Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
Viruses are a type of malware. Just like politicians are a type of rodent. (No offense some of by best friends are polititans and rodents.)

Yes. The industry has just wrapped it all up into one term. Viruses have actually been less of the "problem" of recent times.
 
A Trojan is not a Virus. A Virus requires a exploiting a flaw in your system in order to perform actions that are not authorized.
A Trojan on the other hand tricks the user into providing credentials and installing the program. There is little that can be done to harden a system against Trojans while still allowing the user to run unsigned apps.

A Virus gains power by exploiting the system
A Trojan gains power by exploiting the user.

I don't think this definition of virus is correct. MS-DOS viruses didn't need to rely on any system flaws. They typically would search for executable files and write copies of themselves into that executable. All perfectly legitimate operations that did not involve exploiting a flaw.

Your definition is probably closer to that of a worm.
 
so this guy is gonna reveal the loopholes, so hackers can hack osx???:eek:

what is wrong with that guy??
 
BSMETER.gif


I'll believe it when I see it.

We've seen these lists of OS X security issues announced before and it always turns out to be theoretical and inconsequential security issues that don't affect anyone. This strikes me as more a grab for attention than anything else, and since CanSecWest is the host of the attention-whoring PWN2OWN contest, it only stands to reason that this is B.S.

Still, I'm open to the possibility, but this particular boy has cried wolf a few too many times for me to take him seriously. We'll see.
 
Although Windows machines are more targeted than Macs, the amount of threats Macs receive isn't proportional to the amount by which their user base is smaller, it's far less.

I just remembered the time when each time you reinstalled Windows XP (the first one, without any service packs), on the first boot when you were connected to the internet (and every subsequent boot until you found the solution), a message would greet you saying that some process has failed and the computer will power off in 45 seconds. You had 45 seconds to find the solution each time, or else the system would crash. It was caused by some code that automatically attacked any computer that had that specific security hole. Temporarily stopping it was as simple as relaunching the process that failed, but finding how to do that on various forums took ages with your computer rebooting every 45 seconds.

Even with the best anti-virus software installed, my Windows machines would still get viruses and the anti-virus software would just say "unable to remove the file" all the time. You had to manually find it an delete it.

Just some old memories... Fortunately...

People still connect to the internet directly through a cable modem?

I'm pretty sure that is the only way (reasonably) you can get hit like that, as every cheap POS home router on the planet should only allow outbound connections by default...
 
Mac having no viruses? Really??? Of course Mac's can get viruses... Every computer/OS can.

Mac's just have less, due to the "less interest".

Not true, but what most amateurs seem to pass along. There is a bsd security layer in Mac OSX that has been vetted over many decades. There is plenty of interest in writing viruses for Macs. Hell, it's the top prize now at many security conventions. Truth is, it's not that easy.
 
You'd think that an OS with 5%-10% of the market share would have 5%-10% of the viruses...

Lol. Tell that to Mac OS 9. God knows how many viruses that had while it only had 1-3% of the market if even that. I love these people that shout market share as the reason Mac OS X doesn't have viruses. :rolleyes:
 
Mac having no viruses? Really??? Of course Mac's can get viruses... Every computer/OS can.

Mac's just have less, due to the "less interest".

Feel free to avail yourself to the article linked to in my sig which lays out all the counter-arguments to the argument you're making. This idea that "market share" is the primary cause of viruses has been debunked so many times, it's almost silly to see people cite it.

And note that the article was written 2 years ago at a time when we were deluged with articles by security "experts" claiming OS X's sudden increase in popularity was going to cause an outbreak of viruses and malware. Still hasn't happened.
 
Very good, we need guys like Miller to shake things up a bit and keep Apple on their toes as they push their market share forward. What we don't need are Apple apologists or zealots, that gets nothing done. Apple will appreciate what Miller has to offer too, it's free R&D, and the publicity from Miller's event won't cost them any sales as it's not necessarily negative, we all know that it's win win.
 
The funny thing is most people don't even understand how the "hacker" community works. There are basically 3 camps (over-simplifying, but still):

1) White hats - These are the good guys who are finding the wholes before the bad guys.

2) Russian mafia - I don't even want to say black hats, as these guys are simply the equivalent of soldiers for the Russian mob. In some cases, they are contracted out, but basically it is a bunch of Eastern European hackers who sell their services to whoever pays. If you can find some of the shadier IRC channels out there, you'll be shocked how cheap you can get hundreds of SSNs, CC #s, etc in flat text files. I'm talking millions of dollars worth of credit card numbers for $500

3) Script kiddies - the douchebags who hack websites using some no-talent automated tool like metasploit. They wait for some smarter people than them to do the leg work so they can reap the rewards.

So this idea that "I'm sure SOME hacker would want some press" completely misses the point. Group #1 is getting the press finding these exploits without doing any real harm, group #2 would rather have a 10 million user botnet of desktops hooked up to DS-3s left on 24/7/365 in an office because corporate AD policy pushes windows updates once a month, and #3 isn't smart enough.
 
so this guy is gonna reveal the loopholes, so hackers can hack osx???:eek:

what is wrong with that guy??

Hackers can already do that if they find the holes.

So this guy is gonna reveal the loopholes so Apple can fix them so hackers can no longer find and use them. :apple:
 
I wonder what access to physical hardware and social engineering his security holes will need? In the past, many of these exploits required quite a bit of user intervention including the administrator password.

For example,

"No one was able to execute code on any of the systems on Wednesday, the first day of the contest, when hacks were limited to over-the-network techniques on the operating systems themselves. But on the second day, the rules changed to allow attacks delivered by tricking someone to visit a maliciously crafted Web site, or open an e-mail. Hackers were also allowed to target "default installed client-side applications," such as browsers.

The team had attack code already set up on a Web site, and was able to gain access to the MacBook Air and retrieve a file after judges were "tricked" into visiting the site. According to the TippingPoint DVLabs blog, a newly discovered vulnerability in Safari was used to gain control of the Air.



Last year's contest was won by exploiting a QuickTime vulnerability, which was patched by Apple in less than two weeks.”

http://news.cnet.com/8301-13579_3-9905095-37.html

By the way, before anyone gets too crazy bashing this guy — I believe the rules of the conference dictate that he sign a NDA and that all exploits will be reported to Apple.

Keep in mind it was two years in a row this guy won for hacking OSX. The first year he came with two exploits and the first one worked so he won. The second exploit he didn't tell anyone about and a year later it was still unpatched and he used that to win again. So maybe apple patched it quickly once he told them about it but it doesn't change the fact that the exploit was out there for more than a year. The next contest begins again next week.

He also said that OSX was easier to hack than windows and that windows vista and 7 are more secure. Though he also said OSX is safer.
Most exploits these days will coming in the form of phising and social engineering. The operating system can't protect you from that.

There is also a trojan out there, the famous one attached to pirated copies of iwork. Now you say, "I don't pirate anything so I have nothing to worry about". Not true. Hackers don't have to necessarily hack OSX. Rather they hack the servers where you download software from and attach their malware to that. Looks legit to everyone, after all you've been using that software for years, and then one day you are infected and don't even know it.
 
This is what happens when you become a famous hacker. See also Kevin Mitnik.

P1-AT888A_CHACK_D_20100219204141.jpg

He just got out of jail.
 
People still connect to the internet directly through a cable modem?

I'm pretty sure that is the only way (reasonably) you can get hit like that, as every cheap POS home router on the planet should only allow outbound connections by default...

Yes, back in the days of when XP just came out, many people only had one computer, therefore they did not buy a router. However, having a router still doesn't make you immune to stuff like this.
 
The funny thing is most people don't even understand how the "hacker" community works. There are basically 3 camps (over-simplifying, but still):

1) White hats - These are the good guys who are finding the wholes before the bad guys.

2) Russian mafia - I don't even want to say black hats, as these guys are simply the equivalent of soldiers for the Russian mob. In some cases, they are contracted out, but basically it is a bunch of Eastern European hackers who sell their services to whoever pays. If you can find some of the shadier IRC channels out there, you'll be shocked how cheap you can get hundreds of SSNs, CC #s, etc in flat text files. I'm talking millions of dollars worth of credit card numbers for $500

3) Script kiddies - the douchebags who hack websites using some no-talent automated tool like metasploit. They wait for some smarter people than them to do the leg work so they can reap the rewards.

So this idea that "I'm sure SOME hacker would want some press" completely misses the point. Group #1 is getting the press finding these exploits without doing any real harm, group #2 would rather have a 10 million user botnet of desktops hooked up to DS-3s left on 24/7/365 in an office because corporate AD policy pushes windows updates once a month, and #3 isn't smart enough.

Nice, but wrong.

Your groupings are oversimplified and far from complete. There is a fourth group of malcontents who are like evolved script kiddies, who have some know-how and real skills, who just like to cause trouble and they would surely do it just for the "LULZ." The most famous virus outbreaks are usually caused by them tinkering with existing viruses and reintroducing them into the wild.
 
Every virus that affected PCs of people I knew either came from Office macros or downloading what they thought was music/porn from share sites.

Microsoft Office -- what a p.o.s. that system was for a long time. I always explain that I've never had much of a problem with Windows, just loathe MS Office on Windows -- even though I use it fairly often like everyone else does.
 
2) Russian mafia - I don't even want to say black hats, as these guys are simply the equivalent of soldiers for the Russian mob. In some cases, they are contracted out, but basically it is a bunch of Eastern European hackers who sell their services to whoever pays. If you can find some of the shadier IRC channels out there, you'll be shocked how cheap you can get hundreds of SSNs, CC #s, etc in flat text files. I'm talking millions of dollars worth of credit card numbers for $500

Do not pay these guys with a credit card. I speak from experience.
 
“Obscurity” IS a factor that helps the Mac. It is not the ONLY factor, though.

But they’re all GOOD factors, not bad ones. They put us in the great position we are in today! And even if, someday, we see the first successful Internet-spreading virus/worm for Mac, it will still be nothing compared to Windows. (Where the worst part, for me, isn’t the malware—it’s the hassle of all the defenses you must put up and all the self-education you must waste time on. Or you could take your chances, like my tech-savvy Windows friends who think it can’t happen to them, until it does.)

As for security research, I’m all for it. But tell the vendors first. It’s only responsible.
 
Still no known viruses...eat that.:)

You won't run into problems with viruses. I wouldn't worry about it.

Name one.

If nobody gives a damn about the mac platform then why this is a news at all? Well, I say more power to any hacker for writing a virus that will spread WITHOUT my consent or affirmative action all through the web/LAN. More power to them. I would love to see at last some actions behind these truly empty threats.

Needless to say I remember this very topic in 2006 when first “virus" aka trojan to Mac OS was introduced:

https://www.macrumors.com/2006/02/16/the-first-mac-os-x-virus-a-new-os-x-trojan/

Yeah actually, there have been no proof of concept or real VIRUSES written. Maybe it can be done, but no one has been able to do it. Yes there are Torjans out there that require someone to fall for it, but these are 2 different animals. Find me self-propagating virus and I will be worried.
Yeah… Well that’s quite a load of… :eek:. Here are few:

Virus (PoC): OSX/Inqtana.A
Trojan-Downloader: OSX/Jahlev.A
Backdoor: OSX/iWorkServ.A
Worm: OSX/Tored.A

Oh please.

Her car "keeps getting stolen" and yet she continues to leave the keys in it and the doors unlocked?

Yes, that's believable. :rolleyes:
And still many Mac users do essentially just that. There is no such thing as an immune OS.

I switched to the Mac because it was the better platform. And it still is the better platform for many reasons. But Windows 7 is ahead of OS X in security features. Some people just need to get over it.

And even if some Windows virus would not effect you, you might be spreading the crap around. There’s just no good excuse not to use anti-virus.

These holes are about PDFs this time and those 20 are from Preview. You can read a bit more from Intego’s blog.
 
Yeah… Well that’s quite a load of… :eek:. Here are few:

Virus (PoC): OSX/Inqtana.A
Trojan-Downloader: OSX/Jahlev.A
Backdoor: OSX/iWorkServ.A
Worm: OSX/Tored.A


And still many Mac users do essentially just that. There is no such thing as an immune OS.

I switched to the Mac because it was the better platform. And it still is the better platform for many reasons. But Windows 7 is ahead of OS X in security features. Some people just need to get over it.

And even if some Windows virus would not effect you, you might be spreading the crap around. There’s just no good excuse not to use anti-virus.

These holes are about PDFs this time and those 20 are from Preview. You can read a bit more from Intego’s blog.

Yes, because using Macs since 2006 makes you an expert on such matters. I have been using them consistently for 20 years. Not just using them mind you, I mean administering them. Never once have I seen a real world exploit.
 
Better version:

OS X is like living in a normal house with standard locks; Windows is like living in a house with bars on the windows, maglocks on every door (even interior doors) that constantly ask, "Are you sure you want to unlock?", and a sign reading "FREE CRACK HERE" hanging on the outside over the giant hole in one wall - while living in a bad part of town. Of course, most Windows users either reflexively answer "yes" to the unlock prompts (even when Jimmy the Crackhead is trying to get in) or have disabled them entirely. As for the hole, it's needed by "legacy applications" (*cough*ActiveX*cough*) and so everyone just puts up with it.

:) I imagine you are 13 years old. You have a lot of imagination. Now, go and try W7 and you'll see how ridiculous your posts sounds.
 
Requirements for zero-day exploits

In order of difficulty to obtain:

-eye of newt
-blood of emu
-hummingbird beak
-physical access to machine

Seriously, yawn. Zero viruses propagated in the wild since OS X. As the kids say, SIOOMA.

/thread
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.