Until Vista, the admin account in Windows did not implement DAC in a way to prevent malware by default. Also, Windows has a far greater number of privilege escalation vulnerabilities that allow bypassing DAC restrictions even if DAC is enabled in Windows.....
Mountain Lion only improves upon the security of Lion.
BTW, Safari on a Mac running Lion was not hacked at the last pwn2own.
Holy cats. Impressive post!
How did the co-author of the
The Mac Hacker's Handbook, co-written by famous Pwn2Own winner, Charlie Miller, describe security on Lion compared to Windows? Oh yeah: "Windows 7 plus plus."
My former Fortune 100 company here in the great Twin Cities could have used your talents. Back in the early part of 2000 a major virus infiltrated our network (we were on Windows 2000 Professional then). The virus shut us down for a day and many of the 3000 plus employees at corporate headquarters were sent home early. Other local companies fell victim as well and the virus made the evening news. That was a lot of money lost that day and to think that company could have avoided the hit with this sound advice.
Let me guess: The ILOVEYOU worm?
And do you know how that major virus infiltrated your network? It didn't just appear without anyone doing anything, I can tell you that much. 3000 plus employees makes it more than likely that somebody did something stupid for that to happen.
Now had you told me that this was your private network that only you had access to, I'd be more inclined to believe your belief that viruses just appear on Windows, but as it stands you're just proving my point.
....
I also see that you've decided to reply solely to one part of my post- can you now tell me about the whole 'buying anti-virus annually' thing you mentioned?
Clickjacking and zip-bombs are just two means by which hackers infect and take down computers and does not rely on visiting shady sites (
example: Amnesty International UK site this year) or opening an email attachment. No or little interaction is necessary by the end-user.
A study in 2008 showed an unpatched Windows XP machine can be infected in an average of 4 minutes once connected to the Internet. In 2004, it was 20 minutes.
As for anti-virus software, he's probably referring to the software people have been told to buy for years, especially if they use Windows, requiring annual subscriptions to keep them effective at their purpose. They are so popular, hackers use fake anti-virus software to gain access to computers. Here is just a small sample:
Advanced Cleaner
AV Security 2012
AKM Antivirus 2010 Pro
AlfaCleaner
Alpha AntiVirus
ANG Antivirus
Antimalware Doctor
AntiMalware
AntiMalware GO
AntiMalware Go
AntiSpyCheck 2.1
AntiSpyStorm
AntiSpyware 2008
AntiSpyware 2009
Antispyware 2010
AntiSpyware 2011
AntiSpyware Bot from 2Squared Software
AntiSpywareExpert
AntiSpywareMaster
AntiSpyware Shield
AntiSpyware Soft
AntiSpywareSuite
AntiVermins
Antivir Solution Pro
Antivira AV
Antivirii 2011
Antivirus Action
Antivirus Monitor
Antivirus 7 or Antivirus5
Antivirus 8
Antivirus 360
Antivirus 2008
Antivirus 2009
Antivirus 2010
AntiVirus Gold or AntivirusGT
Antivirus IS
Antivirus Live
Antivirus Master
Antivirus .NET
Antivirus Pro 2009
Antivirus Pro 2010
Antivirus Scan
Antivirus Smart Protection
Antivirus Soft
AV Antivirus Suite
Awola
Best Malware Protection
Digital Security
Disk Defrag
Disk Doctor
Doctor Antivirus
Doctor Antivirus 2008
Dr Guard
DriveCleaner
Internet Antivirus 2011
Internet Defender 2011
Malware Defender
Malware Protection Center
MaxAntiSpy
Memory Fixer
MS AntiSpyware 2009
MS Antivirus Microsoft Anti Malware
MS Removal Tool
MS Removal Tool
My Security Engine
My Security Shield
My Security Wall
MxOne Antivirus
Navashield
Netcom3 Cleaner
Paladin Antivirus
PC Antispy
PC AntiSpyWare 2010
PC Clean Pro, PC-Doctor, PC Scan and Sweep
PC Privacy Cleaner
PCPrivacy Tools
PCSecureSystem
PC Antispyware
PSGuard
Quick Defragmenter
Rapid AntiVirus
Real AntiVirus, RegAlilve
Reggenie Antivirus
Registry Great
Registry Patrol
Registry Defender
Registry Winner
Reg tool
Security Shield
Security Solution 2011
Security Suite Platinum
Security Tool
Security Tool
Security Toolbar 7.1
Security Essentials 2010 (not to be confused with Microsoft Security Essentials)
SiteAdware
Smart Anti-Malware Protection
Smart Antivirus 2009
Smart Engine
Smart HDD
Smart Protection 2012
Smart security
Soft Soldier
Spy Away
SpyAxe
SpyCrush
Spydawn
SpyEraser
SpyGuarder
SpyHeal (a.k.a. SpyHeals & VirusHeal)
Spylocked
SpyMarshal
SpySheriff (a.k.a. PestTrap, BraveSentry, SpyTrooper)
SpySpotter
Spy Tool
spyware NO
ThinkPoint
Total Secure 2009
Total Win 7 Security
Total Win Vista Security
Total Win XP Security
VirusMelt
VirusProtectPro (a.k.a. AntiVirGear)
VirusRanger
VirusRemover2008
VirusRemover2009
Virus Response Lab 2009
VirusTrigger
Vista Antimalware 2011
Vista Antispyware 2010
Vista Antispyware 2011
Vista Antispyware 2012
Vista Antivirus 2008
Vista Home Security 2011
Vista Internet Security 2010
Vista Internet Security 2012
Vista Security 2011
Vista Security 2012
Vista Smart Security 2010
Volcano Security Suite
Win7 Antispyware 2011
Win 7 Antivirus 2010
Win Antispyware Center
Win 7 Home Security 2011
WinAntiVirus Pro 2006
WinDefender (not to be confused with the legitimate Windows Defender)
Win Defrag
Windows 7 Recovery
Windows Anticrashes Utility
Windows Antidanger Center
Windows Antivirus Rampart
Windows Attention Utility
Windows Cleaning Tool
XP-Shield
XJR Antivirus
Your Protection
Your PC Protector
Zinaps AntiSpyware 2008
Zentom System Guard
Security solution 2011