Mac OS X Now Updates Malware Definitions Daily

MacRumors · May 31, 2011, 05:43 PM

Apple has detailed what changes have been made in the latest Mac OS X Snow Leopard Security update that was released earlier today. Besides adding specific detection for the "Mac Defender" malware, Apple has added a daily update to this database.

Quote:

Apple maintains a list of known malicious software that is used during the safe download check to determine if a file contains malicious software. The list is stored locally, and with Security Update 2011-003 is updated daily by a background process.

This means that Apple will be able to push out profiles for newly found malware without requiring a new software update.

Users can opt-out of this daily download if they choose.

Article Link: Mac OS X Now Updates Malware Definitions Daily

flopticalcube · May 31, 2011, 05:46 PM

Hello Microsoft Security Essentials ala Apple.

firestarter · May 31, 2011, 05:48 PM

They clearly had this waiting in the wings. Good move, Apple.

Spanky Deluxe · May 31, 2011, 05:52 PM

Ah so that's what the new request was that Little Snitch picked up on post updating. Great to know that Apple is staying on top of things.

whustedt · May 31, 2011, 05:57 PM

do you think this will be failsafe when you're using a standard-account?
normal system-updates do not work when you're no admin.
(even though you can activate it in system prefs)

NAG · May 31, 2011, 06:02 PM

About time. Any computer that isn't locked down like iOS needs to have something like this no matter how unlikely it is your computer will get the malware.

roadbloc · May 31, 2011, 06:06 PM

OS X now has an inbuilt antivirus. The day has come.

Northgrove · May 31, 2011, 06:07 PM

I never expected this from Apple.

I completely expected a "OK, we'll take this one but this is really rare and Macs don't really catch much malware".

That Apple is here to help with malware from the first known wide-spread case is pretty much unprecedented in the industry as far as I know. I mean as an OS vendor, and as for protecting their own OS. Good job! And thanks for not being ignorant about it.

Cougarcat · May 31, 2011, 06:09 PM

Quote:

Originally Posted by roadbloc

OS X now has an inbuilt antivirus. The day has come.

It's had anti-malware support since 10.6.0 This just makes updating it automatic.

NAG · May 31, 2011, 06:23 PM

Quote:

Originally Posted by Cougarcat

It's had anti-malware support since 10.6.0 This just makes updating it automatic.

The auto updating kind of makes the feature though since it allows Apple to decouple immediate security threats from their normal update cycle.

frankieboy · 07:10 PM

I don't think the Safe Downloads List feature works with Google Chrome, because I don't think Google Chrome implements the file quarantine metadata attribute.

I just downloaded sArchiver with Chrome 12.0.742.68 beta. I got no quarantine dialog when I unzipped it or when I launched it.

I refer to the feature than can be toggled on/off in System Preferences > Security > General tab after installing Security Update 2011-003.

I hope I am wrong.

Dammit Cubs · May 31, 2011, 06:30 PM

And so it begins .......

z3r0 · May 31, 2011, 06:33 PM

A Jail/Sandbox would make Trojans a none issue. Along with an out going firewall to stop phoning home. Finally only allowing applications to be executable/ran from specific directories. Now reason I should be able to run an app that's installed in another location besides the Applications folder. Unix apps that are installed in bin etc... Would need admin rights/sudo to be installed in the first place.

MacMan86 · May 31, 2011, 06:36 PM

Quote:

Originally Posted by Northgrove

I never expected this from Apple.

I completely expected a "OK, we'll take this one but this is really rare and Macs don't really catch much malware".

That Apple is here to help with malware from the first known wide-spread case is pretty much unprecedented in the industry as far as I know. I mean as an OS vendor, and as for protecting their own OS. Good job! And thanks for not being ignorant about it.

The basis for malware detection and removal has been there since the release of Snow Leopard, following some moderately wide-spread malware (this is not the first case by any means). It's not unprecedented, Windows has a 'Malicious Software Removal Tool' which receives regular updates along with Windows Defender. Nevertheless, still a good move from Apple

mcdermd · May 31, 2011, 06:43 PM

And yet they keep "Open 'safe' files" around in Safari. Get rid of that already.

NAG · May 31, 2011, 06:51 PM

Quote:

Originally Posted by z3r0

A Jail/Sandbox would make Trojans a none issue. Along with an out going firewall to stop phoning home. Finally only allowing applications to be executable/ran from specific directories. Now reason I should be able to run an app that's installed in another location besides the Applications folder. Unix apps that are installed in bin etc... Would need admin rights/sudo to be installed in the first place.

This would require Apple to implement a better installer than double click a DMG file and drag the app out of it. I have seen so many people never do that last step. It really is a failing of OS X to rely on DMGs like that (the good apps have a first run check to make sure you actually installed it in the Applications folder, which should be a default feature of the OS).

irishgrizzly · May 31, 2011, 07:08 PM

Quote:

Originally Posted by MacRumors

Users can opt-out of this daily download if they choose.

Where is this option?

asdf542 · May 31, 2011, 07:10 PM

Quote:

Originally Posted by irishgrizzly

Where is this option?

frankieboy · May 31, 2011, 07:10 PM

Quote:

Originally Posted by irishgrizzly

Where is this option?

See System Preferences > security > General tab.

MacMan86 · May 31, 2011, 07:11 PM

Quote:

Originally Posted by irishgrizzly

Where is this option?

It's shown in the linked article http://support.apple.com/kb/HT4651

It's in the Security Preferences Pane - although I can't think of a single good reason to change it from the default setting.

rorschach · May 31, 2011, 07:13 PM

Quote:

Originally Posted by NAG

This would require Apple to implement a better installer than double click a DMG file and drag the app out of it. I have seen so many people never do that last step. It really is a failing of OS X to rely on DMGs like that (the good apps have a first run check to make sure you actually installed it in the Applications folder, which should be a default feature of the OS).

Yeah, just have a dialog when the user tries to run an app from a DMG that asks if they want to copy it to the Applications folder.

lewis82 · May 31, 2011, 07:16 PM

Does this only work while using Safari (the main threat in the whole affair)? If I use Firefox, not only because it's better but also safer, I'm not protected? Or does it scan all .dmg/.mpkg files on opening?

NAG · May 31, 2011, 07:21 PM

Quote:

Originally Posted by lewis82

Does this only work while using Safari (the main threat in the whole affair)? If I use Firefox, not only because it's better but also safer, I'm not protected? Or does it scan all .dmg/.mpkg files on opening?

This is at a system level. The only thing you have to worry about as far as browsers is that you turn off opening "safe" downloads automatically because there is no such thing as a safe download as far as the internet is concerned.

MacMan86 · 07:27 PM

Quote:

Originally Posted by lewis82

Does this only work while using Safari (the main threat in the whole affair)? If I use Firefox, not only because it's better but also safer, I'm not protected? Or does it scan all .dmg/.mpkg files on opening?

Yes, of the browsers, it's only Safari:

Quote:

Files downloaded via applications such as Safari, iChat, and Mail are checked for safety at the time that they are opened

http://support.apple.com/kb/HT4651

EDIT: Looking back at some of the original info on this (http://www.theregister.co.uk/2009/08...re_protection/) it looks like Firefox is included in the select number of applications

caspersoong · May 31, 2011, 07:56 PM

Awesome! Now I can let my father buy a Mac in peace.

May 31, 2011, 05:46 PM	#2
flopticalcube macrumors G4 Join Date: Sep 2006 Location: In the velcro closure of America's Hat	Hello Microsoft Security Essentials ala Apple. __________________ Read the Rules / Search the Forums / Use a Descriptive Title Mac Won't Boot?
	-2

May 31, 2011, 05:52 PM	#4
Spanky Deluxe macrumors Demi-God Join Date: Mar 2005 Location: London, UK	Ah so that's what the new request was that Little Snitch picked up on post updating. Great to know that Apple is staying on top of things. __________________ "No, I'm from Iowa, I only work in outer space."
	7

May 31, 2011, 05:57 PM	#5
whustedt macrumors newbie Join Date: May 2011 Location: Northern Germany	does it work with non-admin accounts? do you think this will be failsafe when you're using a standard-account? normal system-updates do not work when you're no admin. (even though you can activate it in system prefs)
	0

May 31, 2011, 06:02 PM	#6
NAG macrumors 68030 Join Date: Aug 2003 Location: /usr/local/apps/nag	About time. Any computer that isn't locked down like iOS needs to have something like this no matter how unlikely it is your computer will get the malware. __________________ Thirty-one days ago it was earlier.
	3

May 31, 2011, 06:06 PM	#7
roadbloc macrumors 603 Join Date: Aug 2009 Location: UK	OS X now has an inbuilt antivirus. The day has come. __________________ Roadbloc
	-8

May 31, 2011, 05:48 PM	#3
firestarter macrumors Demi-God Join Date: Dec 2002 Location: Green and pleasant land	They clearly had this waiting in the wings. Good move, Apple.
	11

May 31, 2011, 06:07 PM	#8
Northgrove macrumors 6502a Join Date: Aug 2010	I never expected this from Apple. I completely expected a "OK, we'll take this one but this is really rare and Macs don't really catch much malware". That Apple is here to help with malware from the first known wide-spread case is pretty much unprecedented in the industry as far as I know. I mean as an OS vendor, and as for protecting their own OS. Good job! And thanks for not being ignorant about it. __________________ iPhone 5 • rMBP 15" (2012)
	3

May 31, 2011, 06:30 PM	#11
frankieboy macrumors regular Join Date: Jun 2009	I don't think the Safe Downloads List feature works with Google Chrome, because I don't think Google Chrome implements the file quarantine metadata attribute. I just downloaded sArchiver with Chrome 12.0.742.68 beta. I got no quarantine dialog when I unzipped it or when I launched it. I refer to the feature than can be toggled on/off in System Preferences > Security > General tab after installing Security Update 2011-003. I hope I am wrong. Last edited by frankieboy; May 31, 2011 at 07:10 PM.
	0

May 31, 2011, 06:30 PM	#12
Dammit Cubs macrumors 65816 Join Date: Jul 2007	And so it begins ....... __________________ 32GB Galaxy Nexus LTE Version 32GB wifi NEW iPad with Retina!! 2.4GHz 2010 Mac Mini 2012 15'' Macbook Pro 2.3/8/256 SSD with Retina
	-7

May 31, 2011, 06:33 PM	#13
z3r0 macrumors member Join Date: Jan 2011	A Jail/Sandbox would make Trojans a none issue. Along with an out going firewall to stop phoning home. Finally only allowing applications to be executable/ran from specific directories. Now reason I should be able to run an app that's installed in another location besides the Applications folder. Unix apps that are installed in bin etc... Would need admin rights/sudo to be installed in the first place.
	0

May 31, 2011, 06:43 PM	#15
mcdermd macrumors regular Join Date: Mar 2004	And yet they keep "Open 'safe' files" around in Safari. Get rid of that already. __________________ iMac 21.5"/3.06GHz Core i3/3.06GHz/8GB/2TB Mac mini 2.16GHz Core2Duo/2GB/250GB/20" Cinema Display Vintage http://www.applefool.com iPad 32GB; iPhone 4 16GB
	1

May 31, 2011, 07:16 PM	#22
lewis82 macrumors 68000 Join Date: Aug 2009 Location: Totalitarian Republic of Northlandia	Does this only work while using Safari (the main threat in the whole affair)? If I use Firefox, not only because it's better but also safer, I'm not protected? Or does it scan all .dmg/.mpkg files on opening? __________________ Master Procrastinator. If you see me posting, I should be doing homework. Downvoting is for sissies.
	-2

May 31, 2011, 07:56 PM	#25
caspersoong macrumors 6502a Join Date: Feb 2011	Awesome! Now I can let my father buy a Mac in peace. __________________ New iPad (White), 32GB ; 13" MacBook Pro (Late 2011), 2.4 GHz i5 with 256 GB Crucial M4 SSD.
	0

Thread Tools	Search this Thread
Show Printable Version Email this Page	Search this Thread: Advanced Search
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

Similar Threads
thread	Thread Starter	Forum	Replies	Last Post
Resolved: Any good kids games to run on an iMac G3 running Mac OS 10.1-10.4?	alexreich	PowerPC Macs	10	Feb 10, 2012 02:09 AM
Mac OS X 10.8 Nyan Cat	Vasileios	Wasteland	6	Jul 22, 2011 08:45 AM
Can Mac OS 10.5 disc repair a 10.4 installation (PowerPC))	Chadder	Mac OS X	3	Jun 4, 2011 09:46 PM
Mac OS Lion Developer 3 Bug	-BigMac-	Mac OS X 10.7 Lion	2	May 31, 2011 07:53 AM
Mac OS X 10.6.7 frequent crashing	nikhilkas	MacBook Pro	1	May 3, 2011 07:05 PM