Slashdot Mirror


Apple Acknowledges MacDefender

Trailrunner7 writes with an article in threatpost "Apple is planning to release an update specifically designed to protect users against the MacDefender malware that has been circulating for the last couple of weeks. The update for Mac OS X will automatically find and remove the malware on an infected machine and also will warn users if another infection attempt is detected.

314 comments

  1. Oh, great by elrous0 · · Score: 0

    I figured I would finally get my mom a computer that even *she* couldn't get infected, so guess what I got her for Mother's Day?

    Bloody hell.

    --
    SJW: Someone who has run out of real oppression, and has to fake it.
    1. Re:Oh, great by betterunixthanunix · · Score: 0

      My approach is cheaper: lock down the system. Install Fedora, give my mother a user that has type user_u in SELinux, and breath a little easier now that I know she cannot accidentally run some random program she downloaded. There are still vulnerabilities, but it would take a far more sophisticated attack than what one normally sees.

      --
      Palm trees and 8
    2. Re:Oh, great by snookerhog · · Score: 2, Insightful

      statistics say you still made the right choice.

    3. Re:Oh, great by robinsonne · · Score: 1

      I saw this on a laptop this week, and it was laughably easy to get rid of (under 5 minutes)

      Compared with the kind of stuff targeting PCs, this is/was a joke.

      top -u
      kill -9 [pid#]
      Drag to trash

    4. Re:Oh, great by CharlyFoxtrot · · Score: 1

      My approach is cheaper: lock down the system. Install Fedora, give my mother a user that has type user_u in SELinux, and breath a little easier now that I know she cannot accidentally run some random program she downloaded. There are still vulnerabilities, but it would take a far more sophisticated attack than what one normally sees.

      Kid Proofing a Mac With Parental Controls
      s/Kid/Parent/

      Allows you to limit the applications a user can execute.

      --
      If all else fails, immortality can always be assured by spectacular error.
    5. Re:Oh, great by Dog-Cow · · Score: 2, Funny

      I would think "Bloody hell" is always a poor choice of gift. But then, I don't know your mother.

    6. Re:Oh, great by Luckyo · · Score: 3, Interesting

      Early PC stuff was a joke too. Give it some time to get going.

    7. Re:Oh, great by betterunixthanunix · · Score: 1

      That is really not what I was referring to. I really just want to stop a particular user from running setuid/setgid programs and from running programs in their home directory. With Fedora that is literally a matter of clicking on 3 things, or equivalently running three commands in a terminal. It is not even clear to me that the Mac parental controls feature actually prevents users from executing programs in their home directories (e.g. a program they downloaded from some website).

      In any case, the real point here was that there is no reason to pay the Apple premium if your goal is to protect an unsophisticated user from malware.

      --
      Palm trees and 8
    8. Re:Oh, great by LoganDzwon · · Score: 1

      it's cool. If you RTFA Apple is going to patch and remove this crap from your mom's machine soon.

    9. Re:Oh, great by tepples · · Score: 1

      I really just want to stop a particular user from running setuid/setgid programs and from running programs in their home directory.

      But how long until computer makers start doing the same to even the computer's primary user, requiring end users to either A. go through the computer maker's app store or B. pay per year to unlock the privilege to run unapproved applications? Such cryptographic lockdown has been happening since 1985 in some markets.

    10. Re:Oh, great by mosb1000 · · Score: 1

      Give it some time to get going.

      I hope Apple doesn't take your advice! It would probably be best to nip this problem in the bud. That may discourage malware developers from choosing the platform.

    11. Re:Oh, great by gnasher719 · · Score: 1

      I figured I would finally get my mom a computer that even *she* couldn't get infected, so guess what I got her for Mother's Day?

      The solution is very simple: When the computer is first started, you choose a user name and password, and then _you don't tell your mother the password_.

      Disadvantage: If there is any maintenance that needs doing that requires the admin password, you'll have to visit your mother. Advantage: If there is any maintenance that needs doing that requires the admin password, you'll can to visit your mother, which should at least be good for some nice home-cooked dinner. And if she runs into MacDefender, that app may get downloaded and start an installer, but then it is stuck with a user who doesn't know the admin password. No admin password, no install.

      You may change "Software Update" and the iTunes updater and updaters for other software to not check for new versions automatically, because they will likely require a password which she doesn't have.

    12. Re:Oh, great by betterunixthanunix · · Score: 2

      Then I will stop buying from those computer makers. The lock down has to be under my control, and nobody else' -- I am the one who owns and administers the computer.

      --
      Palm trees and 8
    13. Re:Oh, great by erroneus · · Score: 2

      Give the Mac OS X Malware market time to mature. Mac OS X only recently became a "recognized target." Now Apple is trying to make it a "moving target" and a "reactive target" meaning they are essentially taking the Windows approach to security -- which is reactive. This means that with each new threat, a new response will be devised.

      They had an opportunity, early on, to create a heirarchical system that might protect the OS and, actually, I think they did... but we will see how it all works out. But when it comes to users installing and running programs at user level access? That's pretty much every OS, otherwise, such a system would not be usable at home or at the office.

      What makes malware laughably easy or difficult to remove is usually determined by how deep into the OS it can embed itself. With Windows, it happens a lot with increasing sophistication that targets not only the core OS, but also the countermeasures commonly deployed. So initially, in the absence of countermeasures, malware will target and run as the local users. When that stops working, it will find ways to embed itself into user applications (within those *.app folders that pretend to be entire programs) and then in the binaries that reside in the *.app folders... and then in user-accessible details in the OS and then in the OS itself as local exploits are discovered and run.

      So give it time for the war to heat up. It's coming.

    14. Re:Oh, great by mcneely.mike · · Score: 0

      with fedora this won't happen... it is open source and therefore cannot 'lock' someone into paying for 'blah blah', unlike apple and micro-soft.

      --
      soylentnews.org Go there to enjoy the people!
    15. Re:Oh, great by CharlyFoxtrot · · Score: 1

      That is really not what I was referring to. I really just want to stop a particular user from running setuid/setgid programs and from running programs in their home directory. [...] It is not even clear to me that the Mac parental controls feature actually prevents users from executing programs in their home directories (e.g. a program they downloaded from some website).

      That can be emulated by not giving them the admin password + enabling parental controls, it's an application whitelist.

      In any case, the real point here was that there is no reason to pay the Apple premium if your goal is to protect an unsophisticated user from malware.

      My point was that there's no reason to inflict Linux on them either ;-) The user might be more comfortable with an OS other than Linux.

      --
      If all else fails, immortality can always be assured by spectacular error.
    16. Re:Oh, great by FaasNat · · Score: 2

      I figured I would finally get my mom a computer that even *she* couldn't get infected, so guess what I got her for Mother's Day?

      MacDefender?

      --
      There's never enough when you have too little
    17. Re:Oh, great by tepples · · Score: 0

      Let me guess: You've stopped buying from Nintendo, Microsoft, and Sony.

    18. Re:Oh, great by bhtooefr · · Score: 1

      Not... necessarily. There is a way for most users to be happy, giving them software to install, without installing arbitrary software, and Apple even DOES this on one of their platforms.

      It's called locking the system down so that Apple approves every piece of software that runs, and not giving users admin.

      Problem is, it also means that, as you don't have admin rights on your own machine, you don't own your own machine.

    19. Re:Oh, great by betterunixthanunix · · Score: 1

      My point was that there's no reason to inflict Linux on them either ;-) The user might be more comfortable with an OS other than Linux.

      In my experience, the only time users become uncomfortable with GNU/Linux is when they start doing exactly the sort of things that a lock downed account should prevent them from doing. When all a user knows or cares about is launching a few programs -- a web browser, an email client, and a word processor -- then it hardly makes a difference what OS they are running. Once users start doing things like installing "cool little applications" that actually leave them worse off, or trying to fiddle with settings they need guidance for, things can become a problem -- but the great thing about locking down their accounts is that they are forced to contact you when they try to do that, before it can become a problem, and you have a chance to either teach them or at least explain why they cannot do what they were trying to do (e.g. because of malware or because it would make their system unusable).

      The argument that users are "uncomfortable with GNU/Linux" is predicated on the belief that users are not uncomfortable with some other system. When you are talking about moving someone from a Windows system to a GNU/Linux system, why do you think they will be more comfortable if instead you move them to a Mac OS X system? If they need to be given a locked down account for their own good, then it sounds like they are not very adept with computers to begin with, and GNOME would be no worse for them.

      --
      Palm trees and 8
    20. Re:Oh, great by betterunixthanunix · · Score: 1

      Yeah, is that so hard to believe?

      --
      Palm trees and 8
    21. Re:Oh, great by hairyfeet · · Score: 2

      And you have been able to do the same thing in Windows for a decade, by simply setting them up as a normal user and not handing them the password for admin. your point? in the end the simple fact is if a user has rights, they have the right to be stupid and there is no way to take away the "right to be stupid" part without taking away ALL of their rights.

      This is why you see much more infections on home users than corporate networks (well run networks that is) as the admins take away their rights, including the right to be stupid. But unless you want to trust the two Steves or the head of the repo or anybody else in charge of "doing no evil" and give away your rights you simply have to give them the right to be stupid. Because no matter how "smart" you make the OS in the end the user actually has to THINK occasionally and not abuse their rights.

      In the end you will see more and more "MacDefender" style infections, same as here in the shop I've seen infections go from Windows exploits to third party software to social engineering. Because at the end of the day the user will always be the weakest link and no amount of OS planning or protection will stop the user if they truly want the carrot the malware writer is offering, or simply refuses to think. it is the classic dancing bunnies problem and has been going on nearly as long as there have been PCs. Hell some of the first bugs I had to clean were boot sector floppy bugs, which spread by people copying warez. You offer the dancing bunny and the malware is just an added 'bonus" or in this case you spook the user into thinking they MUST have the malware to protect them from...what else? Malware! In the end you just can't stop stupid, sooner or later the user has to think or you have to take away ALL their rights, there really is no in between.

      --
      ACs don't waste your time replying, your posts are never seen by me.
    22. Re:Oh, great by Anonymous Coward · · Score: 0

      I figured I would finally get my mom a computer that even *she* couldn't get infected, so guess what I got her for Mother's Day?

      Bloody hell.

      So by not getting her a Linux box, you acknowledged they were more likely to get infected than a Mac.

    23. Re:Oh, great by elrous0 · · Score: 2

      I didn't get her a Linux box because a Macbook has a much more user-friendly GUI, much better support, and a much better chance of being supported by the software she uses (including some obscure software she uses to interface with her sewing machine, which only comes in Windows and Mac flavors).

      Linux is frustrating as hell even for *me*. The first time she calls with a problem and I tell her to open the command line interface, she's going to disown me (and then no more Christmas presents for me).

      --
      SJW: Someone who has run out of real oppression, and has to fake it.
    24. Re:Oh, great by Luckyo · · Score: 2

      Malware writers don't choose target platform based on how hard it is to write malware for it. They choose it based on what is the target of malware.

      Windows has been the obvious target because of its market share. As Mac OS market share grows, so does its attractiveness as target for malware.

    25. Re:Oh, great by socz · · Score: 1

      I hope you were joking about that... or did you mean to say you got her an OpenBSD system??? :P

      --
      My abilities are only limited by my imagination
    26. Re:Oh, great by MrNiceguy_KS · · Score: 1

      Windows 7 has application whitelisting as part of its parental controls as well.

      --
      Redundancy is good And also good.
    27. Re:Oh, great by cheeks5965 · · Score: 1

      how does your mom feel about how you treat her like a child?

      --
      -- Flame me and I will happily flame you back. Bring it!
    28. Re:Oh, great by betterunixthanunix · · Score: 1

      She is glad to not have to deal with malware, and since she generally called me up to ask for help with things before, there really is not much of a change. It is not like I failed to inform her of what I was doing to her system, and I am entirely willing to explain to her whatever it is that she asks. Really it is not as big of an issue as you seem to think -- in no way is there any disrespect and nobody is being treated as if they are unintelligent. We are not talking about a censorship/parental control program, we are talking about the equivalent of mounting home directories with the noexec flag.

      --
      Palm trees and 8
    29. Re:Oh, great by AlienIntelligence · · Score: 1

      I figured I would finally get my mom a computer that even *she* couldn't get infected, so guess what I got her for Mother's Day?

      Bloody hell.

      Or you could have given her a nice, older
      machine and just put a Live CD of Ubuntu
      on there.

      There, now was that so hard?

      -AI

      --
      For me, it is far better to grasp the Universe as it really is than to persist in delusion
    30. Re:Oh, great by cheeks5965 · · Score: 1

      If they need to be given a locked down account for their own good, then it sounds like they are not very adept with computers to begin with

      Is it unimaginable to think that your mom could learn how to improve her computer skills, or maybe even enjoy trying new things? Or maybe she gets a kick out of silly web stuff that you find childish. Or maybe, like so many people here, she wants some agency over the devices she uses. Maybe she resents your assumption that somebody needs to hold her hand all the time. I'm sure there would still be malware and other problems, but isn't it better to learn through your mistakes than being scolded for breaking a box?

      --
      -- Flame me and I will happily flame you back. Bring it!
    31. Re:Oh, great by AlienIntelligence · · Score: 1

      Early PC stuff was a joke too. Give it some time to get going.

      How is that comment interesting???

      Early PC stuff a joke? The early PC stuff I remember was
      some of the worst stuff out there! You usually found out
      you were infected when you had to take the HD out, put
      it in another machine and find out all of your files were gone.

      While I dislike the notion of a PC of mine turning into a
      zombie... I sure dislike it LESS than the early boot sector
      infectors and file and hard drive erasers of the early years.

      Stuff nowadays is less like a virus with intent on killing
      you and more of a parasite that requires it's host be alive.

      -AI

      --
      For me, it is far better to grasp the Universe as it really is than to persist in delusion
    32. Re:Oh, great by betterunixthanunix · · Score: 1

      Like I said, whenever she has a question, she asks. She also does, in fact, have full control over her computers -- at any time, she can have anything changed by myself or by others (I left single-user-mode available) if the security settings become a problem. It has never been a problem, and I have never "scolded" anyone -- a gentle explanation of why some action is being prevented is more than enough. If she wants to learn about her computer, she is entirely free to do so -- I have not actually done anything that prevents her from removing the security, and like I have repeatedly stated, I am entirely willing to explain anything that she asks about.

      --
      Palm trees and 8
    33. Re:Oh, great by Anonymous Coward · · Score: 0

      Linux is frustrating as hell even for *me*. The first time she calls with a problem and I tell her to open the command line interface, she's going to disown me (and then no more Christmas presents for me).

      Ok, I know this sounds harsh and aside from the
      sewing machine part... that's just sheer ignorance.

      Obviously you are referring to "Linux" as Kleenex
      here. Because with as many distros and as many
      desktops, it would be impossible to avoid a good
      combo for her. As much as most of us REALLY
      HATE the new Ubuntu... Unity is pretty nice for
      novice users.

      As far as admin. Why FTLoG would you have a novice
      do anything on the command line? Is there something
      that is keeping you from using VNC, SSH, or a program
      like NoMachine to remotely admin your mom's machine?
      [ http://www.nomachine.com/ ]

      I've been using remote admin to fix servers under my
      auspices for a decade and a half as have most of the
      IT world.

      -@|

    34. Re:Oh, great by cheeks5965 · · Score: 1

      a gentle explanation of why some action is being prevented is more than enough.

      the only way to learn is to learn by breaking things then cleaning them up. No manner of safety glass / training wheels / cushioned corners / walled gardens is a replacement for that.

      --
      -- Flame me and I will happily flame you back. Bring it!
    35. Re:Oh, great by betterunixthanunix · · Score: 1

      Yes, if my mother was cleaning up the computer and not just calling me and having me do it (or worse yet, paying someone else to do what I would have done), then yes, I would agree. Like I said, if she wants to start, the SELinux could be put into permissive mode or even disabled at any time -- the security is only mandatory to the point of booting into single user mode. I would even give her step-by-step instructions on how to do it, if she wanted or expressed even the slightest bit of interest.

      I became the family IT guy over a decade ago, and in that time, I have been the one who gets called in to clean up when things go bad. With malware getting nastier and me getting busier, that really cannot continue; things cannot go bad as often as they used to, and that is where SELinux comes in.

      Just so the message is clear, since you seem to thing that I have set up some kind of iOS clone: all anyone would have to do is boot into single user mode and run three commands, and the system has the same SELinux policy it had when it was freshly installed. There is really no effort to stop anyone from learning if they want to, this is just a way to get more time between phone calls asking for help.

      --
      Palm trees and 8
    36. Re:Oh, great by Luckyo · · Score: 1

      Early stuff was crappy viruses like Format A, that did absolutely nothing but replicate themselves. You could run f-prot from inside the infected OS and catch everything.

    37. Re:Oh, great by toddestan · · Score: 1

      What are you talking about? The early viruses from the 1980's and 1990's were nasty. They'd trash your partition table and MBR, erase your files, corrupt your files, modify your executables, and render your floppies unreadable. Basically kiss your data goodbye. The ones nowadays are relatively benign. They can be nasty to get rid of if you try and go with the clean up route, but it's easy to back up your data files, nuke the installation, and start over.

      Of course, with that said, I do remember a few viruses from back in the day that did silly stuff like play music from the beeper and were otherwise harmless.

    38. Re:Oh, great by DaVince21 · · Score: 1

      Why is only 2/3rd of that terminal commands? There's something called rm, you know...

      --
      I am not devoid of humor.
  2. Kudos to Apple by RogueWarrior65 · · Score: 2, Interesting

    IMHO, Apple is taking the bull by the horns and not only fixing the problem personally but also not charging an annual fee for the privilege of cleaning your system. Well done.

    1. Re:Kudos to Apple by royallthefourth · · Score: 3, Informative

      Kudos to Apple for doing what Microsoft has been doing for many years: the monthly updated malicious software removal tool included in Windows Update.

      If they still do that. I haven't run Windows in a couple years...

    2. Re:Kudos to Apple by icebraining · · Score: 2

      They do. They also have Windows Defender, which protects against other stuff like spyware.

    3. Re:Kudos to Apple by Anonymous Coward · · Score: 1

      Kudos to Apple for doing what Microsoft has been doing for many years: the monthly updated malicious software removal tool included in Windows Update.

      In Apple's defense, it's not like they had a reason for doing this until now.

    4. Re:Kudos to Apple by CharlyFoxtrot · · Score: 1

      Apple treating this like what it is, a very minor security update. Won't stop the trolls trolling trolls though.

      --
      If all else fails, immortality can always be assured by spectacular error.
    5. Re:Kudos to Apple by Richard_at_work · · Score: 1

      And of course Security Essentials.

    6. Re:Kudos to Apple by tgd · · Score: 3, Informative

      Windows Security Essentials covers both virus and spyware scanning, and is free. And as you said, Microsoft pushes out updates fairly regularly to their malware removal tools.

      As long as you're on an up-to-date validly-licensed copy of Windows 7, and you don't do some asshat thing like shut off automatic updates, Win7 is pretty solid out of the box. MSE isn't there by default, but I believe if Windows detects you don't have some other virus scanner installed, it will list it as an important update in Windows Update.

    7. Re:Kudos to Apple by Teckla · · Score: 2, Insightful

      IMHO, Apple is taking the bull by the horns and not only fixing the problem personally but also not charging an annual fee for the privilege of cleaning your system. Well done.

      Unless and until Apple disables the setting on Safari that causes the MacDefender Trojan to be automatically downloaded and executed just by visiting a malicious web page, Apple has not done a good job, in my opinion.

      Until then, malware authors can continue to abuse the "download safe content" feature in Safari. Hopefully, recent events will help educate users that they should immediately quit any installers that get automatically downloaded and executed that they did not ask for.

    8. Re:Kudos to Apple by Kyusaku+Natsume · · Score: 1

      What they should have done since Safari 2 is to uncheck by default the "Open safe files" preference in Safari. That option enabled by default is almost like they are begging for malware to happen since it auto mounts program distribution disk images.

      --
      Mexico: 100% conservative's America now!
    9. Re:Kudos to Apple by onefriedrice · · Score: 1

      Kudos to Apple for doing what Microsoft has been doing for many years: the monthly updated malicious software removal tool included in Windows Update.

      Only because it's been a problem on Windows for much longer, and considerably longer even than Microsoft has been releasing such "tools." In comparison, it's only the first modern, semi-widespread malware available for OS X, and apparently Apple is choosing to get involved.

      --
      This author takes full ownership and responsibility for the unpopular opinions outlined above.
    10. Re:Kudos to Apple by benjymouse · · Score: 5, Informative

      Windows Defender is add-on software because the OS itself doesn't provide enough defense.

      No. It is add-on because MS cannot bundle such application for anti-trust concerns. Same with security essentials.

      --
      Reading slashdot one-liner: (irm http://rss.slashdot.org/Slashdot/slashdot).rdf.item | fl title,desc*
    11. Re:Kudos to Apple by amliebsch · · Score: 3, Funny

      That's kind of like saying that training wheels are bicycle add-ons because the bike itself doesn't provide enough balance.

      True, for some users.

      --
      If you don't know where you are going, you will wind up somewhere else.
    12. Re:Kudos to Apple by DJRumpy · · Score: 4, Insightful

      The software downloads and opens the installer if you agree to 'scan' your computer, but it certainly doesn't install. You have to agree to install it and then put in your admin password. Unless you do that, it won't go anywhere. You can always just cancel the install and drop it in the trash. Pretty convincing hack though except that it crashes most of the time.

      I agree though that they should disable the option to automatically open 'safe' attachments. It's a common vector of infections on a Windows PC and never a good idea. Some times making things too easy for an end use is just begging for trouble. It's the first thing I turn off whenever I setup a Mac for someone.

    13. Re:Kudos to Apple by RogueWarrior65 · · Score: 1

      I'll admit that I don't know how it works on the Windows 7 side. XP is still pretty porous. But I'm forced to ask: if Microsoft is so good at it, why are there products like Norton, McAfee, and those annoying ads for DoubleMySpeed.com? "My computer was on it's last legs. Now it's like new again!" *facepalm*

    14. Re:Kudos to Apple by CharlyFoxtrot · · Score: 1

      There probably isn't such a thing as a "safe file." Well, they've still got time to change the defaults in Lion.

      --
      If all else fails, immortality can always be assured by spectacular error.
    15. Re:Kudos to Apple by ArcCoyote · · Score: 2

      Not only that, MS provides free, excellent AV in the form of MS Security Essentials.

    16. Re:Kudos to Apple by maxume · · Score: 1

      User installed malware is the bigger problem on Windows too.

      There are still issues with remote exploits and autoruns and whatnot, but most malware is still installed by users.

      --
      Nerd rage is the funniest rage.
    17. Re:Kudos to Apple by Skuld-Chan · · Score: 1

      Ever since the dawn of MSRT (the malicious software removal tool) which has been around for the last 6 years Microsoft has been doing exactly this.

    18. Re:Kudos to Apple by Anonymous Coward · · Score: 0

      Please keep your misinformation to yourself. You have to click a link to download the software, THEN you have to launch it yourself, THEN you have to authorize it with an admin password.

    19. Re:Kudos to Apple by royallthefourth · · Score: 1

      What makes you think Apple is any better at it? I had XP going for years with no viruses or virus scanners, no need to reboot aside from updates and driver issues, and none of that extraneous reformatting so many dweebs talk about doing. The brand new Mac I use at work doesn't have any trouble with viruses either, but for some reason I can't use it for more than a week without needing to reboot because it becomes unusably slow. I don't know what the culprit is exactly, but my wife's Apple laptop has similar behavior and I'm inclined to think it's the operating system itself.

      What I can say for sure is that XP never caused me so many problems and even when my current favorite OS (Arch Linux) has its occasional issues, they can be permanently fixed either by waiting a few days for an update or tweaking some config file.

    20. Re:Kudos to Apple by Shrike82 · · Score: 1

      Nah, they're clearly being impartial and delivering on their commitments: providing a mechanism that ensures that infecting peoples' Macs "Just Works"!

      --
      You can advertise in this sig from as little as £99.99 a month!
    21. Re:Kudos to Apple by Anonymous Coward · · Score: 0

      95% market share mainly.

    22. Re:Kudos to Apple by ColdWetDog · · Score: 1

      Kudos to Apple for doing what Microsoft has been doing for many years: the monthly updated malicious software removal tool included in Windows Update.

      OMG. Patch Tuesday comes to OS X! NO!!!!!

      --
      Faster! Faster! Faster would be better!
    23. Re:Kudos to Apple by rockman_x_2002 · · Score: 1

      Because for whatever reason, some people seem to think that free software is inferior to paid software, and that a product is only good if you have to shell out money for it. And the more money you shell out, the better it is, because you have to pay for it! At least, that's their thinking. Thus you have products like Norton, McAfee, and websites like DoubleMySpeed and FixMyPcFree (gag) that are actually making money on the same principle, and they do nothing more than a typical end user can do with free software and just a little bit of ingenuity and knowhow, and a cursory glance at Google for directions.

    24. Re:Kudos to Apple by Anonymous Coward · · Score: 0

      Won't stop the trolls trolling trolls though.

      I'll bet I can troll better than you can!

      Windows rocks!
      Evolution is bunk and creation is proven!
      Obama's an idiot!
      Ford's better than Chevy!
      ATI sucks and NVidia rocks!
      Republicans are morons!
      Democrats are idiots!
      Linux is worthless!
      Glenn Beck is a prophet!

      Do I win?

    25. Re:Kudos to Apple by ColdWetDog · · Score: 1

      The brand new Mac I use at work doesn't have any trouble with viruses either, but for some reason I can't use it for more than a week without needing to reboot because it becomes unusably slow. I don't know what the culprit is exactly, but my wife's Apple laptop has similar behavior and I'm inclined to think it's the operating system itself.

      Make sure that the maintence scripts are running. (Yeah, yeah, it just works ....)

      --
      Faster! Faster! Faster would be better!
    26. Re:Kudos to Apple by ColdWetDog · · Score: 2

      Or just not run Safari in the first place. IE for the win!

      --
      Faster! Faster! Faster would be better!
    27. Re:Kudos to Apple by Relayman · · Score: 1

      Actually, Apple has been doing it for a while, too. They just don't need to have a separate program to do it with. If you don't believe me, I'll dig up the appropriate /. stories.

      --
      If I used a sig over again, would anyone notice?
    28. Re:Kudos to Apple by tepples · · Score: 1

      As long as you're on an up-to-date

      What's the best practice when reinstalling Windows from disc so that the computer doesn't get owned before it finishes downloading the updates over a slow Internet connection?

      validly-licensed copy of Windows 7

      Does Microsoft pull crap like considering my copy of Windows 7 no longer validly licensed if I travel to another country? I seem to remember that Microsoft region-codes Windows. For example, it has reserved some versions of Windows, such as Windows Vista Starter and Windows 7 Home Basic, exclusively for developing countries.

      and you don't do some asshat thing like shut off automatic updates

      Is it also asshat to set Automatic Updates to download updates automatically and ask me when I'm ready to install them? Because I've had unsaved changes destroyed by automatic installation of updates and automatic restart of the computer under Windows XP, and I'm considering buying a computer with Windows 7.

    29. Re:Kudos to Apple by makomk · · Score: 1

      Wow. Even on Linux, the scheduled daily/weekly/monthly maintenance scripts are set up in a way that doesn't assume that your computer is running 24/7 and have been for ages.

    30. Re:Kudos to Apple by _0xd0ad · · Score: 1

      Does Microsoft pull crap like considering my copy of Windows 7 no longer validly licensed if I travel to another country?

      Well, it didn't when I traveled to Europe.

    31. Re:Kudos to Apple by yodleboy · · Score: 2

      "if Microsoft is so good at it, why are there products like Norton, McAfee.."

      Because Norton and McAfee are very, very good at making people afraid and making PC's seem much more complicated than they are. When Microsoft Security Essentials is less intrusive, hogs far fewer resources and doesn't require a system reinstall to remove, it doesn't say much for the quality of Norton or McAfee products. In fact, most free tools are as good or better. But... McAfee and Norton sell "safe" software in a box on the shelf at Best Buy.

      As for DoubleMySpeed... From what I can tell from friends and relatives, the kind of people that end up needing it are the kind that leave all the bloatware on their new pc; install every little app or game that looks cute as well as its attendant crapware/plugin/toolbar; never take a look at the task bar to see that 45 apps are loading on startup, and finally they never, ever uninstall anything. "When did you use that last?" "Oh maybe 2 years ago". Load up any system with a bunch of crap and run it all at once and you'll need double my speed too. It's a user behavior issue mostly.

    32. Re:Kudos to Apple by joeyblades · · Score: 2, Insightful

      You are confused. Safari does not automatically download the trojan just by visiting the page, you have to click on one of the download buttons. Of course, they are disguised, but the user still has to be tricked into initiating the download. Safari does not automatically execute the trojan either. If you have not unchecked the "Open safe files" box in the general preferences, Safari will open the installer, but nothing is executed until the user approves the install. Even then, unless you are foolishly running as an admin, the OS will require your admin password before the install can proceed.

      Any operating system that would prevent user stupidity would be crippling to a savvy user.

    33. Re:Kudos to Apple by benwiggy · · Score: 1

      Apple needs to modify what is included in the term "safe files". Text files, images, PDFs, yes (particularly if you're opening them in Preview, not Adobe Reader. But disk images and installer packages should not be included in the definition.

    34. Re:Kudos to Apple by stephathome · · Score: 1

      Too true. Describes my inlaws precisely. They buy every upgrade Norton offers them, and don't trust me when I say there are free alternatives. Never mind that I fix every other problem they have with their computer, only the guy from Cox is right when it comes to saying Norton is the right protection, and IE the best browser. Kind of amuses me that they won't take free even from Microsoft, but whatever.

    35. Re:Kudos to Apple by Anonymous Coward · · Score: 0

      Don't get excited. It's a myth that you have to run the OS X scripts manually.

    36. Re:Kudos to Apple by weicco · · Score: 1

      I'd like to add the following. It (and all the other anti-spyware tools) is an add-on because OS doesn't know what executable is malware and what is not. OS happily executes programs user decides to run. This goes for every OS out there. And this is why we are reading this particular piece of news.

      --
      You don't know what you don't know.
    37. Re:Kudos to Apple by amicusNYCL · · Score: 1

      What's the best practice when reinstalling Windows from disc so that the computer doesn't get owned before it finishes downloading the updates over a slow Internet connection?

      Has that really ever been a problem? I used to remember hearing theoretical numbers about how long it would take an unpatched XP to get compromised, but I've never actually heard of it happening in reality. I don't even know how many copies of XP I've installed over the years and have put online to download all kinds of things before anything was patched, and the system never got compromised before I could do so. I've got a friend that runs a computer maintenance/install/repair business and he's never mentioned having that happen with any of his clients.

      --
      "Our two-party system is like a bowl of shit looking at itself in a mirror." - Lewis Black
    38. Re:Kudos to Apple by Teckla · · Score: 1

      The software downloads and opens the installer if you agree to 'scan' your computer, but it certainly doesn't install.

      Merely browsing to a web page, like clicking a link on a Google Image Search result, automatically downloads and runs the installer. I've tested this on multiple machines.

      Click on search result -> automatic download of installer -> automatic execution of installer.

      Yes, immediately exiting the installer results in no harm to your computer.

    39. Re:Kudos to Apple by Teckla · · Score: 1

      You are confused. Safari does not automatically download the trojan just by visiting the page, you have to click on one of the download buttons.

      No. It is you that is confused. I have tested this on multiple machines.

      Safari -> Click on Google Image Search result -> Fully automatic download of malware installer -> Fully automatic execution of malware installer

      If you exit the installer, however, nothing bad happens to your computer.

      I am trying to hammer these facts home because there is so much misinformation on the subject.

      I would like to emphasize that the user does not need to manually initiate the download.

    40. Re:Kudos to Apple by neoform · · Score: 1

      >you don't do some asshat thing like shut off automatic updates

      Yeah, I have no idea why i wouldn't want a notifications every fucking day telling me i need to restart my computer via pop up every 10 minutes.

      --
      MABASPLOOM!
    41. Re:Kudos to Apple by operagost · · Score: 1

      The firewall is on by default, so you won't be owned. By the way, there was a firewall in the first release of XP, but it was harder to use. Still, it could be turned on before you connected to the internet. Oh, and automatic updates have always been capable of being set to wait for you to reboot. If your settings changed, it's because your domain policy or some other software (like crappy antivirus) changed it.

      --

      Gamingmuseum.com: Give your 3D accelerator a rest.
    42. Re:Kudos to Apple by BlueStraggler · · Score: 1

      I suppose even a .txt file is unsafe if it includes instructions for sending your credit card info to Russia, which is all that MacDefender really does in the end.

      The advantage of Safari's approach is that they don't define "safe". This allows Apple to adjust the safety heuristics from update to update without changing the default security setting.

    43. Re:Kudos to Apple by cavreader · · Score: 1

      Apple has decidied to get involved? Well good for them. Up to yesterday if you called their user support help line the people answering the calls were specifically told to downplay the whole McDefender problem. They were specifically told to not give out instructions on how to manually remove the malware or even really aknowledge it as a problem while basically jerking the customer around until they gave up. People have been saying for years that the MS security problems were a result of their large market share thus making a big target and that the other OS's would be just as vulnerable if anyone thought it was worth the trouble to target. Sort of looks like that idea is going to be put to the test. Android also presents a juicy target today and if you think that OS can't be compromised you are living in fantasy land.

    44. Re:Kudos to Apple by bhtooefr · · Score: 1

      It can happen if you use one of the following methods to connect to the Internet:

      Cable or DSL modem, USB attached
      Cable or DSL modem that doesn't use NAT natively, directly ethernet attached
      Dial-up

    45. Re:Kudos to Apple by DJ+Particle · · Score: 1

      Because they were waiting to put out an official release, and didn't want anything coming out of the tech support reps' mouths to be taken as official policy until they released their statement.

      Microsoft does the same thing.

      Also, OS X can't be compromised if you're not stupid. So far, all of these Mac trojans I've been seeing require a PEBCAK. Show me an anti-virus program that's 100% reliable against PEBCAKs and I'll say you found the Holy Grail!

    46. Re:Kudos to Apple by athmanb · · Score: 1

      What's the best practice when reinstalling Windows from disc so that the computer doesn't get owned before it finishes downloading the updates over a slow Internet connection?

      Use Windows XP SP2 or later (the integrated firewall started then) and don't browse the Internet until the updates are done.

      Does Microsoft pull crap like considering my copy of Windows 7 no longer validly licensed if I travel to another country? I seem to remember that Microsoft region-codes Windows. For example, it has reserved some versions of Windows, such as Windows Vista Starter and Windows 7 Home Basic, exclusively for developing countries.

      >

      You can only buy the region restricted versions in shops in developing countries, but you can install them anywhere and take the PC they are installed on anywhere.

    47. Re:Kudos to Apple by Anonymous Coward · · Score: 0

      Windows Defender is add-on software because the OS itself doesn't provide enough defense. . "

      You realize that Apple just have had to introduce same kind of anti-malware software for OSX, which this whole story is about?

    48. Re:Kudos to Apple by tgd · · Score: 1

      Is it also asshat to set Automatic Updates to download updates automatically and ask me when I'm ready to install them? Because I've had unsaved changes destroyed by automatic installation of updates and automatic restart of the computer under Windows XP, and I'm considering buying a computer with Windows 7.

      As long as you do install them in a timely manner. Otherwise, let the OS do what it needs to do and complain to your software vendors for their buggy software. The OS notifies the applications that a restart is needed, and the applications can request to be re-launched and given back state they asked to have cached during the reboot.

      Properly written apps shouldn't lose you any data on an forced OS reboot.

    49. Re:Kudos to Apple by tepples · · Score: 1

      Use Windows XP SP2 or later (the integrated firewall started then) and don't browse the Internet until the updates are done.

      In other words, make sure to buy the service pack discs as they come out so that I don't have to connect to the Internet just to get a service pack.

    50. Re:Kudos to Apple by man_of_mr_e · · Score: 1

      That hasn't been a problem since XP SP2. The problem was that in versions previous to SP2, the network connection became active before the firewall was started, leaving a small window of opportunity for worms to attack before the firewall was raised. Post SP2 (that is, machines installed with a version of XP that was updated to SP2 on disk), Vista and Windows 7 don't have that problem.

    51. Re:Kudos to Apple by joeyblades · · Score: 1

      I don't completely understand what you mean by this:

      Click on Google Image Search result

      However, you said "just by visiting", I said "you have to click" and you said "click"...

      Also, you are confusing automatically running an installer with automatically running the malware code.

      Anyone who authorizes the operating system to install a program that did not come from a trusted source, deserves what they get. It's an important life lesson that some people can only learn by doing...

    52. Re:Kudos to Apple by dhavleak · · Score: 1

      The advantage of Safari's approach is that they don't define "safe". This allows Apple to adjust the safety heuristics from update to update without changing the default security setting.

      That's the part I can't find mentioned anywhere -- what exactly constitutes a "safe" file? Is that the 'exploit' here? That somebody has figured out how to pose as a "safe" file?

    53. Re:Kudos to Apple by dhavleak · · Score: 1

      Click on Google Image Search result

      However, you said "just by visiting", I said "you have to click" and you said "click"...

      I think the difference is clicking on a search result in google, vs clicking on something like a viagra ad or fake antivirus ad on the page that result took you to. You would expect the search result to be benign -- you have no way of differentiating one thumbnail in your search results from another with respect to malicousness -- this is the SEO poisoning part of the exploit.

    54. Re:Kudos to Apple by Coren22 · · Score: 1

      Not to utterly disagree with you, but some recent MS updates have been rebooting PCs at work, and I set the policy to ask the user to install (along with our SUS server)

      --
      APK likes to ask for responses to the same things over and over. Maybe he just likes the responses?
    55. Re:Kudos to Apple by Coren22 · · Score: 1

      I hear you can get the slipstreamed disks off of torrent sites...oh...wait...

      --
      APK likes to ask for responses to the same things over and over. Maybe he just likes the responses?
    56. Re:Kudos to Apple by Coren22 · · Score: 1

      Every single day? You must not update very often, as there is a release schedule for Windows Updates that is monthly now, not daily.

      --
      APK likes to ask for responses to the same things over and over. Maybe he just likes the responses?
    57. Re:Kudos to Apple by AlienIntelligence · · Score: 1

      You sir have my +1 Insightful mod point that I unfortunately don't have access to today.

      -AI

      --
      For me, it is far better to grasp the Universe as it really is than to persist in delusion
    58. Re:Kudos to Apple by cavreader · · Score: 1

      "OS X can't be compromised if you're not stupid" I can say the exact thing for a Windows box. I personally never have had malware of any kind since 3.11. MS has had a bigger user base and thus a better probability of people doing something stupid like not setting the most basic security settings, running everything as an admin user, clicking on links in e-mail from anyone, and not being diligent in keeping their system updated with service packs. All basic common sense precautions and second nature for the technically adept.

    59. Re:Kudos to Apple by WuphonsReach · · Score: 1

      What's the best practice when reinstalling Windows from disc so that the computer doesn't get owned before it finishes downloading the updates over a slow Internet connection?

      Same as it has been since the days of WinXP (prior to SP2 or SP3). Hook it up behind a NAT device or a firewall that only allows outbound connections.

      Doesn't help with dial-up cases, but anyone installing a Windows box from scratch should be knowledgeable enough to use a NAT router or outbound-only firewall.

      --
      Wolde you bothe eate your cake, and have your cake?
    60. Re:Kudos to Apple by joeyblades · · Score: 1

      Hmmm... Well I have never observed this, but it sounds to me like the issue would be with the way Google builds it's links to search results, not with Safari, per se. Safari won't download anything unless you request it and to request it you have to perform some sort of click. Unfortunately, a cleverly crafted page can trick you into requesting it... and so... apparently can a poorly crafted Google results page.

      Can you help me observe this behavior? I don't know what to search for to make it happen.

    61. Re:Kudos to Apple by Stupendoussteve · · Score: 1

      Yes, it has been an issue, but only with a direct connection to the Internet.

      Directly connected Windows XP would generally have contracted a worm before the installation process had even completed, before creating a user account. A lot of the danger with this was fixed in SP2, because the firewall was enabled during the install process at the same time the network was enabled.

    62. Re:Kudos to Apple by Stupendoussteve · · Score: 1

      In general a safe file is a dmg. There is no exploit taking place here. Someone gets a drive by download, Safari opens the safe file (it is safe, they are not infected at this point), it says they need to install MacDefender, and *they choose to install MacDefender*. If Safari isn't configured to open safe files, then it just downloads the file but doesn't open it. A user could still, and many will, open the downloaded dmg and end up in the same boat.

    63. Re:Kudos to Apple by Anonymous Coward · · Score: 0

      anybody seen a computer infected with malware/spyware that prevents MS Security Essentials from starting or updating? Same malware also prevented Windows Update from querying MS servers for updates. I've seen this on Windows XP and Vista within the past year. Perhaps this is a consequence of running with admin privileges? Faith in virus scanning software on MS platforms collapsing. I haven't browsed the web with any software running on an MS platform by choice for about 3 years now. Waiting now for malware that perverts System Restore data--perhaps SR already is worthless, we just haven't noticed the symptoms.

    64. Re:Kudos to Apple by dhavleak · · Score: 1

      Are all dmg's really considered safe by Safari?

    65. Re:Kudos to Apple by dhavleak · · Score: 1

      Can you help me observe this behavior? I don't know what to search for to make it happen.

      I don't know what to search for either -- but that's what I gathered from what I've read about Mac Defender so far (seriously -- the lack of details is fucking apalling -- and the fan boy wars make it even harder to sift out details from among the rubble).

      I read somewhere that Mac Defender relies on SEO poisoning to get users to get users to download the installer -- so putting on my thinking hat (a black hat obviously), my dream SEO poisoning exploit would try to present relevant images as the thumbnail in the result, but the link that the result points to is actually the installer (not a webpage). The user presented with a bunch of search results would have no way of knowing which results are benign and which ones are malicious. On clicking a malicious result, since that link points to an installer (i.e. a type of file that is to be automatically downloaded, and run, rather than a webpage), Safari will download the file, and run it.

      Above paragraph is my conjecture, based on reading the words "SEO poising". I can't test it as I don't have a Mac. And I would rather kill myself than parse through a million fanboy comments hoping someone has provided pertinent details. Looking for a poisoned result on my Win7 machine would be rather brave (I mean, what if I find something? :P).. And I'm at work right now (late, I know) and my Narwhal laptop is at home so I can't use that either.

    66. Re:Kudos to Apple by bemymonkey · · Score: 1

      "What's the best practice when reinstalling Windows from disc so that the computer doesn't get owned before it finishes downloading the updates over a slow Internet connection?"

      Don't download any porn or warez until the updates are finished, and don't visit any websites other than the Chrome/Firefox/Opera download site until you've got one of those installed.

      Always worked for me so far...

    67. Re:Kudos to Apple by joeyblades · · Score: 1

      Well, the SEO poisoning attack I understand, but that is not what was being described. The way SEO poisoning works is that the search engine is tricked into generating a link to a malicious site rather than a legitimate site. This would be one of the normal channels that would bring up the bogus MacDefender web page that looks like a virus scan is being performed. You still have to click one of the bogus buttons (OK or Cancel) to start the download of the installer.

      What was described was something different where clicking on the Google link didn't take you to the MacDefender ruse, but initiated the installer download instantly (or perhaps took you to the page and the download started automatically). I think the second option is not possible in Safari... but I could be wrong. I have seen no threads anywhere to suggest that I am wrong, however. I have my doubts about the first option, but am less sure. One of the posts indicated that it was tied to the Safari bug/feature where image files are automatically downloaded. Now I have never seen this behavior, but there are threads where people complain about it, so there must be some truth to it. Also, while I have never seen an image file get automatically downloaded to any of my Macs, I have seen something similar happen with PDF files, so that lends a little credibility.

      I have one site that routinely downloads PDFs instead of displaying them in my browser, so I was able to try some things. When the PDFs were automatically downloaded, they did not open automatically open. I have to manually launch them. This behavior is independent of my setting of the "Open safe files" setting.

      So, bottom line, I have my doubts that merely clicking on a Google search result can cause the MacDefender installer to launch. For that to happen, the Google search results link would have to be modified to trigger a download instead of following a link. I'm going to give Google the benefit of the doubt that their security has not been compromised to facilitate this.

      I did say "doubts", which means I am still open to a convincing argument or proof...

    68. Re:Kudos to Apple by drsmithy · · Score: 1

      What's the best practice when reinstalling Windows from disc so that the computer doesn't get owned before it finishes downloading the updates over a slow Internet connection?

      Assuming you have XP SP2 or newer, nothing. The firewall is enabled by default.

      If you only have XP, you'll have to manually enable the firewall first.

      Does Microsoft pull crap like considering my copy of Windows 7 no longer validly licensed if I travel to another country?

      No. Nor have they ever done that.

    69. Re:Kudos to Apple by drsmithy · · Score: 1

      Use Windows XP SP2 or later (the integrated firewall started then) and don't browse the Internet until the updates are done.

      SP2 just enables the firewall by default. It's present in all versions of XP.

  3. Re:hurr... by gman003 · · Score: 2

    But retards will call it such ("virus", to the layman, is "any software what breaks my computer", regardless of distribution method). And thus, all the retards claiming "macs don't get viruses" will now be countered.

    But hey, at least we still have Linux. No viruses (by either definition) on that, right?

  4. Macs don't need anti-malware software! by Anonymous Coward · · Score: 0

    This specific patch should work just fine and dandy against Mac Defender, until new malware shows up. All they have to do is release a patch each time new malware appears. Again, and again, and again...

    1. Re:Macs don't need anti-malware software! by jellomizer · · Score: 2

      Being that it took 11 years for one to come for OS X. That method just might work.

      --
      If something is so important that you feel the need to post it on the internet... It probably isn't that important.
    2. Re:Macs don't need anti-malware software! by Anonymous Coward · · Score: 0

      they cannot patch the user to avoid him providing admin password to random things.

    3. Re:Macs don't need anti-malware software! by ColdWetDog · · Score: 1

      Being that it took 11 years for one to come for OS X. That method just might work.

      And it works OK for WIndows, right? (That's how I know it's Tuesday when I'm at work)

      --
      Faster! Faster! Faster would be better!
    4. Re:Macs don't need anti-malware software! by pknoll · · Score: 1

      They've been updating anti-malware definitions since 10.4. The threats that the built-in system protects against are listed in System/Library/Core Services/CoreTypes.bundle/Contents/Resources/XProtect.plist

    5. Re:Macs don't need anti-malware software! by Anonymous Coward · · Score: 0

      they cannot patch the user to avoid him providing admin password to random things.

      Thanks god Linux has protection against that build in.

  5. Re:Can't fix that by sgbett · · Score: 3, Insightful

    "Hey you there, you look like you might have STUPAIDS. Quick! Inject yourself with this hypodermic needle who's contents are unknown to you!"

    That might work?

    --
    Invaders must die
  6. defence against MacDefender by doperative · · Score: 3, Insightful

    "Apple is planning to release an update specifically designed to protect users against the MacDefender malware that has been circulating for the last couple of weeks. The update for Mac OS X will automatically find and remove the malware on an infected machine and also will warn users if another infection attempt is detected"

    What defence is there against the end users downloading and running MacDefender and giving up the Admin password?

    1. Re:defence against MacDefender by 0racle · · Score: 1

      A simple check against known signatures at the same time when OS X says "This app was downloaded from the Internet, are you sure you want to run it?"

      --
      "I use a Mac because I'm just better than you are."
    2. Re:defence against MacDefender by Teckla · · Score: 1

      What defence is there against the end users downloading and running MacDefender and giving up the Admin password?

      A big part of the problem is Safari's default settings. Safari will automatically download and run the MacDefender installer. This, in itself, is harmless (you can quit the installer), but that default behavior in Safari makes it that much easier for malware authors.

      Apple needs to acknowledge that Safari's default setting to automatically download "safe content" needs to be disabled.

    3. Re:defence against MacDefender by discord5 · · Score: 1

      What defence is there against the end users downloading and running MacDefender and giving up the Admin password?

      Bricking the macbook? I don't mean fuck it up with some firmware update, but taking a brick to it and smashing it. You can't run MacDefender that way.

    4. Re:defence against MacDefender by Richard_at_work · · Score: 1

      Read it more literally than that - they will blacklist MacDefender (probably, as the other poster suggests, via hash or another signature check) but not really expand it into a proper malware checker.

      Cue MacProtector....

    5. Re:defence against MacDefender by discord5 · · Score: 1

      A simple check against known signatures

      Mr Mouse, let me introduce Mr Cat. I'm sure you will be enjoying many games together.

    6. Re:defence against MacDefender by _0xd0ad · · Score: 1

      I think he was the cat, actually.

    7. Re:defence against MacDefender by 0racle · · Score: 1

      I didn't say it was a good idea. It is however, exactly how every other basic anti-virus application works.

      --
      "I use a Mac because I'm just better than you are."
    8. Re:defence against MacDefender by Verunks · · Score: 1

      "Apple is planning to release an update specifically designed to protect users against the MacDefender malware that has been circulating for the last couple of weeks. The update for Mac OS X will automatically find and remove the malware on an infected machine and also will warn users if another infection attempt is detected"

      What defence is there against the end users downloading and running MacDefender and giving up the Admin password?

      quite easy, to protect the end user apple will remove the admin account, every time an application will require admin access a pray wil be sent to steve jobs himself and he'll decide to allow or deny it

    9. Re:defence against MacDefender by DJRumpy · · Score: 1

      Actually you get a different message for known 'bad' executables like the hacked Adobe installers. It will actually warn them that the package is malicious.

    10. Re:defence against MacDefender by gnasher719 · · Score: 1

      quite easy, to protect the end user apple will remove the admin account, every time an application will require admin access a pray wil be sent to steve jobs himself and he'll decide to allow or deny it

      Stupid sarcasm aside, a simple solution would be to not show up a dialog where the user can enter the admin password, but require them to open System Preferences and manually "unlock" the system for a duration of say ten minutes, after which it locks up again. No problem for a knowledgable user; but someone who can't figure out how to open "System Preferences" will be protected.

    11. Re:defence against MacDefender by Anonymous Coward · · Score: 0

      What defence is there against the end users downloading and running MacDefender and giving up the Admin password?

      Postnatal abortion.

    12. Re:defence against MacDefender by mosb1000 · · Score: 1

      A big part of the problem is Safari's default settings. Safari will automatically download and run the MacDefender installer.

      This is how it appears to work, but in reality the user must click a link to download the file (the link is called "scan"). Then once's it's downloaded it opens an installer, which asks "are you sure you want to install this thing you downloaded from the internet" and prompts you for your administrator password. It's far from automatic.

      I don't think the solution is more "click ok" boxes. That just conditions the user to click ok without knowing what is going on. But it shouldn't automatically open installers. A user who is competent to choose software to install also knows how to find and run the installer he's downloaded. Other people should ask someone who knows what they are doing.

    13. Re:defence against MacDefender by Teckla · · Score: 1

      This is how it appears to work, but in reality the user must click a link to download the file (the link is called "scan").

      No, no, no, no, no, a thousand times, NO.

      I have tested the behavior I described on multiple machines. The user does not need to initiate the download.

      Perhaps you encountered a less sophisticated version of the MacDefender/MacProtector Trojan that does force the user to click on a scan/download link of some kind first.

      But what I have seen and tested on multiple machines myself is:

      Safari -> Click on Google Image Search result -> Automatic download of malware installer -> Automatic execution of malware installer

      Exiting the installer, of course, results in no harm done to your computer.

    14. Re:defence against MacDefender by mosb1000 · · Score: 1

      What is the google image search result you are clicking on?

    15. Re:defence against MacDefender by Teckla · · Score: 1

      What is the google image search result you are clicking on?

      I'm sorry, but it has been a few weeks since it happened, and I did not keep the link handy.

      I can tell you that my wife and daughter were doing Google Image searches for something like "tinkerbell wings". She called me into her office when a strange installer window appeared out of nowhere.

      I was absolutely and totally convinced she must have downloaded it and run it herself, so I quit the installer and I quit Safari.

      Then I went back into Safari (brand new process), and performed the same search. I clicked on the same Google Image Search result my wife did, and the MacProtector installer automatically downloaded and automatically started executing. At broadband speeds, this happened in just a few seconds.

      I was able to exactly duplicate this behavior with multiple friends who own Macs.

      I find it a sad commentary on the state of Slashdot that the cold, hard, absolute truth I'm telling about this behavior is languishing in terms of mod points, and people that are saying I'm confused are modded +5. As if me, and my friends, and thousands of other people have some kind of shared hallucination.

      Apparently, these days, merely changing the topic to "PARENT IS CONFUSED! MOD DOWN!" is enough proof by itself that the parent is confused, and enough to get modded +5.

      Also, some of the usual "herp derp! you can't fix stupid!" comments are modded +5. As if those comments are somehow interesting or insightful.

      Slashdot is very nearly not worth visiting anymore...

    16. Re:defence against MacDefender by mosb1000 · · Score: 1

      I'm sorry, but your experience does not match my own, nor any of the other reports I've read. My understanding is that OSX always prompts you for the administrator password when installing new software (at least that's the default setting and that's they way it is on all the macs I operate).

      Also, if you click on a link to a hyperlinked file, it will download and run the linked file. I suppose you could use JavaScript to automatically redirect to an installer file and that would get you to a point where you're running the installer automatically. Even so, it should ask for approval before installing and require a password, most people wouldn't grant it that since they were clicking on a link to a website, not trying to install an application.

      Perhaps you stumbled on it accidentally, but the way it happened was not likely result in an install because you wern't prompted with the virus scan warning message. That may be the difference between what you've seen and what most people are seeing.

    17. Re:defence against MacDefender by Anonymous Coward · · Score: 0

      "Apple is planning to release an update specifically designed to protect users against the MacDefender malware that has been circulating for the last couple of weeks. The update for Mac OS X will automatically find and remove the malware on an infected machine and also will warn users if another infection attempt is detected"

      What defence is there against the end users downloading and running MacDefender and giving up the Admin password?

      If Darwin is right then this kind of stupidity should be bred out in a few thousand years.

    18. Re:defence against MacDefender by Algae_94 · · Score: 1

      I really shouldn't get involved in this, but I think someone needs to help get the parents points across. He is claiming that after clicking a Google image search result, the INSTALLER of MacDefender was automatically downloaded and run. Presumably, this is due to some javascript that was on the page that the Google link led to. In order for the installer to actually, you know, install MacDefender, an admin password is needed.

      Bottom line, the user MUST explicitly enter the admin password to install this MacDefender program. Safari seems to allow the installer to popup and prompt for that password just by going to a compromised page's URL. A user that doesn't know better, or gets scared by the installer screen, might enter the admin password and continue the infection. If there were better controls in Safari to prevent executing of downloaded files users wouldn't be tested by this password prompt. Simple solution, add a flag to allow/disallow automatic execution of downloaded files in Safari. Default this flag to disallow.

    19. Re:defence against MacDefender by MrNiceguy_KS · · Score: 1

      Never bet against the ability of stupid people to breed. People that can barely manage to tie their own shoes can still find a way to produce another generation of people who can barely manage to tie their own shoes.

      --
      Redundancy is good And also good.
    20. Re:defence against MacDefender by mosb1000 · · Score: 1

      To be clear, Safari will not automatically execute downloaded files. But it will automatically open "safe" file formats, and the installer is considered a safe format (probably because you have to approve the install and enter your administrator password when you open it in order for the install to continue).

    21. Re:defence against MacDefender by cerberusss · · Score: 1

      What defence is there against the end users downloading and running MacDefender and giving up the Admin password?

      Only one: a shot in the neck.

      --
      8 of 13 people found this answer helpful. Did you?
  7. Re:hurr... by grub · · Score: 2


    There are worms for Linux. Not sure about OSX. Certainly "CLICK HERE!! EMERGENCY!!"-type malware can exist for any platform.

    --
    Trolling is a art,
  8. What What by Anonymous Coward · · Score: 0, Funny

    What happen to my perfect magical immortal box? All god Steve help me.

    1. Re:What What by headhot · · Score: 1

      No magic box is protected from stupid. This wasn't a drive by install, the users had to choose to install it.

    2. Re:What What by betterunixthanunix · · Score: 1

      No magic box is protected from stupid. This wasn't a drive by install, the users had to choose to install it.

      A lot of places do not allow users to run programs in their home directories, to help mitigate this exact problem. This is not necessarily the best approach for home users, but it certainly is possible to provide some protection from user stupidity in certain contexts.

      --
      Palm trees and 8
    3. Re:What What by Relayman · · Score: 1

      You can do the same with a Mac. Just set up a user account without administrative rights.

      --
      If I used a sig over again, would anyone notice?
  9. Apple and its fanboys helped make this happen by MikeRT · · Score: 3, Informative

    My wife supports a lot of Mac users who literally say stuff like "I don't have to worry about security because I have a Mac." In their minds, they can literally just wash their hands of all security considerations because Apple will do everything for them like a bodyguard from Blackwater. Apple has ridden a wave of anti-Microsoft sentiment in no small part by creating or at least encouraging the impression that if you buy a Mac, you'll never have to think again about taking care of your computer except maybe once a blue moon.

    1. Re:Apple and its fanboys helped make this happen by Relayman · · Score: 1

      Actually, people who really believe that Macs can't get viruses are the ones least likely to download MacDefender. The ones who are likely to download it are the ones who have heard the constant drumbeat of people with infected Windows computers. So MacDefender installs malware by playing on the terrible security record of Windows.

      And now Apple is going to protect the users who are stupid enough to fall for MacDefender's social engineering. What's there not to like?

      --
      If I used a sig over again, would anyone notice?
    2. Re:Apple and its fanboys helped make this happen by Anonymous Coward · · Score: 0

      On the other hand, If those Mac users never really cared about their Mac's security, they would not have been infected by MacDefender at all ;)

    3. Re:Apple and its fanboys helped make this happen by insertwackynamehere · · Score: 5, Insightful

      I see a lot of people who say this like they know for a fact that they are correct and it's just sheeple who believe lies who think any differently. But have you ever owned a Mac? I remember when I moved from PC to Mac I did the typical installation of antivirus/firewall/antispyware programs. The fact that many of these were shitty ports from PC versions should have tipped me off but I soon realized these served no purpose on my machine unlike my old XP machine where I wouldn't even think about plugging in an ethernet cable without my security suite all up and running to make sure nothing gets in and nothing gets run and the things that do get taken care of.

      This simply does not happen on Mac. I am sorry, but it is true. Yes, someone can make a trojan horse and generate a lot of media hype but that boils to someone tricking people into giving the malicious software a chance to run. There is only one way to handle that and that is by teaching people not to believe everything and be wary of what they download. Then you could have two equally informed users on a Mac and a PC who both avoid trojans but guess what. If the Windows users doesn't also have firewalls, antivirus, spybot, etc and a strong knowledge of how to use them (most users don't and these are loads more complicated than explaining to people not everything you here is true which is analogous to the real world) they are going to end up infected anyway. Not to mention that on a Mac, I didn't end up needing to run 2 bloated background programs to monitor security.

    4. Re:Apple and its fanboys helped make this happen by _0xd0ad · · Score: 1

      Actually, people who really believe that Macs can't get viruses are the ones least likely to download MacDefender.

      Yeah, that's ironic. But there's also no real reason that the social vector had to play on that particular fear; it could have as easily been anything else (i.e. porn).

    5. Re:Apple and its fanboys helped make this happen by sloth+jr · · Score: 1

      Notwithstanding Apple's market posturing - it seems like a reasonable goal for people to want: to not have to take care of your computer except in rare exceptions. I can understand folks largely buying into the belief that the Mac is generally a more care-free environment than Windows or Linux. Sure, things do go wrong on it - but in this case, PEBKAC (I agree with the above posters that identify Safari's auto-install functionality is a serious liability).

    6. Re:Apple and its fanboys helped make this happen by _0xd0ad · · Score: 1

      Then you could have two equally informed users on a Mac and a PC who both avoid trojans but guess what. If the Windows users doesn't also have firewalls, antivirus, spybot, etc and a strong knowledge of how to use them (most users don't and these are loads more complicated than explaining to people not everything you here is true which is analogous to the real world) they are going to end up infected anyway.

      I'd contest your last statement; I'd say if the two users are equally informed the PC user isn't really all that more likely to end up infected, provided they run the Windows updates. Security Essentials wouldn't hurt, of course; and it's really not that hard to use either.

    7. Re:Apple and its fanboys helped make this happen by Alarash · · Score: 1

      I can see how that kind of marketing could go wrong.

      In a sense, it's good that people start realizing that appart for the high quality hardware, Macs are just regular computers that were not high profile enough to be targeted by attackers. I'm not talking about targeted attacks, but large-scale trojans like this that rely on the stupidity (I should rather say "lack of understanding") of the users. In the past it probably wasn't worth it. Now that Apple is very widely used, it makes sense it's targeted by fake anti-virus-type attacks.

      Linux is next, however long that takes.

    8. Re:Apple and its fanboys helped make this happen by Anonymous Coward · · Score: 0

      I had a worm back in 1994. :-) Nothing since. Not that there might be something truly substantial in the future. Agree that those most fearful are going to fall for this.

    9. Re:Apple and its fanboys helped make this happen by Anonymous Coward · · Score: 1

      tl;dr version:
      Believe hype concerning Windows and Microsoft, disbelieve when it concerns Apple and Mac.

    10. Re:Apple and its fanboys helped make this happen by King_TJ · · Score: 4, Informative

      Honestly, as another commenter already said, the Mac users like the ones your wife supports are by and large correct in that statement....

      The truth is, your typical computer user who believes they're "aware of computer security issues" will tell you he/she takes steps to avoid getting virus infections. They'll tell you they do such things as "never opening emails when I don't know who they're from", and "not giving out my credit card over the Internet". Sometimes, they'll even brag about going to their favorite local computer store and asking someone what the "best antivirus software is" and buying / installing a copy of it.

      Guess what? I get paid by the hour to clean nasty virus and malware problems off such peoples' Windows machines ALL the time!

      On the flip-side? In the 5+ years I've had my business doing on-site computer service (not to mention years doing it for other people in the past), I've still NEVER had a SINGLE call from a Mac user needing such services! Not ONCE - despite clearly displaying the Apple logo on my business cards and mentioning in all of my advertising that I take care of both Mac and PC issues!

      I'd go so far as to say that if you use a Mac, you should TRY to infect yourself sometime. Visit all the "bad" web sites you can think of to click on.... Follow the links on those sites that promise they'll locate the latest pirated software or key codes for you, or all the oddball porn sites you can locate... whatever. Watch how often something tries to send you a self-extracting .EXE file or download a script (.scr extension) file to your browser to run, or tries to give you some Active-X plug-in that's not compatible with your Mac's browser in the first place..... It's somewhat enlightening actually.

    11. Re:Apple and its fanboys helped make this happen by TechHawk · · Score: 1

      ...if you buy a Mac, you'll never have to think again about taking care of your computer except maybe once a blue moon.

      Right. That's what the majority of people want. Just like they don't want to think about the maintenance of their car. They want it to just work. And like it or not, Apple delivers on that.

      --
      "My brand of comfort isn't so much 'There-there' as it is 'There's a boot, pardon me while I connect it with your ass!'"
    12. Re:Apple and its fanboys helped make this happen by RetroRichie · · Score: 1

      My wife is a good control for your contest. She has both a Mac and a PC and she is about as uninformed as it gets when it comes to security. Her Mac has no preventative utilities, and is virus and malware-free. Her PC has every matter of preventative security running at all times, and I am still cleaning viruses and malware off that bastard every single month. Granted the PC is running XP and not Windows 7, but still... this is an ongoing 2-year experiment, and her Mac is clean as a whistle. I have had to actually reinstall XP twice, her PC was so jacked up.

    13. Re:Apple and its fanboys helped make this happen by _0xd0ad · · Score: 1

      I don't think by "equally informed" he also meant equally uninformed. He clarified that both avoid trojans.

    14. Re:Apple and its fanboys helped make this happen by Anonymous Coward · · Score: 0

      Ironic...

      This thing popped up on my MacBook (under Chrome I think) telling me, in it's weird iTunes way, that my machine was full of viruses and malware...

      I thought "Not likely.. I've got a Mac! This is all bunk" and just closed the window and forgot all about it... a coupla days later I saw this story...

      So... if I'd believed Apple's "hype" that my machine is invulnerable and ignored the warning (clearly not from Apple but made to look Applesque) I'd b fine... and I was.

      Yeah... I feel glib today.

    15. Re:Apple and its fanboys helped make this happen by Anonymous Coward · · Score: 0

      Anecdotal evidence:

      Had a guy in our organisation with a Windows machine, constantly getting it infected. He didn't have admin privileges to begin with, but I put him on Firefox, double, triple, and quadruple-checked his antivirus, and even did the host file trick. I stopped just short of disconnecting him from the internet. Nothing worked.

      Gave him a Mac, problem disappeared.

    16. Re:Apple and its fanboys helped make this happen by Anonymous Coward · · Score: 0

      Then you could have two equally informed users on a Mac and a PC who both avoid trojans but guess what. If the Windows users doesn't also have firewalls, antivirus, spybot, etc and a strong knowledge of how to use them (most users don't and these are loads more complicated than explaining to people not everything you hear is true.

      I've used Windows as my primary desktop OS since Windows 95 and I've never gotten a virus on my workstations aside from a single virus received from an infected flash drive. I've also never kept any antivirus on my workstation for more than a day or two, and haven't even installed an antivirus on any of my personal computers in years. I will intermittently scan a file with a web based scanner if I believe it to be infected, or scan my entire PC just to be sure.

      Saying that if the PC user doesn't "have firewalls, antivirus, spybot, etc........" is just wrong. All it takes to keep from getting viruses is to stop clicking on shit you shouldn't, and pay attention to what you're doing. Why the vast majority (read: 99.99999% of pc users) have such a hard time with this is beyond me.

    17. Re:Apple and its fanboys helped make this happen by Xaedalus · · Score: 1

      Hmmm... wonder what websites he was checking on company time then?

      --
      Here's to hot beer, cold women, and Glaswegian kisses for all.
    18. Re:Apple and its fanboys helped make this happen by insertwackynamehere · · Score: 1

      You can say this as much as you want but maybe you just don't do anything that involves visiting sites beyond your usual scope of Slashdot and the like. The reality is, most users (even those who know not to install things they don't trust) will use the web a lot. If you have ever worked in a help desk before (or tech support) you know that your example is completely unrealistic for the general population. Macs come in as well as PCs but PCs almost always have some sort of infection whereas the Macs are just worse for wear in some sort of physical/outdated sense.

    19. Re:Apple and its fanboys helped make this happen by insertwackynamehere · · Score: 1

      Either way maybe newer versions of Windows are better but certainly with XP, web surfing without any protection was certainly not recommendable.

    20. Re:Apple and its fanboys helped make this happen by Anonymous Coward · · Score: 0

      No, there are virii for the mac.
      Apple fans just put on their rose colored glasses and try to reclassify them as something else just to save face.

      pssssst: They do exist.

    21. Re:Apple and its fanboys helped make this happen by Anonymous Coward · · Score: 0

      If the Windows users doesn't also have firewalls, antivirus, spybot, etc and a strong knowledge of how to use them (most users don't and these are loads more complicated than explaining to people not everything you here is true which is analogous to the real world) they are going to end up infected anyway.

      This statement is just plain dumb.

    22. Re:Apple and its fanboys helped make this happen by Billly+Gates · · Score: 1

      "I remember when I moved from PC to Mac I did the typical installation of antivirus/firewall/antispyware programs. The fact that many of these were shitty ports from PC versions should have tipped me off but I soon realized these served no purpose on my machine unlike my old XP machine "

      Well prepare to be infected again. After the success of the simplistic MacDefender exploit you can bet it caught the attention of the malware writters who are already developing hundreds of trojans, virii, and worms.

      Once the cat is out of the bag with a few exploits the hackers follow. I remember when Windows 2000 was herald as the most secure OS ever made. After one or two exploits it quickly raised a new breed of the current hackers. Hopefully better antivirus software will become available. Norton, McAffee, and Systemantic are very horrible regardless of OS. Maybe Apple can make a good one?

    23. Re:Apple and its fanboys helped make this happen by gtall · · Score: 1

      At my place of employment, even though most of researchers use Macs, we are still required to run anti-virus. The reasoning is that it prevents PC malware from piggybacking on Macs and being spread to our PC users. I don't know if that can happen but it seems plausible.

    24. Re:Apple and its fanboys helped make this happen by Anonymous Coward · · Score: 0

      I am inclined to agree with you.
      A couple years ago, Apple offered a Million dollars and a Job to anyone that could create a virus for Mac that lasted longer then 4 days. Guess what? No one could do it. I think the longest one lasted 2 days...

      I have owned a Mac for 2 years; The only "virus" I have had to deal with is one that hitched a ride on my HDD till I connected to a Window's based network, and we caught it before is left my HDD. You want to know how to get rid of a virus on your Mac? You drag and drop to the Trashcan and the restart. Everyone one knows how long/often you have to erradicate viruses off your PC. Its a pain in the A.

      I have surfed all of the "bad" sites on my Mac. The only thing I caught was the aforementioned "Hitch Hiker". Anti-viruses on a Mac are over-kill. All they do is bog down your functionality. I caught a virus on my PC just from surfing Google looking for background images! You know what I did? I got mad, and made my Dell Optiplex 755 into an OS X 10.6 killing machine!! Serious.

      I will say, Macintosh is getting more popular. As they get more popular, there will be more viruses created to target our machines, and then we will have to worry about it. Until then, I'm perfectly happy and virus free :D

    25. Re:Apple and its fanboys helped make this happen by StikyPad · · Score: 2

      Pretty sure the .SCR files you're seeing are screensaver files, not scripts, which are essentially just executables for all intents and purposes.

    26. Re:Apple and its fanboys helped make this happen by Solandri · · Score: 1

      This simply does not happen on Mac. I am sorry, but it is true. Yes, someone can make a trojan horse and generate a lot of media hype but that boils to someone tricking people into giving the malicious software a chance to run.

      Funny. That was the exact same attitude held by us Unix types way back in the 1980s. The PC (DOS) and Mac (MacOS) were rife with viruses and worms transmitted over sneakernet (i.e. on floppies). But Unix was designed from the ground up to be secure in a multi-user environment. There's no way you could infect a Unix system with a virus or worm. At worst the user would compromise their own account, but the system would still be safe since they didn't have root access.

      Then the Morris worm hit and we all saw that the emperor had no clothes. If it can happen to Unix, it can happen to an OSX Mac. It's foolish to think otherwise.

    27. Re:Apple and its fanboys helped make this happen by WaffleMonster · · Score: 1

      This simply does not happen on Mac. I am sorry, but it is true. Yes, someone can make a trojan horse and generate a lot of media hype but that boils to someone tricking people into giving the malicious software a chance to run. There is only one way to handle that and that is by teaching people not to believe everything and be wary of what they download. Then you could have two equally informed users on a Mac and a PC who both avoid trojans but guess what.

      If apple were inherently more secure by design it does not seem unreasonable to assume it would not loose pwn2own so badly and consistantly year over year.

      In the age of NAT CPEs, user access control and host firewalls enabled by default the more realistic attack vector today in the here and now on ANY platform is the browser, browser plugins and tricking users. (End users are easy and gullable)

      The last time I checked the same codes for browser infustructure be it webkit based or firefox is the same code with more or less the same security properties across all platforms. This extends to popular yet extremely buggy and insecure plugins such as adobe reader, flash player and quicktime.

      As we all know gullable users (sheeple) is universal.

      Without exception everyone I know who had been infected in the past 5 years was tricked into installing something they should not have. You can't protect the user from themselves without putting them in a padded room and tieing their hands behind their backs.

    28. Re:Apple and its fanboys helped make this happen by Coolhand2120 · · Score: 1

      I've still NEVER had a SINGLE call from a Mac user needing such services!

      How about Windows Mobile viruses? Unix? Linux? You mean... malware authors only attack the largest most profitable target?! It's almost... as if... they didn't give a shit about macs! If you're a bad guy are you going to write a program that works on 90% of the computers out there or less than 10%? It's a no brainier. But one things fore sure, with an attitude like yours, once malware authors do begin to attack Apple's products, you'll be the first to go.

      .... or download a script (.scr extension) file to your browser to run ...

      And you have the technical knowledge of a typical geek squad goon, like a previous poster said .scr is not a script. Security through obscurity it not security at all, with users like you, it's just a time delayed bomb that will blow up in faces of Apple's users once their market share reaches a level that the bad guys feel like attacking.

      I'd go so far as to say that if you use a Mac, you should TRY to infect yourself sometime.

      Here's a better idea, if you think your mac is so secure how about your post your IP address and email here with a little flag that says "I am immune to your hacking attempts" and see how fast your system is compromised.

    29. Re:Apple and its fanboys helped make this happen by Anonymous Coward · · Score: 0

      The market share that Apple held was so insignificant until recent years that there was no PROFIT to be made in compromising their devices. As their market share grows, you will see more and more stories about infected Macs. In the end, the code for both OS'es is written by humans, who are fallible. It is naive to think that Mac OS has an exponentially smaller number of security holes than Windows has- there simply has not been any incentive to make an effort to exploit these security holes until recently.

    30. Re:Apple and its fanboys helped make this happen by Anonymous Coward · · Score: 0

      You truly, TRULY need to go back to Computers 102 before opening your mouth about viruses/spyware/malware/etc. It is a HELL of a lot more complicated than simply "trick a user into running some software". Given, a large number of your more primitive infections make use of this technique because hell, old tricks are the best tricks, right? If it were that simple, then Microsoft (let alone Linux distros) would not have to push out security updates every Patch Tuesday. Period. Modern viruses/malware/etc. do still often use the "I'm going to send myself to everyone in his contacts list" approach, but have you ever seen what happens to an unpatched PC that goes to a website that uses javascript to execute malicious code on the client side? It usually ends up with the client machine's security being compromised via an exploit (whether published/recognized or not), and then whatever bot/trojan/worm/whatever gets downloaded gets full control over the computer. _THAT_ is how even a relatively careful user can get a virus. All it takes is for the wolf to be ahead of the sheep.

      Furthermore, I cannot stand it when some Mac fanboi tells me Macs cannot get viruses. Yeah.... go google any combination of words so long as you include "mac" and "virus" in there. You will get some results. The reason you see far fewer virus outbreaks on Macs is because of the market share, and the audience. PC's are more or less ubiquitous in the business world, especially amongst the "stupid" users (the smart ones may be running some *nix on their laptops), so no duh virus/malware coders are going to write malicious code intended for a) the largest target, b) the one with the most retards behind the wheel, and c) the systems used by those with lots of moolah. If Apple would wise up and make it easier for developers/etc. to make business applications, then Macs might have a better market share and, voila, you would probably see a proportional increase in known vulnerabilities. You do kind of have a point though. I mean, I suppose it would be kind of difficult to steal money from someone who has already willfully emptied his or her wallet for Steve Jobs.

      tldl; go research malware exploit techniques, know what the hell you are talking about before you open your mouth, and quit worshipping Apple already.

    31. Re:Apple and its fanboys helped make this happen by LordLimecat · · Score: 1

      unlike my old XP machine where I wouldn't even think about plugging in an ethernet cable without my security suite all up and running to make sure nothing gets in and nothing gets run and the things that do get taken care of.

      to make sure nothing gets in and nothing gets run and the things that do get taken care of.

      Im not sure what all thats supposed to mean, but Windows already double and triple-checks to the point of ridiculousness that a user really wants to execute downloaded content.

      This simply does not happen on Mac. I am sorry, but it is true.

      This story is precisely about how you are wrong, and how all the so-called PC apologists have been right all along about market share and Macs getting their due. Last I checked, Macs run most of the same applications as PCs-- Firefox, Safari, Itunes/Quicktime, Flash, Adobe Acrobat. And last I checked, it is precisely that software that has been exploited in about 95% of the Windows exploits; what on earth made you think you were safe because the OS was different? Once the exploit has run, whether you are on Windows 7 or OSX doesnt really matter (especially since their security countermeasures are about the same).

    32. Re:Apple and its fanboys helped make this happen by LordLimecat · · Score: 1

      I'd go so far as to say that if you use a Mac, you should TRY to infect yourself sometime.

      Rather odd to be making that statement with such smugness in a topic discussing the fact that people are, in fact, getting infected, on Macs.

    33. Re:Apple and its fanboys helped make this happen by LodCrappo · · Score: 1

      You get more calls from Windows users simply because a vast majority of users *are* Windows users.

      I could take your anecdotal and misinterpreted evidence as fact, or I could listen to about 30 security experts and researchers from all different sources, people who actually do this stuff for a living rather than living off the crumbs. The general consensus from real experts does not match your analysis at all.

      In their words: Experts weigh in on Mac vs. PC security
      http://news.cnet.com/8301-27080_3-10444561-245.html

      --
      -Lod
    34. Re:Apple and its fanboys helped make this happen by REJ+Messser · · Score: 1

      Actually, it's Windows(TM) fanboy's that made this bit of social engineering possible. In the sixteen years I have run my Mac support business, the only time I get calls and question regarding malware on Macs is when there is a Windows community panic, or when the professional media machine needs some controversy hits. The basic assumption required for someone to believe a hostile act, (i.e. forced download of malware from an unrequested website) is a benevolent act, is FUD (Fear, Uncertainty & Doubt.) In this case FUD originates in seeing the tribulations of the market dominate Microsoft Windows OS users. Similarly, not that many years ago people had unreasonable fears of developing lung cancer. Once we accepted that smoking cigarettes was the dominate initiator of those cancers and changed our dominate behavior the occurrence of lung cancers dropped dramatically. Yes many non techie computer user now fear computer compromise even when they don't use MS Windows. But then many people fear terrorism enough to forfeiting their civil rights and believe anyone who doesn't is "un-American." A stretch I know, but FUD is at work in this situation also. Go figure... I have to praise Microsoft, if for no other reason than they cut through the proprietary nature of email circa 1993. By embracing Internet standards and penetrating every corporation, they made it y possible to message anyone anywhere. I have to criticize Microsoft for adding TCP/IP to the security nightmare that was OLE and making "ad powered" malware a viable, international and profitable market. Windows powered malware also expanded the anti-malware software business to the huge market that it is today and blurred the line of who is a blackhat or a whitehat. Together these two sides play out a MAD (TM) magazine scenario of "Spy vs Spy" that only Windows fanboys hope will spread to every other OS platform. Apple simply has never shipped their systems with the administration level wide open and waiting for any bogus code to corrupt it. This is one of the reasons Apple is painted as closed and proprietary. But that policy is simple as it is effective. My personal hope is that by 2013 the malware vs anti-malware will have died a slow agonizing death. And that Apple and other like them are the reason that 2013 will not be like 1993.

    35. Re:Apple and its fanboys helped make this happen by Stupendoussteve · · Score: 1

      Park a Ferrari in a mall parking lot and I guarantee it is more likely to be stolen, or simply keyed, than the old Datsun pickup or the Camry it's parked next to. It's always pointed out and people always yell about fanbois, but I'm just speaking from a basic economic level. Beating the Mac means they get to keep it and enjoy for themselves, or resell it for nearly 100% of the heavily inflated retail cost, and they keep the prize money as well. At that point if they even wanted a new computer, they can get one and still have some left over from the sale of the Mac.

      I really think an interesting side premise if they really wanted to test the security of these platforms is to rotate the prizes. You pwn one box and get a different one. I believe there is a very high likelihood that whatever platform provided the Mac would end up pwned first.

    36. Re:Apple and its fanboys helped make this happen by Stupendoussteve · · Score: 1

      Linux doesn't yet have the marketshare, but when it does I think there are some often overlooked areas that could be pretty damaging to the secure reputation at some point.

      The first is the continued usage of unsigned packages by some distributions. Take over a mirror and you can infect a ton of users with a patched gnome package, depending on the level of access you may be able to increment the version number and cause everyone to update to the infected version. The second is the apparent lack of oversight when it comes to adding packages into repositories in the first place. If the software source package has been patched on the author's server, there is good chance the patched version is what gets built for the repository if the autobuild system just downloads the patched source package.

    37. Re:Apple and its fanboys helped make this happen by Stupendoussteve · · Score: 1

      It can happen very easily. It's one of the reasons many Linux boxes also run antivirus software.

      OS X Server came with clamav installed, I think it was related to this.

    38. Re:Apple and its fanboys helped make this happen by Anonymous Coward · · Score: 0

      I hope you aren't getting paid much if you don't know that an .scr file is not a script.

    39. Re:Apple and its fanboys helped make this happen by Skuld-Chan · · Score: 1

      The other day I cleaned up a DNS poisoning issue on a Mac - somehow the DNS was hard set to two IP addresses sitting off a host in Russia called prolite (p-lite.ru). Basically all google results pointed to a site called "google-analytics.com" which displayed spam and popups.

      Still not quite sure DNS got changed yet (still looking at it), but it was a clear cut case of malware.

      I'll grant you its not nearly as common as Windows, but saying "This simply does not happen on Mac. I am sorry, but it is true." is simply not true.

  10. Jobs just needed time... by Scragglykat · · Score: 0, Flamebait

    ...to figure out how to spin this around on Android and Google ;o)

  11. Re:Can't fix that by 0racle · · Score: 1

    You can't, but you can release one that tells the user they're stupid if they choose to run this piece of malware.

    --
    "I use a Mac because I'm just better than you are."
  12. What else would they have done? by betterunixthanunix · · Score: 2

    When your entire marketing approach is, "Everything we make JUST WORKS!" you really cannot have these kinds of malware floating around, and you certainly cannot try to charge people to fix things. It is not that I am criticizing Apple here, I am just saying that in their position, the only thing they could do is to erase the malware at no cost to their customers, or risk damage to their entire marketing machine.

    --
    Palm trees and 8
    1. Re:What else would they have done? by Bill+Hayden · · Score: 4, Insightful

      Apple is a very safe platform, but the safest software in the world can't protect against Stupid.

      --
      Protect your browser with the Force Safe Search add-on
    2. Re:What else would they have done? by pckl300 · · Score: 1

      Apple is a very safe platform, but the safest software in the world can't protect against Stupid.

      Apple's whole stance for the last ten years has been that 'Stupid' was not a problem on their platform. They've been telling everyone that their products are idiot-proof.

      --
      In the beginning, there was null.
    3. Re:What else would they have done? by Duradin · · Score: 1

      I hope you've written to every manufacturer of fire-proof materials that because their material can't withstand the heat of being in a star they aren't fire-proof.

      Don't forget the people that make bullet-proof vests. Those don't stop .50 BMG AP rounds (or higher calibers) so they shouldn't be telling everyone they are bullet-proof.

      Or maybe the majority of the planet understands that "proof" means "resistant under expected circumstances" . And any -proof is a moving target. You've proved that better idiots will evolve, so what was idiot-proof ten years ago won't be today.

    4. Re:What else would they have done? by DigiShaman · · Score: 1

      Even a Etch A Sketch is prone to data loss. A stupid person my flip it upside down while laying on their back in bed.

      --
      Life is not for the lazy.
    5. Re:What else would they have done? by pckl300 · · Score: 1

      Okay, Mr. Pedantic, Fireproof materials and kevlar vests are one thing. But when you state on your own website that users don't have to worry about infections, and then infections begin to crop up, you've sort of soiled the aluminum bed.

      Interestingly, Apple's virus information page has gotten a little less bold over the years. It used to be more along the lines of: 'Viruses just don't exist. Don't worry about them.'

      --
      In the beginning, there was null.
    6. Re:What else would they have done? by LordLimecat · · Score: 1

      Thats what GPOs are for, and denying execute permissions to the user's home folder.

    7. Re:What else would they have done? by Anonymous Coward · · Score: 0

      Stupid as in simply clicking poisoned search results provided by Google? You must be joking.

    8. Re:What else would they have done? by malkuth23 · · Score: 1

      Apple is a very safe platform, but the safest software in the world can't protect against Stupid.

      Like my boss always says. We try to build things idiot proof, but they keep building better idiots.

    9. Re:What else would they have done? by Anonymous Coward · · Score: 0

      This is the wrong way to look at things. Users should be treated as users and not administrators. If you are designing a end-user platform then why are you letting users make the difficult decision of what applications are safe to install? Users should have a restricted set of applications that they can install without seeking administrative assistance. No company or person releasing software should be able to easily bypass this system. This can be an open system. It doesn't have to be like Apple's solution which censors users. The way to do it is set a threshold for safety. A user whom is using a product by a company or wants to which does not meet a certain threshold should not be able to. Period. Not without using the command line. And they should have an interactive process that can't be bypassed using any default installed application. You should not be able to copy and paste wget someapp; install bypass. etc.

    10. Re:What else would they have done? by mjwx · · Score: 1

      Apple is a very safe platform, but the safest software in the world can't protect against Stupid.

      By the same token, Windows is a very safe platform, but it cant protect against stupid.

      Both statements are true, but MS never promised to protect us from ourselves.

      The biggest threat to computer security has always been the user. It is delusional at best to think a platform can magically protect you when you deliberately do bad things(TM).

      --
      Calling someone a "hater" only means you can not rationally rebut their argument.
  13. Re:Can't fix that by Anonymous Coward · · Score: 0

    s/who's/whose/

  14. Re:hurr... by plumby · · Score: 1

    Does Linux do anything (or at least anything more than MacOS) to protect against this type of attack?

  15. Good luck with that... by Yaddoshi · · Score: 0

    Dear Apple security team,

    They're just gonna make another variation of this software that will foil the detection routines.

    While I'm on the subject, any Mac user who is foolish enough to grant a program they did not install their administrator password deserves whatever happens to their precious Mac.

    1. Re:Good luck with that... by TrancePhreak · · Score: 1

      Supposedly this doesn't require the password. It just installs to the user directory. It pops up a image that says click here to disinfect, the user clicks and it runs in the background.

      --

      -]Phreak Out[-
    2. Re:Good luck with that... by dzfoo · · Score: 1

      No, that is not true. It downloads a disk image, and if Safari is configured as default, it will mount it and execute the installer. At that point it requires the user to actively continue with the installation, which involves clicking "next" or "continue" and entering his admin password.

              -dZ.

      --
      Carol vs. Ghost
      ...Can you save Christmas?
    3. Re:Good luck with that... by Relayman · · Score: 2

      Wrong.

      --
      If I used a sig over again, would anyone notice?
    4. Re:Good luck with that... by ColdWetDog · · Score: 1

      Wrong. Needs an admin password.

      --
      Faster! Faster! Faster would be better!
    5. Re:Good luck with that... by Vokkyt · · Score: 1

      That's a little FUD-y. It's a drive-by download, and once it's down, it has to install like any other application, user password and all. If you have "open safe files" off, you'll just end up with a few copies of a .zip called "mac-antispyware" or something to that effect, depending on the variant.

    6. Re:Good luck with that... by TrancePhreak · · Score: 1
      --

      -]Phreak Out[-
    7. Re:Good luck with that... by Anonymous Coward · · Score: 0

      bullshit, do your research fuckwit

  16. Re:Can't fix that by Anonymous Coward · · Score: 0

    I wonder why they got involved in this. Now they've set the undue expectation to provide support for malfunctioning/malicious third party software.

  17. hey, they made the big time! by Thud457 · · Score: 1

    We're finally a big enough target to steal from!
    We're relevant! We're relevant!

    I liked them better when their motto was "proudly going out of business for twenty years"...

    --

    the preceding comment is my own and in no way reflects the opinion of the Joint Chiefs of Staff

  18. Re:hurr... by Ambassador+Kosh · · Score: 1

    1) It encourages users to just get software from the repositories which is very unlikely to have malware in it.

    2) It discourages people from using it that are likely to fall for these kinds of things.

    So it does not have real protection beyond what osx has other then the culture that goes with it. On Windows and OSX it is FAR more common to download and install software from random locations.

    --
    Computer modeling for biotech drug manufacturing is HARD! :)
  19. Re:hurr... by Anonymous Coward · · Score: 0

    And thus, all the retards claiming "macs don't get viruses" will now be countered.

    Would OS X have prevented the malware from propagating itself throughout the system? No? Then OS X does get viruses.

  20. semantics. by Skarecrow77 · · Score: 4, Insightful

    Call it an infection then, using the generic term, instead of viral infection if you really want to, but that's just being pedantic. The "but macs don't get viruses" contingent has always truly meant and implied, if not outright stated, that OSX was not subject to the same malicious software infections that windows was. You know it, I know it, everybody knows it. This isn't a presidential impeachment, we're not required to define what "is" means. Everybody knows what "viruses" in this context means.

    Just like with humans, be it a viral infection, a bacterial infection, or even a fungal infection, the general layperson doesn't care what is causing the problem. They just want it fixed. The only person who cares exactly what is causing the problem is the person (doctor for humans, technician for computers) who is trying to fix it. The layperson just knows that they are "sick'. Likewise, the mac user just knows that their computer is "sick" and "this sort of thing isn't supposed to happen to macs".

    1. Re:semantics. by dAzED1 · · Score: 0

      Is "rm -rf /" a "virus" by your definition?

    2. Re:semantics. by node+3 · · Score: 1

      Call it an infection then, using the generic term, instead of viral infection if you really want to, but that's just being pedantic. The "but macs don't get viruses" contingent has always truly meant and implied, if not outright stated, that OSX was not subject to the same malicious software infections that windows was. You know it, I know it, everybody knows it.

      And they are right.

      Likewise, the mac user just knows that their computer is "sick" and "this sort of thing isn't supposed to happen to macs".

      And it doesn't.

      The mistake you are making (and I bet you are ready to reply right now having made that very mistake here with my post) is thinking that saying "Macs don't get viruses" or whatever is the same as saying, "it's impossible to make a virus/malware for the Mac". It's not. That's the very same pedantry you are (rightfully) complaining about.

      MacDefender is so far the most successful malware for Mac OS X to date... and it's hardly a blip. Macs are still all but infinitely less like to become infected by malware than Windows.

      At some point, the time may come when it will no longer be reasonable to say Macs don't get viruses. Where you won't be able to say, "Macs don't get viruses (a handful exist, but they are basically ignorable)". That day is not today, but MacDefender did bring us closer to that day.

    3. Re:semantics. by Anonymous Coward · · Score: 0

      Is "rm -rf /" a "virus" by your definition?

      it is, if you didn't type it you twat

  21. Re:hurr... by plumby · · Score: 1

    The only platforms where this kind of attack would be extremely difficult are the locked-down ecosystems, like (unjailbroken) iOS or most games consoles. Whilst I'm sure that iOS isn't 100% guaranteed malware free (there's always going to be something exploitable somewhere), it's going to be a whole lot more difficult to do that than simply writing a noddy "Run Me" app that wipes all your data.

  22. re: Microsoft monthly updates .... by Anonymous Coward · · Score: 0

    I have some doubts as to the effectiveness of that Microsoft monthly "malicious software removal tool" they send via Windows Updates though?

    They *do* still send it out, but I've actually had infected machines where that ran and didn't appear to accomplish anything useful. (I'm not sure if it actually reports back a status by way of any dialog boxes if it succeeds in finding/clearing anything? It seems like normally, it just runs silently in the background when Windows Update downloads and runs it along with any other updates it grabbed and applied?)

    With some of the malware for Windows I've encountered recently, it's far more complicated than simply stopping a few processes and deleting some .DLL files. Some of them actually seem to plant "dummy" files out on the drive that anti-virus packages can detect as "bad" and remove, but they seem to act only as "triggers" that tell other parts of the malware to activate and do more damaging things to the OS and/or data. It's sort of a retaliation mechanism against people who make an effort to clean the thing off ....

  23. Re:Can't fix that by Anonymous Coward · · Score: 0

    Why? That expands to "...who has contents are unknown to you!"

    Sounds like standard Lolcat dialect, which fits Mac users down to the ground. (They're a bit simple, like the interface...)

  24. Re:hurr... by Bing+Tsher+E · · Score: 1

    It encourages people to only get software from the repository that The Steve says they should get software from.

    But that's not a problem, generally, because Mac users are trained to know they have to pay for every little anything they install on their system.

    Eventually some smart malware creator will create a trojan that has some nominal fee the Mac user has to pay to get the malware.

    It'll wipe all Macs from the web in short order.

  25. Re:Can't fix that by bsharp8256 · · Score: 1

    s/who\'s/whose/

    FTFY

  26. And the problem is? by TechHawk · · Score: 1

    Lets see: Apple learns about problem, researches possible fixes, determines best fix, and then releases said fix. No histrionics, no stupid hand flailing. I'm failing to see the problem. Hell, I wish other companies did it this well.

    --
    "My brand of comfort isn't so much 'There-there' as it is 'There's a boot, pardon me while I connect it with your ass!'"
    1. Re:And the problem is? by Relayman · · Score: 1

      Or, as John Gruber says, "Measure Twice, Cut Once."

      --
      If I used a sig over again, would anyone notice?
    2. Re:And the problem is? by bryan1945 · · Score: 1

      Oh, I thought that was Lorena Babbit. My bad.

      The only histrionics I've seen have been here on /.
      Surprise, surprise.

      --
      Vote monkeys into Congress. They are cheaper and more trustworthy.
    3. Re:And the problem is? by Anonymous Coward · · Score: 0

      LOL.. Apple employees had been instructed to ignore the malware problems till they became an embarassing PR issue.

      I sincerely hope you get paid to write such comments. Otherwise you're a whore who doesn't get paid...

    4. Re:And the problem is? by TechHawk · · Score: 1

      "Instructed to ignore?" Provide proof, son, or you're just talkin' out your blowhole. And for the record, I do not work for or with Apple. I just like seeing companies handle issues in a reasonable manner. The only one with an axe to grind here is you.

      --
      "My brand of comfort isn't so much 'There-there' as it is 'There's a boot, pardon me while I connect it with your ass!'"
    5. Re:And the problem is? by Anonymous Coward · · Score: 0

      If you'd bothered to google this or look at the mac defender story at all you would know they have been instructed Do Not Confirm or Deny and Do not attempt to remove or uninstall. So he doesn't have an 'axe to grind', you're basing that assumption on your own ignorance.

    6. Re:And the problem is? by TechHawk · · Score: 1

      Read the whole thing. "Do not confirm or deny it was installed." and "Do not attempt to remove" are not even remotely the same thing as Not "Do not ignore the problem". Further, I would argue that these are not improper actions for the support staff, as the issue was being actively investigated. Improperly removing malware such as this can be very destructive to any OS. By telling their staff not to attempt it, they are preventing further potential problems, both technical and legal. So, while I thank you for pointing the memo out to me, I'm still waiting for proof that they were instructed to ignore the problem, because that memo clearly shows that they were not instructed to ignore it.

      --
      "My brand of comfort isn't so much 'There-there' as it is 'There's a boot, pardon me while I connect it with your ass!'"
  27. Re:Can't fix that by Culture20 · · Score: 1

    I'd suggest that operating system security patches should be delivered via ads that utilize security flaws... except a lot of malware programs do upgrade security patches after infecting.

  28. Safari? by Anonymous Coward · · Score: 0

    Who the fuck uses Safari?

    1. Re:Safari? by ddd0004 · · Score: 1

      Most Mac users

    2. Re:Safari? by Anonymous Coward · · Score: 0

      Who the fuck uses Safari?

      Agreed. I use Firefox.

  29. Fix for stupid by Beer_Smurf · · Score: 1

    When you have a stupid user, you don't give them the admin password.
    Problem solved

  30. Don't be a FOOL, man: It's ALL about marketshare! by Anonymous Coward · · Score: 0

    The moment any platform gains more usage/mindshare/marketshare (whatever you want to call it, i.e.-> More people using it), the more it will be attacked for exploits. What else exemplifies this? ANDROID OS, a Linux variant.

    Why do you think that mobile phones are being so widely attacked now? They're SO big, they made Carlos Slim & others hugely wealthy... how?? Lots of folks bought into them is how - & the malware makers KNOW it, so they attack them!

    All the b.s. Apple spouted in the past of "PC's are virus ridden horrors, Macs are not" is only being illustrated by this attack in MacDefender as well.

    (Wake up, & "abres los ojos")

    APK

    P.S.=> Once a platform gets a decent % of the overall market utilizing it? It will be MORE attacked, period... *NIX variants like ANDROID/Linux &/or MacOS X notwithstanding! Histories shown us ALL this, & very recently too as well (as soon as ANDROID & MacOS X usage went up, so did the exploits on them & they are NOT INVULNERABLE, period)... apk

  31. Can't fix stupid by mr100percent · · Score: 2

    From The Customer is Not Always Right:

    Me: “Good afternoon, [Software Company] Tech Support. How can I help you?”

    Customer: “I have a complaint about your software. My employees keep exiting the files without saving. I need you to fix that problem with your software.”

    Me: “Sir, when you pick to exit the application, it asks you if you are sure you want to exit without saving.”

    Customer: “I know. I think they are just hitting enter at the question.”

    Me: “Sir, the default is no.”

    Customer: “Well, they must be answering yes.”

    Me: “Im not sure how we can change the software to make it easier for your employees to understand.”

    Customer: “Can you add a second box after the first box, asking if they are really sure they want to lose what they just entered?”

    Me: “I can put that request in, sir. But I doubt that development will change the software.”

    Customer: “Why not?! Its a bug in your software! I want it fixed!”

    1. Re:Can't fix stupid by Relayman · · Score: 1

      Quicken solved this years ago. Whenever you finish a task (enter a debit/credit, credit an account, etc.), it writes the file to disk. When the user exits, there is no need to ask if they want to save, it's already been done for them. Smart software can compensate for stupid users and should whenever reasonable.

      --
      If I used a sig over again, would anyone notice?
    2. Re:Can't fix stupid by gnasher719 · · Score: 3, Interesting

      Well, the wording of the default is wrong and provokes user errors. The default is "Do you want to exit without saving" / default NO, and apparently users tend to pick the positive answer "YES". The default should be "Do you want to save before exiting" / default YES. Then when users pick the positive answer "YES" they get the more desirable result.

      (Some software that I wrote ages ago had two functions "Add new record" and "Edit existing records". Customer complained that every time they added a new record, some random record would disappear. I couldn't find a bug anywhere. So I displayed the number of records in the system in a very visible place (I think in the window title). The problem disappeared. ) Why the problem disappeared is left as an exercise to the reader.

    3. Re:Can't fix stupid by bryan1945 · · Score: 1

      I think the newest version(s) of iLife do this, too. The first time I was using iMovie after getting the new version, I spent 10 minutes looking for a "Save" button. Checked the docs, and found out it autosaves after every change. Was a weird paradigm shift for me.

      --
      Vote monkeys into Congress. They are cheaper and more trustworthy.
    4. Re:Can't fix stupid by Anonymous Coward · · Score: 0

      The (bad) flip-side to this is when someone (*cough* wife *cough*) accidentally changes an entry, it gets saved immediately. No chance to exit and start over or undo even.

    5. Re:Can't fix stupid by Anonymous Coward · · Score: 0

      While I appreciate the general point that not being able to fix stupid, it *is* something that people work on, sometimes with reasonable success. Your specific example is one of those. Many applications these days automatically save state and some even have no notion of "saving" as a manual option. You just quit the application and it starts back up where you left off.

      It's a never-ending battle, as stupid will still be able to find other things to mess up. That doesn't mean we shouldn't try, however.

    6. Re:Can't fix stupid by Anonymous Coward · · Score: 0

      In this case, what the customer wants is for the program to just automatically save the document without prompting. Add in some intelligent history backups and you've got a nice system that pleases everyone.

    7. Re:Can't fix stupid by amliebsch · · Score: 1

      Actually, the correct solution is to avoid Yes/No questions, e.g., "You are exiting the document but have unsaved changes. What do you want to do? Save and Close / Close without saving / Cancel"

      --
      If you don't know where you are going, you will wind up somewhere else.
    8. Re:Can't fix stupid by Anonymous Coward · · Score: 0

      I don't see how displaying the number if records would have made a difference. I assume records are going missing because users are creating new records before committing changes to the ones they are editing.

    9. Re:Can't fix stupid by Apotsy · · Score: 1
      This is another area where Apple gets it right. Their dialogs (even the default ones in the built-in frameworks) have descriptive labels like this:

      You have unsaved changes, are you sure you want to quit?
      "Don't Save" "Cancel" "Save"

      Instead of the usual way which is like this:

      You are about to quit. Are you sure you wouldn't rather not leave documents not non-unmodified?
      "OK" "Cancel" "Huh?"

    10. Re:Can't fix stupid by Skuld-Chan · · Score: 1

      Actually that kind of is a user experience bug. The default should be whatever preserves data, not to exit the app without saving anything. That way if the user just hits enter it pops up a save dialog.

      To me that is a form of fault tolerance - it can deal with dumb users without breaking.

    11. Re:Can't fix stupid by Anonymous Coward · · Score: 0

      Yes and No are just plain the wrong answers. "Save Changes" "Discard Changes and Exit" "Cancel" are the proper options to present. Make "Cancel" the Default. Actually, you can have two different defaults, one for pressing Space, the other for pressing Enter. One should be "Save" the other "Cancel".

  32. No. by rickb928 · · Score: 0, Troll

    What's this noise about malware on OS X? How can that be?

    First, it's not that big a target, so the serious malware vendors won't write for it. Not enough market.

    Second, OS X is substantially more secure than other OSs, so it is not only a more formidable target, but is also natively resistant. So infections are either extremely rare, or nonexistent.

    Third, Apple users are just plain smarter AND dumber than the rest of us. So they either avoid the infection by not engaging in risky behavior, or never stray into the path of malware at all.

    And last, Apple has assured their users that OS X is simply better than that. It doesn't suffer the slings and arrows of outrageous misfortune that other OSs do, by design.

    I cannot, and refuse to, belive that there is any significant threat in the wild that requires Apple to issue a response and patch against. And you cannot make me, no matter how hard you try. You cannot convince me even if you can refute each of my assertions, because Apple user I know and trust assure me, even this morning, that this is nothing but an overreaction by Apple to appease the mass media and keep Ballmer from more destruction and mayhem. Oh, and if it were important, Mr. Jobs would have addressed it personally.

    So the answer is no.

    --
    deleting the extra space after periods so i can stay relevant, yeah.
    1. Re:No. by H0p313ss · · Score: 1

      Well played sir, you might want to seek a position in politics.

      --
      XML is a known as a key material required to create SMD: Software of Mass Destruction
  33. That's not completely true. by mosb1000 · · Score: 1

    the safest software in the world can't protect against Stupid

    This is the idea behind the walled garden approach they've taken to the iPhone and iPad. All the software they run has to be approved by apple first. They seem to be heading this direction with their desktops as well.

    1. Re:That's not completely true. by betterunixthanunix · · Score: 1

      I doubt that security is their objective with the walled garden.

      --
      Palm trees and 8
    2. Re:That's not completely true. by gtall · · Score: 1

      "They seem to be heading this direction with their desktops as well." How so?

    3. Re:That's not completely true. by mosb1000 · · Score: 1

      They now have a app store, much like you would find on an iPhone, for desktop apps.

    4. Re:That's not completely true. by Duradin · · Score: 1

      Your logic is unassailable, your intellect is dizzying and I bet you haven't even got going yet.

      Well, that's proof enough for me. Apple rules the world now with an iron, but fashionable and hip, fist. All hail the turtlenecked lord and emperor.

    5. Re:That's not completely true. by Coren22 · · Score: 1

      That's an aluminum fist, get it right...

      --
      APK likes to ask for responses to the same things over and over. Maybe he just likes the responses?
    6. Re:That's not completely true. by lennier · · Score: 1

      Apple rules the world now with an iron, but fashionable and hip, fist. All hail the turtlenecked lord and emperor.

      You know, I think if Steve Jobs turned up at WWDC in an actual Zeppelin with a horde of gorilla-robot troopers, everyone would cheer.

      --
      You are not a brain: http://books.google.com/books?id=2oV61CeDx-YC
    7. Re:That's not completely true. by mjwx · · Score: 1

      the safest software in the world can't protect against Stupid

      This is the idea behind the walled garden approach they've taken to the iPhone and iPad. All the software they run has to be approved by apple first. They seem to be heading this direction with their desktops as well.

      Nope, that's failed miserably too.

      Malware and data miners have made it into the app store.

      Users will jailbreak, as every Iphone fanboy points out that is extremely easy to do on an Iphone. This means unsigned code can run on it

      Finally, many people have tried the walled garden approach in the enterprise before, it always fails for the same reason, it's impossible to regulate threats from the users own stupidity from the gateway. A single infected floppy disk (yes, we've known the walled garden architecture was an utter failure that long ago) will circumvent all your security.

      --
      Calling someone a "hater" only means you can not rationally rebut their argument.
    8. Re:That's not completely true. by mosb1000 · · Score: 1

      A single infected floppy disk . . . will circumvent all your security.

      iPads don't have floppy drives. All software must be installed from the app store, unless you jail-break them. The same thing is possible in enterprise.

      Users will jailbreak, as every Iphone fanboy points out that is extremely easy to do on an Iphone. This means unsigned code can run on it

      . . .If you've jailbroken it. It's hardly fair to say a feature has failed, if you have to hack in order to disable the feature so that it won't work. To make a car analogy, it would be like complaining an air-bag failed to deploy after manually cutting it out of your vehicle. Of course it doesn't work if you turn it off.

      Malware and data miners have made it into the app store.

      That's the best part. Once they are aware of the malware, they can take it out of store, and erase if from everyone's device. Brilliant.

  34. Re:Can't fix that by EraserMouseMan · · Score: 0, Flamebait

    You missed the point. This is not Apple addressing a weakness in OSX. And Apple is not patching a security vulnerability. Apple clearly explained that they are "releasing an update specifically designed to protect users". It's just Apple going above and beyond what the user expects and automatically giving Mac users everywhere some added OSX functionality for free. Only Apple would be so amazing. I can't wait for the next MacDefender so we can get more free goodies from Apple.

  35. Re:Don't be a FOOL, man: It's ALL about marketshar by benwiggy · · Score: 1
    So Mac users should celebrate that Apple now has sufficient market share to have malware!

    Yay!

  36. Mod Parent Down, uninformed and wrong. by mosb1000 · · Score: 3, Informative

    Unless and until Apple disables the setting on Safari that causes the MacDefender Trojan to be automatically downloaded and executed just by visiting a malicious web page, Apple has not done a good job, in my opinion.

    Apple does not have a setting that automatically downloads files when visiting a website. There is a setting that automatically opens downloaded files, but it's debatable whether they should turn it off or not, since you usually want to open something once you've downloaded it. As others have said before, installing software (any software) on a mac requires your administrator password. You discription can't get much farther from the truth than that You are pretty much completely wrong about everything you've said.

    1. Re:Mod Parent Down, uninformed and wrong. by Teckla · · Score: 2

      Apple does not have a setting that automatically downloads files when visiting a website.

      You are incorrect. I have tested this on multiple machines.

      Safari -> Click on Google Image Search result -> Fully automatic download of malware installer -> Fully automatic execution of malware installer

      Immediately exiting the installer program results in no harm to your computer, however.

    2. Re:Mod Parent Down, uninformed and wrong. by mosb1000 · · Score: 1

      Fully automatic means that you do nothing (as in you go to the website, and then you are infected with malware). How many buttons are you clicking, and how many times do you have to enter your password?

    3. Re:Mod Parent Down, uninformed and wrong. by Teckla · · Score: 1

      Fully automatic means that you do nothing (as in you go to the website, and then you are infected with malware). How many buttons are you clicking, and how many times do you have to enter your password?

      Let me state this in small, carefully chosen words, since you are apparently retarded.

      The MacDefender/MacProtecter installer can be automatically downloaded and executed.

      I did not say the malware itself gets automatically installed. The malware only gets installed if you step through the installer and enter your administrator password.

      In case you missed the difference again, I said the installer can be automatically downloaded and executed.

      Please do try to read and comprehend before you respond.

    4. Re:Mod Parent Down, uninformed and wrong. by mosb1000 · · Score: 1

      I see the problem. I was thinking you were claiming that it installed the application automatically. I don't think just opening the installer is really all that bad, since it's a big red flag that something is wrong. The thing is that there's a lot of people who don't know where the downloaded files go, or how to open them. That can lead to a lot of user frustration, and it's why apple opens them automatically. I don't know if that's how I'd design it, but I think the user is adequately protected nonetheless.

  37. Re:hurr... by Billly+Gates · · Score: 1

    "Does Linux do anything (or at least anything more than MacOS) to protect against this type of attack?"

    It doesn't as far as I am aware of which is one of the few things I do not like about Linux. There is ClamAntivus but it is just a scanner and does not offer a shield or active protection.

    To be fair, as much as Cannical wants to make Ubuntu a friendly consumer OS, Linux remains a server OS where it mostly sits on servers in a computer room in a rack somewhere or run from a VM on a developers machine. MacOSX is a consumer OS run by average Joe's and artists who are not I.T. professionals mostly.

    Also, most MacOSX users became users because they were lied too as MacOSX is sooo secure and will never get viruses etc. So these same people click thinking they were safe. That is more harm than good as MacOSX has no active protection unlike Windows. Windows was terrible but they at least addressing it and the tools are far ahead. All users need protection these days.

  38. Re:Don't be a FOOL, man: It's ALL about marketshar by insertwackynamehere · · Score: 1

    This is certainly true to an extent but another thing is that while no OS is 100% secure, the whole security model of UNIX/Linux/OS X (which is derived from UNIX) is generally better than Windows. Now to be honest, it is my understanding Windows 7 is much better (I jumped ship after XP) but classically, Windows being Windows was a problem and not just Windows being a majority, if I am not mistaken.

  39. Notice . . . by Anonymous Coward · · Score: 0

    When a Mac virus comes out (and that's using the word "virus" very loosely) it makes headlines. Very rare occurrence. When a Windows virus comes out, no one notices. What's one more out of hundreds of thousands?

    That's not to mention that this requires user intervention to work. Even my Windows users know better than to install something that says "OMG u has a virusz!! Instal our L33t anitvirus!!!!!!!1!!1!1111111oneoneone"

    1. Re:Notice . . . by _0xd0ad · · Score: 1

      That's not to mention that this requires user intervention to work.

      Um, so does the average Windows virus...

      Even my Windows users know better than to install something that says "OMG u has a virusz!! Instal our L33t anitvirus!!!!!!!1!!1!1111111oneoneone"

      All the stories I saw about AntiVirus 2010 (or whatever it was) shed some doubt on that claim.

  40. The problem is solvable. by mosb1000 · · Score: 1

    That's not true. One of the thing that throws users for a loop is that it opens up a dialog box that says "scan" instead of download. They could change the settings so that any window is obviously a website (so that users can't get confused about whether they are seeing a webpage, or a dialogue box from their computer). The users trust their computer, but they wouldn't trust some random website. The trick is presenting information to the user so that they can understand what is going on. It's not like they're trusting some random website to install shit on their computer. They think MacDefender is a security feature on their own computer and trust if tor that reason. As with anything, the man thing that causes the stupid behavior is a lack of information. So the solution is providing the user with the right information.

  41. Re:hurr... by gman003 · · Score: 1

    Yeah. It's difficult enough to use that you actually need both brain cells working, and a basic grasp of the English language. Linux is idiot-proof by virtue of being impenetrable to idiots.

  42. Android is open source, yet AT&T by tepples · · Score: 1

    with fedora this won't happen... it is open source and therefore cannot 'lock' someone into paying

    I don't see how one implies the other. Android is open source, yet AT&T locks out installing applications from "Unknown sources" and requires registration as a developer before handing out the drivers needed for adb install.

    1. Re:Android is open source, yet AT&T by iluvcapra · · Score: 1

      "Open Source" is orthogonal to "consumer rights."

      --
      Don't blame me, I voted for Baltar.
  43. Rogue security app by Anonymous Coward · · Score: 0

    My wife supports a lot of Mac users who literally say stuff like "I don't have to worry about security because I have a Mac." In their minds, they can literally just wash their hands of all security considerations because Apple will do everything for them like a bodyguard from Blackwater. Apple has ridden a wave of anti-Microsoft sentiment in no small part by creating or at least encouraging the impression that if you buy a Mac, you'll never have to think again about taking care of your computer except maybe once a blue moon.

    Except that "Mac Defender" is a rogue "security" program. It relies on fooling people who believe their computers are (or will become) infected without it.

    "Oh, I have a Mac, I don't have to worry about anything." "Oooh, I'd better install this to keep my Mac safe!"

    Two totally different groups, each with their own distinct problems.

  44. Nice fantasy.. but its untrue. by Anonymous Coward · · Score: 0

    This simply does not happen on Mac.

    Yet year after year security researchers continue to demonstrate the non-existent nature of OSX "security". Safari has a worse record on drive by install exploits than the latest IE. Infact the latest Windows kernel has had LESS exploits than the Linux kernel. Sad but true. Something you wont hear on this site thanks to all the linux cheerleaders promoting anti-ms stories to the front page ;)

    But hey, who am I to interfere with your reality distortion field. I wish I was ignorant too. The world would be such a wonderful place :(

  45. It's a trojan, not a virus by Anonymous Coward · · Score: 0

    This malware needs to be deliberately installed by the user. Repeat: deliberately installed. Deliberately. D-E-L-I-B...

    You do understand the difference, don't you? If the virus program was able to propagate itself automatically, then you'd actually have something to spout off about. But it doesn't do that at all. The user needs to explicitly install it, and that makes it 100% the user's fault, not the OS vendor's fault. It works the same on any OS.

  46. Also... by _0xd0ad · · Score: 1

    Is it also asshat to set Automatic Updates to download updates automatically and ask me when I'm ready to install them? Because I've had unsaved changes destroyed by automatic installation of updates and automatic restart of the computer under Windows XP, and I'm considering buying a computer with Windows 7.

    Win 7 is pretty good about that; while there is a nag dialog, it can be dismissed for up to 4 hours (select from drop down, dismiss), and the nag dialog doesn't count down and reboot automatically.

  47. Re:hurr... by hairyfeet · · Score: 1

    I frankly don't see how Linux (or any OS for that matter) can protect from this, as it is a classic social engineered 'ZOMG! You HAVE to run this RIGHT NOW or you will die ZOMG!" style infection, which we Windows repair guys have seen quite often through the "Security Tool" and Antivirus 20xxx variants.

    Since Vista I have noticed less and less malware are going after the OS anymore, and instead are either going after third party software with serious flaws (such as anything Adobe along with Java, both of which rarely gets updated on a machine) along with social engineering. on the social engineering front they can usually be divided into these categories. the 'ZOMG! You got teh virus! Run Iz_Not_Viruz_Iz_Fixer.exe to kill it ZOMG!' the 'Want teh hot lesboz? We give u teh hot lezboz for teh free! Jusr run Iz_Not_Viruz_Iz_Codex.exe' so you can play teh moviez!' and the ever popular "My BFF Kim sent me a (insert screensaver,LOLCat Video,zip full of pictures) and it says I need to click this email link and run Iz_Not_Viruz_Iz_Goodie.exe to enjoy them!"

    Notice how in NONE of the above does the underlying OS have a damned thing to do with making the attack successful? I've found a good 90%+ of new malware I'm finding on machines are using social engineering because it is easier to pwn a machine if the user helps and by appealing to their greed, desire, gullibility, or fear, one can easily solicit their aid in infecting their machine.

    So frankly I don't see how anyone can expect Apple, Canonical, MSFT, or anybody else for that matter to magically stop the user without taking away the rights of ownership ala sticking them in a walled sandbox where someone else decides what they can and can't have. Now what you CAN do is to pop up warnings like UAC or in this case like Apple asking for the password, and if they are foolish enough to give it have a cleaning tool for after the fact like MSRT.

    But unfortunately there simply isn't a way to patch stupid, and most of us I'm sure wouldn't like to give up our rights to control our machines just to keep the Forest Gumps out there from doing dumb shit. Hell just a couple of weeks ago I had to deal with an angry customer who was infected less than a week after I handed him his new machine. did I miss an attack vector? Nope he ignored every word I said and went so far as to disable his AV because it wouldn't let him install "the new Limewire" (Iz_Not_Viruz_Iz_New_Limewirez.exe) and then got pissed because there wasn't some way for the box to magically protect him from his own stupidity. I finally just told him "You ignored everything I said, you disabled your AV, all because you didn't want to pay for some cheap pop crap. Well TNSTAAFL and if you walk out in front of a truck after everyone has warned you it is coming? Well then you deserve to be hit, sorry". Sometimes you just have to be blunt with the stupid, otherwise they are just too dumb to fucking get it.

    I'm sure the tidal wave of new malware coming to Macs thanks to the success of MacDefender will weed out the retarded soon enough. The question will be just how much does Apple's business model depend on the stupid, and how many of them will end up going to Windows when they find out Macs can't magically protect them from being total dumbasses. Frankly after dealing with some of the braintrusts that argued up and down with me that "Macs can NOT get infected!" while the DNSChanger bug was happily sending all their machines to porn sites? If the ones I have dealt with are typical you are looking at a minimum of 30% of mac users being dumb as stumps. Whether they will get pissed and leave or stay because Macs are more expensive (and yes I've seen plenty of folks buy Macs because they have money and wish to show it off. How do you think that "I am rich" app was able to sell?) is anybody's guess.

    --
    ACs don't waste your time replying, your posts are never seen by me.
  48. And the game begins by Anonymous Coward · · Score: 0

    The update for Mac OS X will automatically find and remove the malware on an infected machine and also will warn users if another infection attempt is detected.

    The cat and mouse game with malware developers begins. Within a few days there will be another version of Mac Defender that is not detected or removed. What will Apple do then? Make another patch?

    Software is too easy to change for Apple's approach to be feasible in the long run.

  49. Re:hurr... by iluvcapra · · Score: 1

    "Only download software from repositories" is a very flaky solution-- all you're doing is translating your trust from a website to a repo maintainer. The repo maintainer obviously is a good third-party that has a strong incentive to only provide clean software, but what if he gets hacked? It's no better or worse than a top-down App Store then, with the added complication that there are no repos for any Linux distro I'm aware of that allow for developers to charge money for installation, which drives away a lot of commercial retail development.

    --
    Don't blame me, I voted for Baltar.
  50. NOT according to Mr. Kaspersky by Anonymous Coward · · Score: 0

    This article submission, based on words from Eugene Kaspersky tends to disagree with you, as do I (see my p.s. below later, where I ask you a VERY pertinent question based on YOUR STATEMENTS quoted there) where he even states Windows is as secure as Linux or moreso:

    http://slashdot.org/submission/1568086/Windows-not-less-secure-than-LinuxOS-X

    That was put up as a story for submission here, in the "recent section", but it never was put onto the main page... totally "blown off" & we ALL know why!

    (The /. "Pro-*NIX slant" around here & the trolls that help promote it, knowing most folks are "sheeple" that 'follow the crowd' because they don't know enough about a tech topic to know better!)...

    Yes - I've even had it to my posts here, & it's happened SO many times on security data I've put up in this regards that it's NOT funny!

    E.G. #1 on ANDROID problems (a LINUX variant) ->

    http://tech.slashdot.org/comments.pl?sid=2148646&cid=36106332

    E.G. #2 on LINUX unpatched security vulnerabilities currently, having 3.5x as many as not only Windows 7 alone, but vs. nearly the ENTIRE suite of MS products for business & development as a platform ->

    http://it.slashdot.org/comments.pl?sid=2077414&cid=35776848

    (Not even a technical justification was given for the "mod down", just off topic trolling b.s. & the -1 rating, even though I used VALID data from a REPUTABLE SITE for security vulnerabilities remaining unpatched in both Linux latest & Windows 7 + all of MS' latest wares!)

    APK

    P.S.=> And, do I have experience in this area? Yes, & since 1997 or so, on how to secure Windows variants (& yes, it CAN be done):

    http://www.bing.com/search?q=%22HOW+TO+SECURE+Windows+2000%2FXP%22&go=&form=QBRE

    QUESTION, vs. this statement from you quoted next:

    the whole security model of UNIX/Linux/OS X (which is derived from UNIX) is generally better than Windows. - by insertwackynamehere (891357) on Wednesday May 25, @11:52AM (#36239684)

    Question: Does ANY shipping version of MacOS X have ASRL (address space randomization) ? Not afaik... not yet, & it's omitted having it for YEARS now!

    So much for your statement then!

    ... apk

  51. I'm still not buying it by MikeRT · · Score: 1

    But have you ever owned a Mac?

    Yes, since OS 8.6, actually. I ran OS X 10.0, back when most Mac users today didn't even know what the heck it was. Not that that makes me an expert on OS X security, but I'm hardly a neophyte Mac user.

    This simply does not happen on Mac. I am sorry, but it is true. Yes, someone can make a trojan horse and generate a lot of media hype but that boils to someone tricking people into giving the malicious software a chance to run.

    And this is how a significant amount of Windows viruses are spread as well. In fact, how many Windows viruses are spread strictly because of Windows security flaws rather than because of IE, Flash and other apps?

    You've managed to completely miss the point, just like King_TJ below you in this thread. The problem with their attitude is that it is a license to be stupid. They treat their Mac like it's a rubber-padded room where they can't hurt themselves. Even if it is safer, and I never said it wasn't safer, that is no license to say blatantly stupid things like "I don't have to worry about security because I have a Mac."

    Yeah? And how is your Mac going to protect you against a phishing attack? How is it going to protect you when you think you're invincible, download a trojan and run it? These people don't understand that when they enter their password to install an app, they're doing a GUI version of "sudo" to do it. So yes, the ability to get infected by trojans is lessened, but the attitude makes it more likely that they'll confidently run one thinking it's ok because some magic property of their Mac will stop it from hurting them.

  52. Mainframes... by klubar · · Score: 1

    Traditionally mainframes are very secure from this type, or any type, of malware. The administrators are generally competent and have good controls on what get installed. Also, mainframe admins are used to paying for software have very high expectations on the quality.You never hear about virus on IBM system Z10's

  53. Re:hurr... by plumby · · Score: 1

    Not sure who's been doing the lying about MacOS being 100% secure (it clearly isn't), but it it far, far safer for the average user than Windows is. The "running random application you've downloaded and typing in your password" threat is pretty much the same for any OS out there (except for the IOS-style walled gardens), and is only smaller on MacOS and Linux due to there being less users to target, and potentially the level of intelligence of the average user. The virus/drive-by malware threat, OTOH, is much lower on MacOS and Linx than on Windows - both due to the smaller target, but also due to there being far less exploitable holes - or at least far less that have ever been discovered.

  54. Celebrate, but only after applying this by Anonymous Coward · · Score: 0

    http://www.apple.com/support/security/guides/

    Because that's VERY much like the guides for Windows I have done since 1997 for Windows NT-based OS users:

    http://www.bing.com/search?q=%22HOW+TO+SECURE+Windows+2000%2FXP%22&go=&form=QBRE

    That Apple version follows the same "generic guidelines", using "layered security techniques"...

    Now - Because, without doing THAT guide's points? You're not as secured as possible vs. attack as you could be on MacOS X!

    (Also/Additionally: Until MacOS X ships with ASRL too, which yes, Windows has? It's not as secured as Windows is, because MacOS X lacks that!).

    APK

    P.S.=> Same with Linux folks too, even with SeLinux bearing distros: They're NOT as secured as possible either, until SeLinux settings are "tightened"!

    ... apk

  55. Re:hurr... by plumby · · Score: 1

    The difference for me is that MacOS/Linux look to be far less susceptable to the virus/drive-by issues that Windows has been plagued with over the years. There's a big difference between running a random app from the internet to get infected, and happening to stumble across a dodgy site exploiting a buffer overrun in IE. It's certainly getting a lot better with Win7, but things like MS's desire to support the huge range of legacy apps on Windows mean that there's likely to be many more security holes to come in the Windows space.

  56. Re:Can't fix that by Anonymous Coward · · Score: 0

    Cannot tell if trolling or just very stupid.

  57. Re:Don't be a FOOL, man: It's ALL about marketshar by amliebsch · · Score: 1

    I don't think you know what a security model is.

    --
    If you don't know where you are going, you will wind up somewhere else.
  58. agreed: "Safe Content" exploitable by rsborg · · Score: 2

    What defence is there against the end users downloading and running MacDefender and giving up the Admin password?

    A big part of the problem is Safari's default settings. Safari will automatically download and run the MacDefender installer. This, in itself, is harmless (you can quit the installer), but that default behavior in Safari makes it that much easier for malware authors.

    Apple needs to acknowledge that Safari's default setting to automatically download "safe content" needs to be disabled.

    Bingo. I remember when they included "safe content" auto-run in Safari, and thinking to myself... this is just begging for an exploit (OSX does have layers of security, but this was a barn-door through an important security layer).

    They need to do a bit more thinking about that whole concept and produce their equivalent of "iPhone cut and paste" that solves major dilemmas (usability vs. security) while also being default secure (and optionally allowing lockdown for the paranoid).

    Gruber aside (he posed Mac App Store as the "solution" to these kind of trojans), Apple needs to acknowledge that 90% of users download potentially-executable stuff from the internet, and OSX needs to get savvy security-wise on that... growing pains and all.

    --
    Make sure everyone's vote counts: Verified Voting
    1. Re:agreed: "Safe Content" exploitable by LordLimecat · · Score: 1

      Apple needs to acknowledge that 90% of users download potentially-executable stuff from the internet, and OSX needs to get savvy security-wise on that... growing pains and all.

      Having spent years trying to convince the world that viruses, trojans, and generally "bad-ware" is an exclusively Windows phenomenon (with their "im a Mac" ads), a lot of this falls directly on Apple's head. THEY are responsible for misinforming users, and leading them into a false sense of complacency.

    2. Re:agreed: "Safe Content" exploitable by mjwx · · Score: 1

      Gruber aside (he posed Mac App Store as the "solution" to these kind of trojans), Apple needs to acknowledge that 90% of users download potentially-executable stuff from the internet, and OSX users need to get savvy security-wise on that... growing pains and all.

      Isn't that the antithesis of it "Just Works(TM)".

      --
      Calling someone a "hater" only means you can not rationally rebut their argument.
  59. When M$ itself makes the buggy app by tepples · · Score: 1

    Otherwise, let the OS do what it needs to do and complain to your software vendors for their buggy software.

    To what Microsoft support channel should I complain that Windows Notepad (or any other application included with Windows) doesn't automatically save and restore an unsaved document across a restart?

    1. Re:When M$ itself makes the buggy app by Coren22 · · Score: 1

      Many Windows apps do however. Word and IE both handle a reboot just fine, but I think notepad is just too old to handle it.

      --
      APK likes to ask for responses to the same things over and over. Maybe he just likes the responses?
    2. Re:When M$ itself makes the buggy app by drsmithy · · Score: 1

      Word and IE both handle a reboot just fine, but I think notepad is just too old to handle it.

      Notepad is basically just a textedit control wrapped in a window. It's not so much a matter of "not handling it" as being "not even vaguely meant for anything except very quick and dirty textfile viewing".

  60. Mac App Store-only APIs in Lion? by tepples · · Score: 1

    Then I will stop buying from those computer makers [who lock down the owner of a computer from installing software].

    Let me guess: You've stopped buying from [all the console makers].

    Yeah, is that so hard to believe?

    It is when there are entire genres of games that are underrepresented on PCs and Macs compared to consoles. Statistically nobody wants to connect a PC or Mac to a television to play a video game, so very few games for PC or Mac support a use case with multiple gamepads.

    ObMac: And how long until Apple starts using lockdown on new APIs in Mac OS X so that only applications in the Mac App Store and applications built with a $99/year Mac App Store developer program certificate can access them?

    1. Re:Mac App Store-only APIs in Lion? by betterunixthanunix · · Score: 1

      It is when there are entire genres of games that are underrepresented on PCs and Macs compared to consoles.

      You are assuming that these games are something that I (or even most people) have the time or desire to play. I have seen console games, and I used to play them when I was a kid, but to be honest I really do not play video games much anymore. I play games, sure -- strategy games like Go -- but intense 3D video games are really not something I spend much time on these days.

      --
      Palm trees and 8
    2. Re:Mac App Store-only APIs in Lion? by Charcharodon · · Score: 1
      "Statistically nobody wants to connect a PC or Mac to a television to play a video game,

      You are correct, unless you have a $1500+ TV most TV's still suck ass in terms of picture quality, refresh rate, etc compared to a modestly price 24" monitor.

      Other than party/music games my one and only console sees zero use. A PC is still the only way to play if you want the good stuff.

  61. Admin Password by Anonymous Coward · · Score: 0

    Password no longer needed: http://www.computerworld.com/s/article/9217061/Newest_MacDefender_scareware_installs_without_a_password?taxonomyId=89

  62. Re:hurr... by node+3 · · Score: 1

    You never, ever hear people say, "I have a Mac, but if it had viruses, I'd switch to a PC". NEVER. That's a fantasy that people who sell PCs tell themselves. What you are calling "stupid" is simply a lack of knowledge and a lack of either desire or enthusiasm for getting to know technology the way nerds do. This is not "stupidity", it's just being a person with different interests than you.

    You also keep building the same old straw man, that Mac users think Macs somehow magically can't possibly get viruses. When people say this, they all but universally mean that they don't have to worry about viruses, not that they are impossible. Any time a Mac user talks about this online, they *ALWAYS* point out some variation of "but it's not impossible", to appease PC nerds like yourself who are so quick with a bag of straw.

    Right now, even with MacDefender, Mac users don't have to worry about viruses. This may change. This is really the first somewhat interesting malware for the Mac, and only time will tell how this is going to pan out, but even assuming this is the beginning of a virus "tidal wave", people aren't going to all of a sudden switch to Windows. Why would they? It's not like the virus situation there is any better. In fact, even if this is the start of a "tidal wave" (which has been predicted for a decade now, and is not something you can reliably predict anyway), it would have to be a tidal wave of a *PHENOMENALLY IMPOSSIBLE* magnitude for it to be worse than on Windows.

    More and more people are buying Macs at an ever increasing rate. Lack of viruses is just one part of their reasoning.

  63. Re:hurr... by AlienIntelligence · · Score: 1

    There is ClamAntivus but it is just a scanner and does not offer a shield or active protection.

    BitDefender for Linux...

    will scan mounted Windows partitions as well.

    very nice to have on a live CD. While you are
    disinfecting your (insert relationship here)'s
    computer you can also show them the benefits
    of using Linux.

    -AI

    --
    For me, it is far better to grasp the Universe as it really is than to persist in delusion
  64. FYI by Anonymous Coward · · Score: 0

    Just a friendly FYI for anyone who doesn't know...

    A file extension is just part of the filename and does not necessarily say anything about the actual contents of the file. By default, Windows treats any file with any of the following extensions as a Portable Executable (PE): cpl, dll, drv, exe, ocx, scr, sys. A scr file is literally just renamed from exe after it is compiled.

    However, scr is also used as a generic extension for scripts, especially on UNIX (and UNIX-like) platforms. There are also dozens of programs out there that happen to use scr as an extension for their internal use (temporary files, game saves, etc). To be fair, though, if any website is trying to shove a file in your face with the scr extension, it's going to be a PE file, not a script.

  65. Protection needed by Anonymous Coward · · Score: 0

    So where's the app that allows you to protect yourself from buying an overpriced i7 or a tablet with an inferior amount of hardware features compared to Android pads?

  66. Re:hurr... by hairyfeet · · Score: 1

    If you were any more full of shit I could squeeze you and solve the energy crisis! You accuse me of building straw men while you desperately jump through logic hoops and split hairs with a fucking laser! I don't give a wet fart whether you call it malware, trojan, fucking STD and you know what? i'll let you in on a little secret...here it comes...to the user it is ALL viruses all the way down, kay?

    And whether you stick your head in the sand and go "tra la la" ain't no concern of mine friend, if you want to think all mac owners are Harvard educated CS grads, go right ahead. i'll tell you you're completely full of shit,. but don't let me stop your delusions none. Whether you refuse to accept it or not many believe Macs are immune to ALL viruses and Yes Virginia they consider this a virus. Get your panties in a twist if you want, but folks decided anything nasty is a bug a while back, right around when they decided there wasn't a difference between "hacker and cracker'. And I have seen sales guys in Worst Buy feed that very same lie to sell Macbooks.

    So whether you choose to see that this is a bug, or that many Mac owners believe they can do whatever they want on the net is YOUR business, but as a guy that has been in the trenches for damned near 25 years I can tell you its a fact. I'm betting right now there is a shitload of VERY pissed off mac owners who had their little bubble burst on Macs being immune. Will that get them to switch to Linux or Windows? Who knows, but I doubt it. People are lazy and stick with what they know and nobody markets boutique slick like old Jobs. But what I CAN tell you is the malware writers are gonna have a field day, because they already have seen blood in the water, and they know the Macs are like sheep waiting for the wolves to descend. so many have convinced themselves they have no reason to ever worry they don't even think.

    How else do YOU explain a trojan that needs a password spreading like wildfire? Were all those Mac owners just bored and wanted the "fun" of dealing with malware? Give me a break! .

    --
    ACs don't waste your time replying, your posts are never seen by me.
  67. Re:hurr... by node+3 · · Score: 1

    First off, you're engaging in another straw man, I never played the "it's not a virus" word game. And no one says viruses are impossible on the Mac. They say you don't have to worry about them, which is true. When one of your victims says, "I don't need antivirus, I have a Mac, Macs can't get viruses," they don't mean it's impossible, they mean it's not possible right now, and although there are a very small handful of trojans (which I'm including as viruses, you idiot), it's still true in the way people mean it, which is that they don't need AV software.

    There isn't a single Mac user who will tell you that Macs will never need antivirus software.

    Second, it's not "spreading like wildfire". It's the most successful Mac malware to date, but it's still insignificant.

    And finally, you may have been "in the trenches" for 25 years, but that clearly hasn't imparted any actual knowledge beyond the PC. You are too set in your ways to understand how different things might work differently. To, it's already a foregone conclusion that Mac malware is going to explode... Funny, jackasses like yourself have been claiming that for a DECADE now, to no avail. Sure, it's *possible* that it will happen, but it's not necessarily coming any time soon.

    Will that get them to switch to Linux or Windows? Who knows, but I doubt it.

    That was YOUR point. This is a perfect example of PC jackasses making up bullshit claims. You pose a question that you don't even think is likely? That's an extremely dishonest way to try to bolster your point.

    You also try to pain Mac users as stupid and arrogant rich people. That is just another example of your pathetic inability to understand people who aren't just like you.

  68. Admin Password No Longer Needed by tj.parisi · · Score: 2

    The user still needs to click through dialogs, but doesn't have to give admin password in the new version: http://www.computerworld.com/s/article/9217061/Newest_MacDefender_scareware_installs_without_a_password?taxonomyId=89

  69. You really want to apply that guide now, & why by Anonymous Coward · · Score: 0

    HOT OFF THE PRESSES:

    ---

    Mac malware authors release a new, more dangerous version:

    http://www.zdnet.com/blog/bott/mac-malware-authors-release-a-new-more-dangerous-version/3385

    ---

    So, the MacOS X security guide Apple puts out that I told you that you ought to look into & apply in my initial reply to you here:

    http://apple.slashdot.org/comments.pl?sid=2184872&cid=36240972

    ?

    That now holds even more true NOW, than it did before.

    APK

    P.S.=> Face it Mac Folks: Your time enjoying "security-by-obscurity" that MOST *NIX variants enjoy, is probably over - no more 'resting on your laurels' (not that they ever were, it was only lack of largescale usage that protected you)...

    So, NOW?

    NOW, we'll see how "secure & safe" vs. 'malware-in-general' MacOS X really is (it's not, & in fact, less so than Microsoft's Windows 7 is because MS has had decades of experience fighting & patching vs. it, whereas the *NIX camp has not (even though the 1st worm was on *NIX (morris worm))... apk

  70. HOT OFF THE PRESSES (some new 'FYI' on this) by Anonymous Coward · · Score: 0

    HOT OFF THE PRESSES, these malware makers "upgraded" this malware apparently:

    ---

    Mac malware authors release a new, more dangerous version:

    http://www.zdnet.com/blog/bott/mac-malware-authors-release-a-new-more-dangerous-version/3385

    ---

    So, the MacOS X security guide Apple puts out that I told other repliers here to look into & apply in my initial reply to they here:

    http://apple.slashdot.org/comments.pl?sid=2184872&cid=36240972

    ?

    That now holds even more true NOW, than it did before.

    ---

    "Windows being Windows was a problem and not just Windows being a majority" - by insertwackynamehere (891357) on Wednesday May 25, @11:52AM (#36239684)

    To an extent, perhaps, because things like DEP, ASR, & UAC were not in place... but, you COULD secure Windows NT-based OS before VISTA, & very well (to the point users told me they had systems keeping going for YEARS after applying what's below that I wrote up since 1997), as long as you applied & followed the guidelines I listed here:

    http://www.bing.com/search?q=%22HOW+TO+SECURE+Windows+2000%2FXP%22&go=&form=QBRE

    Securing Windows better, 2000/XP/Server 2003/VISTA/Win7/Server 2008? It's doable - just like it is for MacOS X, & yes, even SeLinux bearing Linux distros.

    (Worth doing & taking 1-2 hours of your time to do yourself, & do right - Because, after all: It's YOUR time & money folks!)

    APK

    P.S.=> Still, BOTTOM-LINE HERE:

    Face it Mac Folks: Your time enjoying "security-by-obscurity" that MOST *NIX variants enjoy, is probably over, for MacOS X (and certainly for ANDROID, a Linux variant) - there'll be no more 'resting on your laurels' (not that they ever were, it was only lack of largescale usage that protected you)...

    So, NOW?

    NOW, we'll see how "secure & safe" vs. 'malware-in-general' MacOS X really is (it's not, & in fact, less so than Microsoft's Windows 7 is, not only because Win7 has ASRL built in & MacOS X does not in shipping models, but also because MS has had decades of experience fighting & patching vs. it, whereas the *NIX camp has not (even though the 1st worm was on *NIX (morris worm))... apk

  71. Since you brought it up .... by King_TJ · · Score: 1

    1. Virus authors like to pick on the most popular platform, hence Windows (currently, anyway). But you're clueless if you think that's the ONLY reason we don't see more problems with malware on the Mac. Attacking a Windows system has traditionally been like shooting fish in a barrel. All your users could be expected to be running with the equivalent of "root user privileges" at all times, and the design of the OS with a "system registry" made it incredibly easy to secretly run programs at startup. (How many places did they conclude you were able to tell Windows to run a program during bootup by way of registry entries? I believe someone said at least 14?)

    2. I was simply writing about the experience from off the top of my head. Yes, .scr is the extension for a Windows screen-saver (often a malware vector though anyway, as they know people can't resist allowing the download of a file that promises to give you a cool new screen-saver of something or other that's pretty/shiny). However, it's ALSO the default for script files in AutoCAD if you have it installed, and it's used in several other ways as well. Substitute "download a script (.vbs extension)" if it pleases you... whatever. The point is, you'll see all sorts of lame attempts to send you filetypes which OS X won't even use when you surf "questionable" web pages.

    3. Your "better idea" stinks, and sounds to me more like what I'd hear spouted off by some low-wage Geeksquad loser..... I'm asking people to try using a Mac to do things that typical Windows users do every day, causing them virus infections, so they can learn a little bit about what's going on out there and see for themselves if the Mac really handles itself any better in that scenario (and yes, it does). You're suggesting that for whatever reason, it would somehow be more "useful" for me to ask hackers from all over the world to target my specific IP address, trying to hack into my Mac sitting at that address. Whatever method(s) they'd eventually come up with to hack in, they'd have little to nothing to do with the reasons why it's safer to surf Internet web sites on a Mac than in a browser on a Windows platform! I probably wouldn't even get the opportunity to really see what they were doing either.

    This isn't about saying it's IMPOSSIBLE to put a virus on a Mac (or hack into it, which wasn't even the topic of discussion). This is about current REALITY.... what your average user experience really will be if they take home a Mac running OS X and use it tonight to get on the Internet, vs. what it'll be for a Windows user doing the same thing. And yes, if they used a Linux machine to go online, they'd have pretty much an equally "virus/malware resistant" result. That's because BOTH Linux and OS X are versions of Unix.

  72. Eight seconds by tepples · · Score: 1

    Eight seconds according to this InformationWeek story. So make sure to have the Service Pack 3 disc handy if you'll be providing PC repair service to someone who might have Windows XP RTM or SP1 discs, so that you can install the service pack before connecting the computer to the Internet.