Do you use antivirus software?

[997440]

SNIP

What I don’t understand is why my firewall was disabled at first. But it’s enough in my opinion.

I don't understand that either... on new Macs the MacOS firewall is disabled by default?
SNIP

Yes. Got my MacBook Pro 2 days ago and the firewall was disabled by default.

I know... the first thing I do is enable the firewall on all my new Macs but the fact it's disabled...What is that supposed to tell us about default security settings on MacOS?
SNIP

Ubuntu does the same. Unless you’re running a server, for example, macOS does not have vulnerable services listening thus it’s not needed.
A starting point (only one, plenty of info ‘out there’):
https://www.howtogeek.com/205108/your-mac’s-firewall-is-off-by-default-do-you-need-to-enable-it/

 

[SoCalReviews]

Ubuntu does the same. Unless you’re running a server, for example, macOS does not have vulnerable services listening thus it’s not needed.
A starting point (only one, plenty of info ‘out there’):
https://www.howtogeek.com/205108/your-mac’s-firewall-is-off-by-default-do-you-need-to-enable-it/

I read the link but I never had any problems with the Mac firewall enabled on any of the Macs I configured so I'm still not sure what the benefit is of it being turned off by default...possibly to ensure maximum compatibility with connections to other devices on your local network. I could see connecting to less trusted public networks potentially less secure if this is a reason. I'll remember to enable the firewall in Ubuntu next time I use it.

 

[Gregg2]

I'm going to attempt to bridge the divide here. Wish me luck!

Some valid reasons for using anti-malware software on a Mac have been presented, namely in networked situations or when multiple people have access to a single Mac and some individuals cannot be assumed to have knowledge of or cannot be trusted to practice safe computing. Then, by all means, install anti-malware software that does not hinder performance. If you wish to install AV software, go ahead, but realize that it won't find a virus until one is released in the wild and code can be written to detect it. (Just like a newly released Windows virus can infect a computer before the user/admin has a chance to update the virus definitions.)

The arguments against AV software are certainly valid in a situation where a single user is involved, or where a limited number of users who understand safe computing practices, and can be trusted to use them are involved. In such an environment, no anti-malware software of any kind is needed. (I have Malwarebytes installed, but have never had a reason to use it. It's there, just in case.)

AV software is currently useless on a Mac since there is not one virus in the wild affecting the macOS. But if said AV software is in fact a broader anti-malware tool, it can be useful in the first scenario.

So, if those in favor can acknowledge that those opposed have a point in a single-user environment, and those opposed can acknowledge that those in favor have a point in a networked or multi-user environment, then we can leave this discussion amicably.

Who wants to be first?

 

[KALLT]

I do not use anti-malware software, beyond the measures macOS already puts in place, and rely on safe computing. I realise that there is always a risk, but I find no comfort in anti-malware software, which often runs with elevated privileges and/or access to the kernel, for the simple reason that it cannot protect you against every piece of malware and will likely not protect you against threats it doesn’t yet know. Most threats I read about on macOS require updates to the anti-malware software.

I read the link but I never had any problems with the Mac firewall enabled on any of the Macs I configured so I'm still not sure what the benefit is of it being turned off by default...

It is the other way round: what benefit does it have once turned on? The built-in firewall ultimately doesn’t do anything, unless you actually use it to block inbound connections or intend to block ones that you encounter at some point. For that you are permanently running a process with elevated privileges as well as a kernel extension. If you are mostly/only using preinstalled or Mac App Store software, there is hardly a point in using it, as those have other protections. Most apps are not even capable of setting up inbound connections in the first place.

 

[997440]

I know... the first thing I do is enable the firewall on all my new Macs but the fact it's disabled...What is that supposed to tell us about default security settings on MacOS?
SNIP

I originally responded about this partially because whatever your intention for the above quote, it's incorrect to imply that Apple's macOS coders are less than diligent in regard to OS security. It's important to not encourage FUD.

I read the link but I never had any problems with the Mac firewall enabled on any of the Macs I configured so I'm still not sure what the benefit is of it being turned off by default.
SNIP

Also see @KALLT's post.

 

[SoCalReviews]

I originally responded about this partially because whatever your intention for the above quote, it's incorrect to imply that Apple's macOS coders are less than diligent in regard to OS security. It's important to not encourage FUD.


Also see @KALLT's post.

Questioning the default security settings for MacOS in an online forum shouldn't trigger an interrogation of the person asking the question nor should it be implied that the poster has some sort of agenda or intentions just for posting something that's true... "the Default MacOS firewall settings are OFF." Questioning the intention of other posters asking simple questions is the definition of spreading fear uncertainty and doubt.

Furthermore nothing was said about "coders" or their diligence in regard to OS security. That is something you seem to be questioning with your post. If you want to get into MacOS coding security issues that's another topic and there are plenty of posts from past posters in regards to those issues. Since you brought it up here is something related on that topic I also read about in this forum not too long ago...
macOS High Sierra ‘root’ security bug reappears if you recently upgraded from macOS 10.13 to 10.13.1

https://www.macworld.com/article/32...admin-access-to-your-macbut-theres-a-fix.html

On Tuesday, a macOS 10.13.1 security issue was revealed—a flaw that allows root access to a Mac without the need for a password. Developer Lemi Orhan Ergin tweeted that anyone can log into a Mac by entering the user name root without a password. The first time you try to login, it won’t work. But if you try it again, you will be granted access.

...As Apple’s support document notes, root is a “superuser” that grants access to areas of the system that are often used by system administrators.

-The Truth is Not Fragile

 

[millerj123]

Questioning the default security settings for MacOS in an online forum shouldn't trigger an interrogation of the person asking the question nor should it be implied that the poster has some sort of agenda or intentions just for posting something that's true... "the Default MacOS firewall settings are OFF." Questioning the intention of other posters asking simple questions is the definition of spreading fear uncertainty and doubt.

Furthermore nothing was said about "coders" or their diligence in regard to OS security. That is something you seem to be questioning with your post. If you want to get into MacOS coding security issues that's another topic and there are plenty of posts from past posters in regards to those issues. Since you brought it up here is something related on that topic I also read about in this forum not too long ago...
macOS High Sierra ‘root’ security bug reappears if you recently upgraded from macOS 10.13 to 10.13.1

https://www.macworld.com/article/32...admin-access-to-your-macbut-theres-a-fix.html

On Tuesday, a macOS 10.13.1 security issue was revealed—a flaw that allows root access to a Mac without the need for a password. Developer Lemi Orhan Ergin tweeted that anyone can log into a Mac by entering the user name root without a password. The first time you try to login, it won’t work. But if you try it again, you will be granted access.

...As Apple’s support document notes, root is a “superuser” that grants access to areas of the system that are often used by system administrators.

-The Truth is Not Fragile

And, anti-virus helps here in what way?

This seems more like “I have physical access to your computer and can log in”

 

[flowrider]

Just to stir the pot:

Lou

 

[Gregg2]

The diagrams states that 17% believe that Macs can't get viruses.

None of those people have posted in this thread. The claim being made here is that there is currently not a virus that can affect macOS in the wild, and therefore, at this time, Macs don't get viruses.

Those two things are quite different. I must note that the reason they are different is because can't and don't have separate, distinct meanings; they are not the same.

 

[flowrider]

^^^^I don't get sick because I can't catch a virus.

Lou

 

[SoCalReviews]

^^^^I don't get sick because I can't catch a virus.

Lou

You're ok if you're in the wild. Stay away from the cities.

 

[ZStech]

I use Malwarebytes sometimes, just to be sure that my Mac is clear from infections.