Many Mac OS Users Not Getting Security Updates
AmiMoJo writes "According to security company Sophos, around 55% of home users and 18% of enterprise users have updated to Mavericks, the latest version of Mac OS (10.9). Unfortunately Apple appears to have stopped providing security updates for older versions. Indeed, they list Mavericks itself as a security update. This means that the majority of users are no longer getting critical security patches. Sophos recommends taking similar precautions to those recommended for people who cannot upgrade from Windows XP."
Since you know, the switch ads told me Macs don't get viruses or other bad stuff
I'm woking in a large university where you find a larger percentage of Mac and Linux systems. It's hell keeping all operating systems updated properly. Researchers get grants to do something then spend $2million on the custom systems build on a particular version of an OS. Now it's 5 years later are still using the old OS because it would cost another $1million to upgrade the custom code and get new equipment that doesn't use parallel ports for data transfers.
It all starts at 0
Far be it for me to say that a security company was using dodgy numbers to hype its product, but their MacOS adoption numbers are soley from Sophos-for-MacOS users, which I'd have to imagine is a really spectacularly unrepresentative sample. And their assertions that Mavericks was the only way to get security updates for MacOS going forwards seems to be contradicted by the fact that the previous version of MacOS was security patched when Mavericks was launched.
No kidding!!! What do you say at this point?
It is unfortunate that Apple didn't think that one through a little further.
If they are adopting the model of "the OS Upgrade IS a security update", then throw it in their normal update mechanism rather than having people seek it out.
Since they didn't, they must realize that there is a chance that their Upgrade could break things for people, so let them upgrade in their own time, and as such should back port the occasional update to the computers that they sold 3 months or so ago.
Thirty four characters live here.
I'm not sure where the author gets the idea that Apple has stopped releasing security updates for older systems. The page linked from the summary lists updates for software for OS X 10.7 and up as recently as 16 December, a Java update for versions 10.6 and up on 15 October, and the most recent actual security update, also for versions 10.6 and up, on 12 September. Apple releases security updates when necessary, not every Tuesday like Microsoft. The fact that they've released an OS update, which includes security patches, for the most recent version of the OS without releasing one for older versions most likely means that the vulnerabilities addressed were not present in older versions; this has been the Apple release strategy for at least a decade.
When my iPhone 3G could not be upgraded to iOS4, I switched to andriod for security concerns.
Then my 2 generation intel Macbook Pro was too old to upgrade to Mavericks, so I bought a Lenovo.
I'm seeing a pattern here. I will not buy Apple anymore as a result of their withholding security updates from older and perfectly functional hardware. My response is not to buy a newer model, but to switch away from Apple products.
I initially switched to Apple because I liked their hardware and as a developer I wanted to experience a variety of OS's. Seeing how they abandon products only a few years old has left a sour taste in my mouth, I'm done buying Apple products, I've learned my lesson.
That's some real troll-bait comparing Mac OS to Windows XP. There's really little similarity. Microsoft is discontinuing security patches for a 12 year old OS. Apple is discontinuing security updates for an 18 month old OS.
I don't respond to AC's.
Looking at the Apple update release page there hasn't been a Security Update since Mavericks was released so there is no evidence to support the assertion from Sophos.
The last Security Update from Apple was 2013-004 and included updates for Snow Leopard, Lion, and Mountain Lion. Until Apple releases a security update that *only* targets Mavericks this is just Sophos FUD.
You may think me a tired, old, cynic. I'd have to disagree about the tired bit.
Mac OS was deprecated 12 years ago when OS X stepped in.
I have a 5.5 year old MBP and it runs Mavericks almost perfectly as well as it ran Leopard. The case for not upgrading to Mavericks if you have a x86 Mac that is the age of mine or newer is based almost entirely on being a curmudgeon who doesn't want someone telling him to just move onto the next version. The vast majority of the refuseniks are likely not savvy users objecting to the "iOSification" of MacOS X or something like that, but ordinary idiots who blink at you with a blank expression when you ask what version of OS X they use. "Huh? Macs haver versions?" Yeah. My wife and I have met a lot of casual Mac users who don't seem to understand that no, really, MacOS X has versions just like Windows and that using the same OS X that came with your Mac three or four years later is like saying "I don't need that service pack shit" on Windows.
I have an old, first-gen Mac Pro, which I use as a regular desktop. I tend to spend the bulk of my time in Windows, but I use OS X on occasion.
For whatever reason, the firmware on it is for 32-bit systems, something Mountain Lion and now Mavericks does not support. I'm still running Lion because I don't care about their new features and don't want to risk breaking something trying to hack it into working. Getting 64-bit Windows onto the machine was difficult enough.
So yeah, for me at least, it's because Apple doesn't want to give me security updates, not because I don't want to download them.
Apple is discontinuing security updates for an 18 month old OS.
Calling Mavericks a "new OS" is really something of a stretch. It is at best a modest revision of the previous version. When Apple does something as dramatic as the difference between XP and Vista or Windows 7 and Windows 8, then maybe it might be realistic to call it a new OS.
For quite some time now, it's been Apple's policy to support the current OS release as well as the previous OS release. That means that since the release of Mavericks, they would be supporting Mavericks (current release) and Mountain Lion (previous release). But, this is also the first generation that the new OS 1) supports every machine that the previous release supported 2) is offered for completely free. So, practically speaking, there's very little reason to not just force all Mountain Lion users to upgrade to Mavericks to have support. However, I don't see any evidence on their page that they are even instating this policy? If they did, though, it would be very aggressive, but not really unremarkable for Apple.
Scorta futuere amo!
It's a security update, if you don't want to be hacked, it's generally good practice to update.
Better log off the internet, by using it you are engaging with all kinds of non-open source software.
That doesn't mean that all your software works. If your company has decided to run OS X and their mission critical business app doesn't work with the new OS then they can't upgrade. And add the fact that new machines can't be downgraded to the older OS, so you can't buy new hardware either.
Lets see how many updates you get 2 years after you purchased your Nexus. Troll.
As long as it runs POSIX and an X11 server, it should run desktop applications designed for desktop Linux or FreeBSD with minimal porting work. The POSIX-certified versions of Windows did not include an X11 server and therefore were not very useful as *n?x workstations. Likewise, despite using the Linux kernel, Android uses different apps because its GUI layer runs on something other than an X11 server.
I'm running Doom in Win8, does that count?
Compatibility mode in Win8.1 goes as far back as Win95. It's not guaranteed but I've got 15-year old Windows programs written under NT4 to work under Win8.1.
The Mac was a PC exactly to the extent that an ST or Amiga was a PC. Until the Intel transition, the architecture of the Mac wasn't anywhere near that of the IBM-compatible (now Lenovo-compatible) PC. Nor was the architecture of Mac OS or OS X anything like that of MS-DOS or Windows.
If it's a properly network-isolated setup, who gives a fuck how old the security is?
Tell that to the Iranians who got their centrifuges destroyed by Stuxnet. Network isolation is not necessarily enough.
So if someone has a computer that is too old to run Mavericks, he's SOL with regards to security issues?
Throwing a wrench in all of this of course is Apple's decision to stop charging for new Mac OSes as of Mavericks. Since it's free, is it a new OS or is it just another patch for Mountain Lion?
If the system requirements have increased, it is a new operating system because it is likely to require hardware replacement.
To use Microsoft as an example here, they treat Windows 8.1 as a service pack for Windows 8
The system requirements of Windows 8.1 are identical to those of Windows 8, and they don't even differ noticeably from those of Windows Vista.
Define "engaging". FSF has set one boundary for "engaging" at whether the non-free software runs on one's own computer, as described in the article The JavaScript Trap. Or are you referring to the "Service as a Software Substitute" phenomenon described in the article Who does that server really serve?
I have a MBP provided to me by a contractor to a Large Government Agency.
It has mandated anti-virus (which kills the battery), mandated third-party whole-disk-encryption (instead of File Vault), mandated third-party remote backup (instead of Time Machine), mandated third-party remote access...
The contractor support team routinely takes a year or more to certify the mandated suite for new OS releases.
I will probably be on 10.8 on this MBP in 2015, considering we leaped forward from 10.6 last year.
To a Lisp hacker, XML is S-expressions in drag.
Speaking of universities, the Lehigh virus spread through Lehigh University without networking.
Nope, it's Win8.1 64-bit, 8GB of RAM etc. I'm running one of the DOOM clones (zdoom I think), probably written around the W95 era so maybe 20 years old. I'm thinking of installing DOSbox to run GWBasic later just for the laughs. Are there emulators like DOSbox for Mavericks to run 68k MacOS programs? I assume so...
If you wanted any of those Windows-only business applications you could always just run XP or 7 in a virtual machine. Parallels is fast due to hardware acceleration but it costs money, and VirtualBox is free but not quite as fast. I know of a CEO who uses a MacBookPro exclusively, where all of the business software is Windows-only and he uses ether Parallels or Boot Camp for the odd occasion when he wants to delve into the workers' business output.
I'm running one of the DOOM clones (zdoom I think), probably written around the W95 era so maybe 20 years old.
Based on a quick Google search, ZDoom appears to be a source port to Windows. This and other 32-bit Windows applications run in 64-bit Windows.
Are there emulators like DOSbox for Mavericks to run 68k MacOS programs?
There is Basilisk, but not being a regular Mac user I can't offer an opinion on it.
Unfortunately Apple appears to have stopped providing security updates for older versions.
A statement that is cast into severe doubt by the continuing appearance of security updates for older versions, like Safari 6.1.1 on December 16th, Apple Remote Desktop 3.5.4 on 22 October and the lack of any claim that Apple has stopped releasing security updates in the article they link to to support their claim that Apple has stopped releasing security updates. It does talk about some of the security updates in 10.9 - a couple of which are covered by those Safari and Remote Desktop updates. As for the rest, TFA doesn't take the trouble to actually establish whether they are fixes c.f. 10.8 or fixes for issues in the 10.9 beta that was widely released to developers - so neither will I.
Now, is Apple maybe prioritising which security fixes it backports to 10.8 or earlier, and only bothering with the "OMG remote pwnage imminent" ones? Maybe. I will try and contain my fear.
In a survey of 100 programmers, 111111 thought that duck-typing was a good idea.
Ubuntu runs FANTASTICALLY on that "out of date" hardware.
I have a couple of 24" iMac's that are the bit white plastic variety that utterly scream running linux. It's still fantastic hardware, s oyou can use a different OS on it to keep it in service. Makes an awesome Kitchen PC.
Do not look at laser with remaining good eye.
Maybe some people aren't updating because new OS X features have been more annoying than helpful of late. Taking "Save As" out of textedit and creating a version control system was the point where I decided I'd wait out future upgrades until I had the time to read about what people were whining about with the new version.
A few weeks ago my Mac started nagging me to instal the latest patches for 10.6.8. ...
Did not do that yet
Anyway: I really doubt Apple has or will stop system updates for 10.6.x, 10.7.x or 10.8.x.
They never have done something like that before and I doubt they ever will.
It does not even make any sense.
Cost free eBook I read (by iBook/Kobo/Amazon/ObookO/Gutenberg etc.): "The Green Odyssey" by Philip Jose Farmer.
Mac OS X Mavericks (10.9) has the same requirements as Mountain Lion (10.8). So the comparison to Windows 8.0 and 8.1 is correct.
...I dislike Microsoft and Windows with a passion, but at least they don't arbitrarily decide that your PC is too old to run their latest operating system.
Microsoft just did this... Windows 8.1 64-bit has a requirement that your CPU (and BIOS) support the "CMPXCHG16b" instruction, which does not exist on all AMD64 processors, especially early AMD models, and some Intel ones where the manufacturer has (for some reason) disabled the instruction via BIOS--often without an explicit option to turn it on. So, those people are stuck on Windows 8.0 64-bit or need to "up/downgrade" to Windows 8.1 32-bit, which doesn't require the instruction.
http://www.pcworld.com/article/2058683/new-windows-8-1-requirements-strand-some-users-on-windows-8.html
Of course, Microsoft is setting themselves up for a lawsuit since they went on record giving Windows 8.0 a 10-year support lifecycle, which has now been changed to a ~3 years, and don't offer a free license to go from 64-bit Windows to 32-bit... Ironically, Windows Server 2012 R2 (which is 64-bit only) does not require this instruction, so there's some real confusion as to what has been gained by this requirement change...
Windows 3.1x calc: 3.11 - 3.10 = 0.00
The second gen Macbook Pro is supported with Mavericks. In fact, the only Macbook Pros not supported seem to be the original 32 bit only ones.
Careful, some "32-bit" Macs have 64-bit hardware but Apple never wrote 64-bit drivers and thus restricted these Macs to 32-bit versions of Mac OS X.
but the one app I have to have on this company laptop is Parallels, and as it so PAINFULLY and FREQUENTLY pops up in my face, I can't run the version I had just bought a few months ago with Mavericks... like that wasn't a known quantity or anything. I guess I just don't ever get another security update, because I refuse to feed a company money for an 'upgrade' to their product (like it wouldn't work anyways) every time a security update is released. BLAH
If I sound stupid, it's not me talking....
So no, I'm not doing it. Maybe I'm paranoid but I can accept my phone requiring an iTunes account, but I will not put an apple account or anything on my personal computer.
I also suspect that this means that to get these security updates I will need to be logged in to get updates, even if I got mavericks from another "source", so not gonna happen for me, that's my limit...
Sophos says that the security updates have stopped for anything older than Mavericks, but the article they link to has updates for 10.7, 10,8, and 10.9 in it that are less than 30 days old.
So I'm not sure how they are reading this that Apple isn't releasing updates.
If your Mac supports it, it seems to be a free upgrade.
To quote the Spartans: "If."
I have a late-2007 MacBook. Apple decided not to continue to support the Intel graphics driver for it and used it as an excuse to cut it off from 10.8 and above. The notion that I won't even get security updates anymore kind of ticks me off.
If it's for-profit but free, you're not the customer -- you're the product (e.g., the Slashdot Beta's "audience").
My wife has a Nexus 4, and if I told her she could improve the security of the device by updating to CM, she'd just stare back at me uncomprehendingly. Even if I explained, she'd never figure out HOW to do it. I suspect the majority of Nexus owners are not far off from that description as well. Let's keep the discussion tied to official vendor security support, ok?
We need legacy support.
It is only greed and laziness that prevents this.
With graceful fall back Apple could keep supporting old hardware back to the last century.
More importantly I want support for old software into the new operating systems so we can continue to access our data.
Source ports of Doom are 32-bit Windows applications, and 32-bit Windows applications run in 64-bit Windows. But not all 16-bit or DOS+DPMI applications happen to have source ports to 32-bit or 64-bit Windows. Emulators are useful for running apps that lack a source port.
That is just flat-out wrong. There are several models which can run 10.8 but cannot run 10.9.
"I dislike Microsoft and Windows with a passion, but at least they don't arbitrarily decide that your PC is too old to run their latest operating system."
You mean like Linux dropping support for Pentium class CPUs?
Linux dropped support for 80386 CPUs, 486s and later are still supported.
I have seen 10,8 machines getting security updates since 20.9 launched.
I'm glad you're here to defend microsoft when their OS update breaks existing software. Oh wait.. we never see you then.
Apparently your cheerleading is reserved only for Apple.
I spend the majority of my time during weekdays on windows because that is the platform of choice at my employer. There have been stories of patches from Microsoft breaking their "own" software so at my workplace, we tend to be quite conservative when it comes to patches applied in our production environment and we are still using Windows 7 on our desktops and will continue to do so for the foreseeable future. Windows 8.x is a disaster.
But you go ahead and continue with your irrational jumping to conclusions. For the same reason that my company does not upgrade to Windows 8 desktops, It does not make sense to upgrade to Mavericks in a company environment until you have checked for compatibility with all of the software used in your daily workflow. It might make sense to use a test machine to vet Mavericks before committing to an upgrade and as long as you are careful where you surf at work, you should be fine being behind patches or versions for a while.
Remember that no patches can protect you from zero day exploits so common sense is the only defence you have in that case. Don't be an idiot surfing to unknown sites when at work.
Jesus was a compassionate social conservative who called individuals to sin no more.
If your Mac supports it, it seems to be a free upgrade.
To quote the Spartans: "If."
I have a late-2007 MacBook. Apple decided not to continue to support the Intel graphics driver for it and used it as an excuse to cut it off from 10.8 and above. The notion that I won't even get security updates anymore kind of ticks me off.
Are you an intelligent person? Are you responsible? If you act responsibly, the vectors for attack are few and far between. Take personal responsibility for your security. Think before you click.
Jesus was a compassionate social conservative who called individuals to sin no more.
That is just flat-out wrong. There are several models which can run 10.8 but cannot run 10.9.
Apple's listed specs look the same to me. The MacBook list was consolidated but they are equivalent.
OS X Mavericks: System Requirements
http://support.apple.com/kb/ht5842
To install Mavericks, you need one of these Macs:
iMac (Mid-2007 or later)
MacBook (13-inch Aluminum, Late 2008), (13-inch, Early 2009 or later)
MacBook Pro (13-inch, Mid-2009 or later),
MacBook Pro (15-inch or 17-inch, Mid/Late 2007 or later)
MacBook Air (Late 2008 or later)
Mac mini (Early 2009 or later)
Mac Pro (Early 2008 or later)
Xserve (Early 2009)
Your Mac also needs:
OS X Mountain Lion, Lion, or Snow Leopard v10.6.8 already installed
2 GB or more of memory
8 GB or more of available space
OS X Mountain Lion system requirements
http://support.apple.com/kb/ht5444
To install Mountain Lion, you need one of these Macs:
iMac (Mid 2007 or newer)
MacBook (Late 2008 Aluminum, or Early 2009 or newer)
MacBook Pro (Mid/Late 2007 or newer)
MacBook Air (Late 2008 or newer)
Mac mini (Early 2009 or newer)
Mac Pro (Early 2008 or newer)
Xserve (Early 2009)
Your Mac needs:
OS X v10.6.8 or OS X Lion already installed
2 GB or more of memory
8 GB or more of available space
Because Microsoft didn't start to give a rat's ass about security until Windows 7, leaving hundreds of millions of vulnerable computers from buggy code and open services.
Because XP has a critical design flaw: piss poor privilege separation. Even some of Microsoft's own apps had to be run as Administrator to launch.
Because Microsoft dropped the ball on Longhorn. Hell, we're still waiting on some of the (actually useful) features that were promised a decade ago.
Because Vista was an abomination worse than ME, and Windows 8 went so far down in the bottom of the barrel that they had to dig a new basement for it. And they all have dramatically higher hardware requirements than XP.
Because Microsoft overcharges for Windows, badly. Whereas Mountain Lion was $30, and Mavericks is free.