviza · · Score: 1

      LOL yup. The best one yet is Sun's claim that they now have the most secure OS on the market, with "military grade" security.

      I almost fell out of my chair when I read that.

      -Viz

      --
      Don't kid yourself. It's the size of the regexp AND how you use it that counts.
    2. Re:Something to try: by rgviza · · Score: 1
      --
      Don't kid yourself. It's the size of the regexp AND how you use it that counts.
    3. Re:Something to try: by furball · · Score: 1

      "military grade" just means you're as vulnerable as the military is.

    4. Re:Something to try: by blai · · Score: 1

      Does it count if you implement your own wireless drivers?

      --
      In soviet Russia, God creates you!
  44. Me either by Anonymous Coward · · Score: 1, Funny

    I don't need AV either...I got me this new Vista box...Microsoft says it's the most secure yet!

  45. you can make it even shorter by yttrstein · · Score: 1

    You can make it even shorter than that:

    "Can you show me an infected OS X machine?"

    The answer of course is always "no".

  46. HA by Anonymous Coward · · Score: 0

    hmmm anyone else remember that it was the out of the box mac book air that was hacked within 10mins at cansec??? lol@ apple...

  47. FAIL out of the box more like! by Anonymous Coward · · Score: 0

    Let's see - web browser set to open 'safe' things by default, firewall turned off. Two nice attack vectors open right there. What else? Oh yeah, a lot of users just run the one account, which by default is an admin account (not root granted, but one password away from full access anyway - installer asking for password?).
    The funny thing is, proof of concept code for attack does exist (especially for browse-by Safari holes), but no one has yet built and distributed the end-to-end product, ready for mass market. That is the next step.

  48. MOD PARENT UP by Anonymous Coward · · Score: 0

    Well put sir.

  49. Mod parent up. by khasim · · Score: 1

    It seems that many people STILL do not understand that a computer "virus" (or trojan or worm) is NOT the same as a biological virus.

    It is a computer program SPECIFICALLY designed to exploit a weakness in another computer program.

    Simply by NOT running certain computer programs (example, anything related to ActiveX) you "immunize" yourself from any and ALL "viruses" that are designed to exploit that.

    So, going forward, it doesn't matter how many people are using your system. Without those specific programs, the viruses cannot infect your system.

    They do not "mutate" or "evolve" to attack other programs. The person writing the "virus" has to find a weakness in a different program and re-write the "virus" to attack that weakness.

  50. You're a fool... Apple doesn't lie by knaught · · Score: 1

    Let me get this straight... I'm supposed to believe OS X is invulnerable to viruses.. because apple says so... while at the same time understanding that even though the iPhone 3G was advertised being twice as fast, that I'm a fool to believe that statement to be true?

    1. Re:You're a fool... Apple doesn't lie by UnknowingFool · · Score: 1

      Unix (which OS X is) and Linx systems are invulnerable to viruses because how they work. Applications need to run explicitly and when run they have to be granted permissions to affect system files. The definition of a computer virus is a self-replicating and self-executing program that runs without the user's knowledge or permission. This is different from a Trojan which is a program that masquerade as having different purposes than what it really does. HotGirlsScreenSaver.exe might show you cute girls but may also be deleting files and harvesting all your personal information. So technically, OS X is invulnerable to viruses. All OSs are somewhat vulnerable to Trojans as they rely on user culpability.

      --
      Well, there's spam egg sausage and spam, that's not got much spam in it.
    2. Re:You're a fool... Apple doesn't lie by Tokerat · · Score: 1

      Let me get this straight... I'm supposed to believe OS X is invulnerable to viruses.. because apple says so... while at the same time understanding that even though the iPhone 3G was advertised being twice as fast, that I'm a fool to believe that statement to be true?

      Apple DOESN'T say the Mac is "invulnerable" to viruses, and never has. FAIL.

      PS: I've seen 3G vs EDGE data services on the new iPhones, and it is about twice as fast, which is what is supposed to be faster about the new iPhones. How come you're not complaining about Microsoft's "Windows: Life Without Walls" campaign, if you think Apple's ad was so fucking deceptive?

      --
      CAn'T CompreHend SARcaSm?
    3. Re:You're a fool... Apple doesn't lie by knaught · · Score: 1

      Heh... I was meaning to be sarcastic... didn't come across like that.

      ^|----- pwned.

    4. Re:You're a fool... Apple doesn't lie by david_thornley · · Score: 1

      Invulnerable to viruses? Applications may need to be run explicitly, but there's a heck of a lot of processes running on my Mac and Linux boxes that I never kicked off.

      All you need is some way to launch a process and you've got the makings of a virus. I haven't done a security audit (and am not really qualified), but there's got to be some way to go through Mac OSX and kick off an arbitrary process. I really don't think any general-purpose OS is perfect.

      --
      "When you have eliminated the unacceptable, whatever is left, however improbable, must be the truthiness" - Holmes
    5. Re:You're a fool... Apple doesn't lie by Tokerat · · Score: 1

      Oh.

      Reading it knowing that, I see it, but yea, a little tough to pick out.

      The WC3 just recently approved the use of a </sarcasm> tag (closing tag only, the proper insertion of an opening tag is left as an exercise for the reader), this might help you if you don't have a punchline or over the top obvious sarcastic phrase to include ;-)

      --
      CAn'T CompreHend SARcaSm?
    6. Re:You're a fool... Apple doesn't lie by UnknowingFool · · Score: 1

      Yes but somewhere you had to actually start a program to launch a process. Viruses by definition run by themselves without the user knowing. Basically all you have to do is get the virus on your Windows system and it would start running. On Unix and Linux systems, you can get an virus onto your machine, but until you actually run it, it does not execute.

      --
      Well, there's spam egg sausage and spam, that's not got much spam in it.
    7. Re:You're a fool... Apple doesn't lie by Anonymous Coward · · Score: 0

      Oh.

      Reading it knowing that, I see it, but yea, a little tough to pick out.

      The WC3 just recently approved the use of a </sarcasm> tag (closing tag only, the proper insertion of an opening tag is left as an exercise for the reader), this might help you if you don't have a punchline or over the top obvious sarcastic phrase to include ;-)

      duly noted. :D

  51. anonymous coward by Anonymous Coward · · Score: 0

    Im pretty certain there are going to people a lot of people saying "its go time!" and start to coding after this statement from apple. at least i would hope so. I can not stand people that boast how invincible their macs are. I like the OS, hate most of the users.

  52. What about tricking users? by JSBiff · · Score: 2, Insightful

    It may or may not be true that the various network daemons installed on most Mac OS X installs are 'secure' (I'll go with the premise for the time, but, really, who knows what currently undiscovered vulnerabilities therein lie? Yes, that applies for the same daemons installed on any Unix), but really, what protects Macs from the same kind of user 'tricking' that are commonly used against windows users.

    Things like:

    * A website of, err, questionable repute, which tells you that you need to download and run an installer for a new 'video player' to see videos on the website, but which is really the installer for a rootkit or botnet zombie.

    * An email claiming to have an attachment or a link to a file which purports to be some business related file, or a video or photo the receiver might find funny, or a holiday greeting card, etc, but is really the installer for a rootkit or botnet zombie.

    Don't say that Mac users are just too smart to fall for that kind of thing - I'm sure some of them are, but I'm equally sure some of them aren't.

    I think the main thing which protects Mac and Linux users from such things is mainly that, right now, the installed base for both O/Ses is just too small for anyone to care about attacking. But, the Mac community is rather larger, and growing somewhat quickly, so they could be soon a large enough user base to be 'worth' trying to exploit.

    1. Re:What about tricking users? by Todd+Knarr · · Score: 1

      One of the things that'll protect you is that, even in the case of a deceptive trojan, you don't have permission to install things into the system. That's one of the key differences between Windows and the rest of the world: the rest of the world doesn't treat every ordinary user as an administrator by default. So someone may trick you into running the installer for that rootkit, but the installer can't then put the rootkit into the system areas. The OS simply won't allow it to write to those areas. So it'll either fail, or it'll have to have the OS prompt you to allow it to mess with the system areas. Or it'll have to limit itself to installing only into user-accessible areas, in which case it won't be able to hide from utilities running from the administrative side of the system which don't access anything in your user-local areas. That makes it much easier to detect and clean up the infestation.

      And on most non-Windows systems, something asking to install itself into the system area is an unusual event. It happens, but rarely enough that most people stop and go "WTF? That's not supposed to happen..." and start poking around to see what's up. On Windows it's normal for an application to write libraries into the Windows system directories. Anywhere else, the automatic reaction to that is "OK, how'd I give it the wrong installation path?". That difference in expectations goes a long way to making life more difficult for trojans.

    2. Re:What about tricking users? by JSBiff · · Score: 1

      "So someone may trick you into running the installer for that rootkit, but the installer can't then put the rootkit into the system areas. The OS simply won't allow it to write to those areas. So it'll either fail, or it'll have to have the OS prompt you to allow it to mess with the system areas."

      There's one problem with this. . . the potential for un-patched vulnerabilities in user-accessible programs which allow privilege escalation. The original poster mentioned how, for a worm on the network to attack a Mac (or Unix, for that matter) system, there were only a few network services for it to exploit vulnerabilities in: ssh, postfix, apache, etc. I agree that is a pretty small 'footprint'. But, now if I run a program locally on my computer as my user account, the possibility exists that their is an unpatched vulnerability in some program somewhere which would allow for privilege escalation (anything which would be 'suid' root, like su/sudo [does OSX have an equivalent to su/sudo], the passwd/password command, etc), or by modification of a startup script or configuration file which does not have proper permissions set, so by running something locally, the 'footprint' of potentially vulnerable programs and files has just grown much larger.

      There's also a second problem with this. . .

      "Or it'll have to limit itself to installing only into user-accessible areas, in which case it won't be able to hide from utilities running from the administrative side of the system which don't access anything in your user-local areas. That makes it much easier to detect and clean up the infestation."

      Ok, the program might not be able to completely own your system and hide itself forever. But: If something runs as you, it can still search your user home directory, browser cache, etc looking for email addresses, credit card numbers, social security numbers, tax id numbers, addresses, bank account numbers, etc. Just because something doesn't run as root doesn't mean it can't do some serious harm to you.

      I remember hearing about a couple trojans a few years ago which were collectively dubbed something like 'ransomware', where the trojan would encrypt all your files, delete the originals, then give you a message about having to pay someone off to get the key to decrypt those files. I'm not sure how effective such a scheme would be, long-term, because any time you try to extort payment from someone, there is the possibility for law-enforcement agencies to 'follow the money' back to you and nail your butt. Also, if your 'victim' has a recent un-infected backup, they might just format the hard drive and do a clean restore. Still, anyone who got hit with a ransomware trojan would no doubt experience some serious inconvenience, or worse, from the experience.

      I'm just saying, it seems a little cocky of Apple to say that Mac's are 'safe' from viruses and trojans. On the other hand, plenty of PC owners who *did* own anti-virus software have gotten infected by programs that were not detected by the A/V software, so arguably nobody is really safe from viruses, even if they have A/V soft.

  53. That Sounds Like A Challenge by jerryodom · · Score: 0

    Way to throw down the gauntlet Apple. All you geek squad guys polish up on your Mac knowledge. You'll be repairing a lot more Macs in the near future.

    --
    For some reason I refuse to use either spell check or the spacebar properly.
  54. Macs DO have viruses! by Tokerat · · Score: 2, Insightful

    Well, they did under the old cooperative multitasking "old world" Macintosh System Software.

    I'm suprised that no one mentioned that we Mac users had a virus known as Oompa-Loompa starting on Valentine's Day, 2006.

    I found this stuff on About.com! C'mon, people! Firefox even has a Google Quicksearch built right in! Ctrl-L "google mac viruses" enter. No mouse even required.

    --
    CAn'T CompreHend SARcaSm?
    1. Re:Macs DO have viruses! by illumin8 · · Score: 1

      I'm suprised that no one mentioned that we Mac users had a virus known as Oompa-Loompa [about.com] starting on Valentine's Day, 2006.

      Unfortunately, it's not technically a virus. The Oompa-Loompa trojan installs itself to the user's ~/Library directory and runs when the user runs iChat. A trojan requires user interaction to launch, and doesn't self-propagate. There has still to this day been no virus or malware on Mac OS X that didn't require user interaction and stupidity to propagate itself.

      --
      "When the president does it, that means it's not illegal." - Richard M. Nixon
  55. Really, Apple? Are you sure? by Anonymous Coward · · Score: 0

    Assuming the summary is accurate and Apple really is taking a high-and-mighty attitude like this, someone REALLY needs to get a Mac virus out there just to prove to Apple how wrong they are about how safe Macs are.

    After reading some of the comments, I realize that this assumption is flawed, but I would love to see a news story one day on how a malicious program destroyed a significant portion of an OS's userbase.

  56. Macs have a HUGE architectural security advantage by TechnicolourSquirrel · · Score: 1

    That advantage is very simple. People with pirated copies of Windows cannot get security updates, due to DRM. People with pirated copies of OS X get all the updates, no questions asked. Viruses do not discriminate and are more likely to fluorish (and therefore threaten *your* machine) in an environment with a certain number of unprotected machines. All of the pirate copies of Windows out there become that vector, by Microsoft's design. Therefore, the installed Mac OS X userbase is at a massive architectural advantage for security compared to the Windows userbase, simply because Microsoft places the almighty dollar above all other considerations.

  57. Oh, do you mean this market share? by plasmacutter · · Score: 1

    Actually, people have been saying "One day, OS-X will have enough users that malware authors will target it the way they target Windows". That hasn't happened yet

    are you sure?

    --
    VLC FOR MAC IS DYING! IF YOU DEVELOP, PLEASE SAVE IT!!
    1. Re:Oh, do you mean this market share? by dhavleak · · Score: 1

      Yes - pretty sure :)

      To summarize your link: 10% of laptop sales in the US are now Apples. Add desktops to that number, add worldwide sales to that number, and add installed base to that number -- you get the (unscientific) ~5% share that keeps getting tossed around. We know this already

      As I said, Apple's sales are trending upwards - there's no question about it. But again, they don't have the numbers to make it a target for malware authors yet. And again, I'll get no joy from a Mac virus -- if Macs never exceed say 20% of the worldwide PC market (thus maintaining the element of 'differentness' that they have and also going below the radar of malware authors) I have no problem with that. I'm just pointing out the fallacy of the GP's statement (that because no virus has made it in the wild on OS-X in the last decade means that macs are inherently secure).

    2. Re:Oh, do you mean this market share? by Weedlekin · · Score: 1

      "they don't have the numbers to make it a target for malware authors yet."

      My theory is that there are three factors that account for the notable lack of really dangerous Mac malware:

      1) A paucity of expertise, especially in Eastern Europe, where Macs are extremely rare, and low-level programmers who know a lot about them are even rarer. This is in stark contrast to Windows, where there's a literally vast amount of information and plenty of ready-made free and commercial toolkits that potential malware authors can use to target XP in particular with relative ease.

      2) Macs are much more of moving target than Windows, where XP which was launched in 2001 is still dominant, with no sign of that situation changing for some years. This is far from being the case with Apple's user base, who are using two completely different CPU types to host OS X versions ranging from (at least) 10.3 to 10.5, so writing something that successfully targeted a worthwhile proportion of them before Apple got a patch out to close whatever hole(s) it uses is extremely difficult, especially given the fact that Mac owners seen to be more rigourous in applying the latest patches than Windows users.

      3) The average Mac user is far more likely to seek out both on-line and printed sources of Mac-specific information than the average Windows user, so they have a much greater tendency to hear about any threats and how to counter them before they have much of a chance to propagate.

      So while that 5% share which largely consists of the more affluent personal computer users looks like a fairly tempting target initially, it's virtually impossible for any malware author to realistically attack more than a small fraction of that 5% for a worthwhile length of time, and even that would require a lot of personal detective work and experimentation to achieve with the current levels of information and tools.

      --
      I'm not going to change your sheets again, Mr. Hastings.
  58. Here is my IP address, please try and hack my Mac by exabrial · · Score: 0

    ifconfig: 127.0.0.1 lo

  59. It really does just work... by Anonymous Coward · · Score: 1, Funny

    Just not that well. Or fast. Not that Apple would ever lie or mislead the user about their products, oh no...

    http://www.youtube.com/watch?v=oaN1Nz1Dyls

  60. I think I found the source of all the confusion by Holistic+Missile · · Score: 1

    This might be what started all of this: http://www.youtube.com/watch?v=hWi9xAAxOWE

    :D

    --
    When you're dead, you don't know you're dead. It only affects the people around you. Same thing when you're stupid.
  61. Re:Macs have a HUGE architectural security advanta by dhavleak · · Score: 1

    I guess you have a valid point there. I wouldn't call it an 'architectural' advantage, but that's just semantics.

    I have a hard time sympathizing with anyone pirating windows and then getting pwned by a virus of course, but it doesn't negate your point.

  62. Mac users are gay by Anonymous Coward · · Score: 0

    You know this to be true.

  63. Not all market share is the same by RexDevious · · Score: 1

    Viruses generally exploit users at some point, right? They may be wicked sick once there in there - but some numb-nuts had to open the "I Love You" attachment to get started.

    This is why both Linux and OSX viruses are lower than both what their market share AND security models alone can explain.

    OSX users are generally either newbies (Grandma) who don't know *how* to do anything that would compromise their systems, or techies who know better. When a newbie sees a prompt to enter the admin password, they ignore it, call someone for help, or turn off the computer and hope it doesn't happen again (I'm not making this up). A techie realizes that shouldn't happen when they visit a webpage, and leave.

    So... yes, when OSX market share increases to the point where there are enough "a little knowledge is dangerous" people on them, it'll finally break it's virus cherry. Until then, it'll have to get by with the

    "To complete the installation of this software, your computer must be restarted, and then submerged in orange juice" approach.

  64. Cue... by Monoliath · · Score: 1

    ...the worst most destructive virus to ever be created, and 1st to hit Mac's all on the internet...in 3, 2....1

  65. Use a Mac or Linux on a PC and you are by KozmoKramer · · Score: 1

    Use a Mac or Linux on a PC and you are safe 99.9999 % of the time. I have been using a distro of Linux for 4 years now, and have never gotten a virus while using Linux.

    Windows Users Insert FANBOY comments and insults here______________________________________________.

    --
    My name is Inigo Montoya. You killed my Father! Prepare to die!
    1. Re:Use a Mac or Linux on a PC and you are by Shados · · Score: 1

      Just don't be an idiot and you're safe 99.9999% of the time. I mean, I've been running Windows since 1999 (no, I'm not 16 years old, I was just raised in a family too poor to get a computer, hehe), no anti-virus, no firewall (aside for a NAT router starting quite a few years later), and I never got a virus while using it! Wow! Must mean Windows is SOOOOOOOOOOOOOOOOOOOOO secure!

      If you're a moron though...and I send you a Linux executable that will give me root access to your machine, with instruction saying "First, open a console, type sudo and...", well, you're gonna get owned. That is actually how the large majority of people on Windows get infected. Have you seen some of the spam/viruses targeting Vista?

      I've received some with instructions on how to go through UAC while installing "amazing new smilies!", including images on how to enter the admin password and how its super important. No home-targeted operating system can survive that.

    2. Re:Use a Mac or Linux on a PC and you are by KozmoKramer · · Score: 1

      That is the same argument I always hear from Windows users. I also always hear the argument that Windows is less safe because more people use it and write viruses for it. Even if more people used Linux there would not be as many viruses, or even any EFFECTIVE viruses written for Linux. The reason that this is true is because Windows is a different beast. Windows is a patchwork of coding, a Frankenstein monster of sloppy code pieced together with holes everywhere. Windows was originally a sloppy copy of an OS written by Apple. It is a COPY. A Sloppy copy.

      --
      My name is Inigo Montoya. You killed my Father! Prepare to die!
  66. Sounds like. . . by Hamoohead · · Score: 1

    . . .a challenge!

    --
    "If your parents never had children, chances are you wonât either." -Dick Cavett
  67. BSD by Anonymous Coward · · Score: 0

    mac? gotta love BSD...

  68. I guess everyone forgot... by FireXtol · · Score: 1

    PWN2OWN! Mac OS X 'lost', get over it. It has already been compromised. Install software that 97-98% of REAL PEOPLE use and there's a vunerability somewhere. Stop blaming the OS(it's only doing what it was made to do). If you have a firewall and 'magically' get infected... well it was really YOUR OWN DAMN FAULT! If you don't have a firewall... STFU, you're stupid... oh yea -get one. Then re-evaluate your software. You're welcome.

    --
    Enlightenment is the elimination of that which is unnecessary.
  69. The Real Reason by r0ni · · Score: 1

    Macs have no viruses because the authors of said viruses don't want to infect their own systems.

    The same applies for Linux.

    We are trying to get switchers here, lets not scare them away before we get their money!

  70. Oh goodie more TV ads coming by Anonymous Coward · · Score: 0

    Ever notice how around the time some bad press comes out the TV ads ramp up to say how much better their products are? I fell off my chair when I saw their current "green" commercial running for the first time spewing their usual FUD of how they are the bestests ever green company. Yeah you really engineered that cpu in your laptop didn't ya apple?

  71. nVIR is ancient and doesn't work anymore by Anonymous Coward · · Score: 0

    There were a lot of Mac viruses back before the OS X days. nVir was one, but none of them will run on OS X.

  72. Can't stop laughing...... by a1z26b2y25 · · Score: 1

    HA HA HA HA HA HA HA HA HA HA, , HA HA HA HA HA HA APPLE POLITICIANS, all .... sound ..... alike ..... HA HA HA HA HA HA HA HA HA HA, , HA HA HA HA HA HA ,

  73. macs are safe by andersen_hc · · Score: 1

    the recommendation was an old one. not a recent one. and, anyways, what is it with people trying to prove that macs can be hacked or infected? Any operating system has some kind of vulnerability or another. The real issue is whether the operating system in question was designed with security in mind, or did the company that produce it barely care until very recently and are trying their best to patch things over? I can't trust Microsoft to prioritize security over their other agendas. Macs are pretty much as safe as it gets for a casual user.

  74. Mac is clueless about security. by 8400_RPM · · Score: 1

    Saying macs are secure is ignorant and the sign they are clueless.

    I guess no one loads any 3rd party software on a mac. No one uses bittorrent, or firefox, or ANYTHING right? Fact is, you get a trojan on a mac, and you'll have your idenity stolen non-stop for years until you buy a new computer. And you'll never realize why it's happening.
    Amazing.

  75. Defense in depth by mysidia · · Score: 1

    It may be totally safe out of the box, for various reasons.

    But even THEN it is still best to have additional security measures in place to detect any known attacks / known spyware / malware, which script kiddies are sure to eventually develop if OS X ever gets above 10% market share.

    By detecting attempts to exercise known attacks, you alert the user that something is amiss, and then they can initiate standard security response procedures (format that system and perform a clean install, if root compromised -- or delete the user, reboot, and re-create the user with an empty home directory if user account compromised)

  76. Apple's "image" comes first by Anonymous Coward · · Score: 0

    Apple abuses their discussion forums, frequently deleting ("moderating") posts and content that doesn't suit a high, untarnished corporate image; especially anything overly critical of their internal processes.

    I'd take what content is there with a few grains of salt. It's clearly not democratic.

  77. Apple = Microsoft circa 1998 by Lord+Kestrel · · Score: 1

    Apple is acting just like the Microsoft of 10 years ago. Arrogant as fuck, and refuses to publicly acknowledge security problems until they have a patch out. It took Microsoft 3-4 years to finally begin changing that, lets see how long it takes Apple.

  78. As recently as yesterday at the Apple Store... by Douglas+Goodall · · Score: 1

    Having read an article about this issue, while at the Apple store I saw a copy of Symantec Anti-Virus for the Mac on the shelf with all the other software Apple sells. While it would be strange for Apple to try to dis-allow the existence of Symantec for Mac, actually having it in their store means they accept its value enough to want to make money off it. If it wasn't really needed, would they carry it on their shelf? Also Symantec may have to hope the Apple Mac platform needs antivirus as Microsoft has recently announced that they intend to give away antivirus software for free which could hurt Symantec's profits on the PC platform. Given that, I am watching carefully this issue about whether Mac users need to invest in yearly subscriptions to software that slow down their computers. Over the years I have been astounded at how badly Windows machines run when Symantec is installed, and how many error messages come up about Symantec software failing to terminate on time.

  79. Comment removed by account_deleted · · Score: 2, Insightful

    Comment removed based on user account deletion