Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
More secure than what? Windows XP yes. Windows Vista? Maybe. Windows 7? Hell no.

hmm, well I've been a Mac user since 1998, I recently installed Windows 7, and guess what having it on my Mac since January it already has a security threat a trojan according to my MS Security essentials.

Now if everyone is saying the only reason Macs dont get targeted is, because of the low market share. Why haven't the PC fans which hate Macs exploited Mac OS X???, I would really like to know
 
I believe that is correct as well. There are similarities in some parts of the NT and VMS systems. OpenVMS was a superior system to UNIX, but it was also far more expensive. Digital was far ahead of their time. Unfortunately, the people running the show ran it into the ground. Digital's legacy will live on through the use of their technologies in software and hardware.

This is true and it's the source of the name Window NT.
WNT = VMS + 1
The NT kernel is very well designed. Windows issues come from the persistent use of the Admin rights and the backwards compatibility with Win32 APIs.
 
I question how viable these 0-day holes are...

-Having me enter my admin password is not viable.
-Similarly, having me put in a kext, rootkit, or anything else, not viable.
-Bruting my password? Maybe, but I don't really count that as a hole, more of a forced kick-down-the-door entry. And my root is different.

That qt flaw... well that one was viable. Of these vaunted 20, I bet 16-20 of them are holes that only a retard would fall for. Some of the known "holes" or "security breaches" are really quite stupid. Not to mention, these are all a supposition based off of the idea that the user isn't running any third party firewall and/or security programs. Which I am.

Then, on top of it all, there is the fact that as soon as these are made public Apple is typically pretty good about patching them in a relatively short time frame.
 
hmm, well I've been a Mac user since 1998, I recently installed Windows 7, and guess what having it on my Mac since January it already has a security threat a trojan according to my MS Security essentials.
A trojan is not a virus. OS X offers ZERO protection from this type of attack. The fact that this was caught is a positive for Windows, not a negative. If this were a Mac you simply have no way of ever knowing that there is a problem.

Also, Trojans DO exist for OS X.
 
A couple of things

1. I used to have to fix spyware infested family PCs all the time. I slowly switched the entire friends and family base to Macs. Haven't had that problem since. These were all XP machines, not Vista or 7. The last XP laptop which was replaced with a Macbook was infested so bad that it had to be formatted.

2. I have 7 installed on my Mac Pro on a partition, mainly to play NBA 2K10 and Steam games. Every time I boot into that partition, there are updates to be installed. I was playing a game of 2K10 full screen and right in the middle the computer rebooted because Windows had some updates to install and I couldn't see the "Remind me in blah blah blah or Reboot Now" dialog. Because it had no response from me, it decided it was going down.

Windows: We've gotten better, but our OS is still annoying.
 
2. I have 7 installed on my Mac Pro on a partition, mainly to play NBA 2K10 and Steam games. Every time I boot into that partition, there are updates to be installed. I was playing a game of 2K10 full screen and right in the middle the computer rebooted because Windows had some updates to install and I couldn't see the "Remind me in blah blah blah or Reboot Now" dialog. Because it had no response from me, it decided it was going down.

Actually that's not correct. What happens is that box pops up and sits in the corner reminding you it needs a reboot after the updates. If you don't click it nothing happens. You have to actaully click reboot. The other option is you can postpone that message for a period of time so it stop bugging you about the reboot.
It doesn't reboot on it's own.

updates are released every tuesday. It's a good thing that issues are found and fixed so quickly.
 
Not saying you're wrong, but do you have proof that that's the only way his exploits worked? I'm really interested in security, and enjoy reading about this stuff.

Use Google to look up about all of Miller's exploits. I am not going to do it for you!

Please do explain how the use of a crossover cable means anything? It's been awhile since I've had to use one, but back when I did it was only used so you could plug 2 computers together without the need of a hub or switch. I don't remember anything inherent in a cross over cable that suddenly bypassed anything.

Now, if your switch is blocking ports or traffic or you normally go through some sort of hardware firewall then connecting directly to the computer will of course bypass that, but it won't change the security measures on the computer itself.

Mac OSX is UNIX as of 10.5. OSX has BSD core. UNIX & BSD (and hence OSX) have ipfw. It's a firewall that windows does not have by default. Check wikipedia to learn about it on a basic level. A crossover cable acts as a bridge for ipfw. When bridged, packets pass through ipfw.

Keep in mind no OS fell the first day. The second day when the rules were relaxes OSX fell. It wasn't until the 3rd day that windows was hacked. Windows still has better security technologies built in. Apple adopted some of the features that Microsoft implemented in Vista but not completely. Which is why this hacker says that OSX is easier to hack than windows.

See above. Without crossover cable, Mac OSX wouldn't of fell.

Edit: I was wrong. Miller's exploits require a local area network and an artificial (as in unlikely in the wild) situation. Crossover is irrelevent and so is ipfw. This was me trying to logic out the details of a article I read soon after the last PWN2OWN.

Second Edit: I was double wrong, exploitation using these methods are not uncommon in the wild. But, it is rare in the wild in OS X because the impact of such exploitation in Mac OS X is limited by the low incidence rate of privilege escalation exploits and user space security mitigations that prevent keyloggers and other malware from logging security sensitive passwords, such as from authentication prompts or website logins, without privilege escalation. BTW, user interaction is required to hack a Mac via a crossover cable as the user has to allow "Internet Sharing" in System Preferences. Man-in-the-middle attacks facilitate these methods on wireless networks. Navigating to a malicious website facilitates these methods across the web.
 
Last edited:
Funny, wasn't it Apple that said Snow Leopard was just a minor update which is why it's so cheap?

The two updates applied proportionally the same number of changes. Under the hood and otherwise. The difference is, Leopard is still an OS I would not mind running. Vista is certainly not. And lets not forget the "upgrade" cost difference. As far as the new kernel in 7, sounds to me like this is basically a weaker version of GDC in Snow Leopard, yet it took 9 years to develop?? :confused:
 
Zzzz. I'd rather be on a motorcycle in Minneapolis than in an armored Humvee in Kabul.

There's something to be said for not having to compute in fear. And well worth the extra $$$.

Someone wake me when there's an actual OS X virus plague, malware attack or botnet discovery.
 
Zzzz. I'd rather be on a motorcycle in Minneapolis than in an armored Humvee in Kabul.

There's something to be said for not having to compute in fear. And well worth the extra $$$.

Someone wake me when there's an actual OS X virus plague, malware attack or botnet discovery.

Yup!
 
updates are released every tuesday. It's a good thing that issues are found and fixed so quickly.

It's monthly, not weekly. Second Tuesday of each month.
They only release outside of this schedule when there is a very serious exploit.
 
Use Google to look up about all of Miller's exploits. I am not going to do it for you!



Mac OSX is UNIX as of 10.5. OSX has BSD core. UNIX & BSD (and hence OSX) have ipfw. It's a firewall that windows does not have by default. Check wikipedia to learn about it on a basic level. A crossover cable acts as a bridge for ipfw when a switch, hub, router, and modem do not. When bridged, packets pass through ipfw.



See above. Without crossover cable, Mac OSX wouldn't of fell.

WIPFW - IPFW ported for Windows.
 
As a "tin hat" wearing conspiracy theorist, I often wonder if Anti-various and security software developers have any part in the virus and threats that bombard the cyber community. It only serves the companies who have billions invested in the cyber protection market. I honestly wonder if someone would spend months or even years developing hacks for software "just because", how do they support their living?

Any ways, no software or OS can be 100% secure. Certainly the closed and permissions based system that OS X utilizes makes it more arduous to penetrate, but it will never be 100% secure.

Do you think popularity in the business sect would make OS X even less secure? Curious for those who know more than myself.
 
Zzzz. I'd rather be on a motorcycle in Minneapolis than in an armored Humvee in Kabul.

There's something to be said for not having to compute in fear. And well worth the extra $$$.

Someone wake me when there's an actual OS X virus plague, malware attack or botnet discovery.

good point.:apple:
 
Apologizes for the long post, just got in.

In any case, both Windows and OS X are fairly secure OS's. True viruses are far less common then they were 5 years ago. The real concern these days are Trojans and Phishing.

The real concerns are identify theft, botnets and so on that actually make money for the hackers. That's the reason viruses and worms have been declining over the years and not to mention the OS are getting more secure. There are no incentives to write a virus to spread through networks nowadays.



"Viruses" are so nineties. It's now called malware. Get it straight you people. :p:D

I know you're being sarcastic but some people might not catch it. Malware refers to any type of software that is intentionally malicious toward the users including viruses, worms, torjans, rootkits and so on.

The biggest security threat to both Windows 7 and Mac OS X is the end-user.

Social engineering is the term here. Humans will always be the weakest link in any security solution.

Yes. The industry has just wrapped it all up into one term. Viruses have actually been less of the "problem" of recent times.
Due to lack of incentives of creating them. Botnets and identify theft are much more profitable.

Very good, we need guys like Miller to shake things up a bit and keep Apple on their toes as they push their market share forward. What we don't need are Apple apologists or zealots, that gets nothing done. Apple will appreciate what Miller has to offer too, it's free R&D, and the publicity from Miller's event won't cost them any sales as it's not necessarily negative, we all know that it's win win.
There's a difference between people intentionally holding back on holes, using them to create publicity and people who does find them and report them directly to the OS vendor. This guy is the former type, he's more concerned about winning contests with his exploits and publicity. The fact is, his exploits are nothing to worry about, you have to be actually stupid to get infected.
Keep in mind it was two years in a row this guy won for hacking OSX. The first year he came with two exploits and the first one worked so he won. The second exploit he didn't tell anyone about and a year later it was still unpatched and he used that to win again. So maybe apple patched it quickly once he told them about it but it doesn't change the fact that the exploit was out there for more than a year. The next contest begins again next week.

He also said that OSX was easier to hack than windows and that windows vista and 7 are more secure. Though he also said OSX is safer.
Most exploits these days will coming in the form of phising and social engineering. The operating system can't protect you from that.

There is also a trojan out there, the famous one attached to pirated copies of iwork. Now you say, "I don't pirate anything so I have nothing to worry about". Not true. Hackers don't have to necessarily hack OSX. Rather they hack the servers where you download software from and attach their malware to that. Looks legit to everyone, after all you've been using that software for years, and then one day you are infected and don't even know it.

Have you read the rules for the contest? Nobody won the original contest, most modern OS was so hard to break into, they have to bend the rules and allow the "hackers" to use exploits that requires users to actually infect themselves and get in. Users will always be the weakest link in security issues, they are not the fault of the OS but the users. OS companies need to focus more on anti-social engineering security solutions, MS has done that with the UAC but the UAC has been broken in, MS has fixed it but they need to focus more on making sure it never happen again.

OS X isn't easier to hack than Windows 7. Both OS is secure enough on its own. As long as the users are educated, both OS is almost impossible to break in.


Yeah… Well that’s quite a load of… :eek:. Here are few:

Virus (PoC): OSX/Inqtana.A
Trojan-Downloader: OSX/Jahlev.A
Backdoor: OSX/iWorkServ.A
Worm: OSX/Tored.A


And still many Mac users do essentially just that. There is no such thing as an immune OS.

I switched to the Mac because it was the better platform. And it still is the better platform for many reasons. But Windows 7 is ahead of OS X in security features. Some people just need to get over it.

And even if some Windows virus would not effect you, you might be spreading the crap around. There’s just no good excuse not to use anti-virus.

These holes are about PDFs this time and those 20 are from Preview. You can read a bit more from Intego’s blog.

They are not viruses, they are all trojans that you HAVE to INSTALL yourselves. By giving permission to OSX to install that pirated copy, you are intentionally infecting the OS yourself, which is your fault, not anybody else.
Even the perfect OS in the entire universe will not be safe from social engineering, there's no way to prevent people to stop installing crap.

Some people are being rather silly.

Any computer CAN get a virus.

It's harder to get a virus on Mac/Linux because:

a) There used to be not as much interest
b) It's harder to exploit due to the OS being based around Unix. The code is different, it's a lot harder to code an exploit albeit be it a virus, worm or trojan etc
c) All the people coding stuff that's got an .exe extension won't affect Macs, 'cos Macs won't run anything with an .exe extension. Even if it is a virus it won't affect the computer.

I'm no expert but I'm lead to believe that a lot of the exploits for Mac/Linux would have to be through code injection which affect the RAM, and operating of software etc?

There is anti virus software for Mac, and your Mac does have a Firewall - better safe than sorry, right?

If you are connected to a router you shouldn't have to worry too much as most new models have a built in firewall.

I could go on, here!

Modern computers (Vista+, OS X, any UNIX OS, *nix) do not get viruses. It's the users that infect their computers. Past generations of OS like XP was so horrible that you could put them in an infected network and it'll automatically get infected, due to the fact that everything was running under admin account without any user permission to allow the stuff to be run. Vista, W7 and OS X is extremely hard to infect due to this specific reason.

If somebody wrote some code, give it to one user and the user installs it and as the result, the user got infected. The virus still has no permission to actually run itself, it's harder to make copy of itself and spread it to another computer in the network without that specific computer owner allowing it. That code still can't infect anybody else because the user actually have to send it to somebody else, and that person has to install it and run it. Far different in the past, when the worms can infect by just hitting the port of a computer and install itself.

For now. But as our platform is getting more popular, it is not only getting more attention from the potential users....

Even if OS X has 90% of the market share, nothing will change. It's almost impossible to spread viruses in OS that does not explicitly allow any file to run as root/admin like XP did.

That's my favorite. Based off of UNIX and IS UNIX are two different things. OSX is still a closed system and when outside people point out its shortcomings Apple should do what MS has been doing lately and jumping on it, not ignoring it.

OSX is UNIX certified, it's not based off it.

Not surprised, when OSX becomes more relevant it'll become just like Windows, It has nothing to do with Macs being more secure, thats just BS.. I love OSX but being a computer enthusiast I know the reason the OSX do not have many viruses or spyware is due to the fact that not many people use it..

A computer enthusiast is not the same thing as computer expert.

Look at the difference between Vista/W7 and XP. It's much harder to infect the former than latter, for the same reason it's much harder to infect OS X ever since its inception. Users are much more involved in Vista/W7 in terms of installing applications and allowing applications to run. Far different from Xp where everything was running with admin account and allowed to install/run other stuff without the user's permission.
 
OS X offers ZERO protection from this type of attack.
If this were a Mac you simply have no way of ever knowing that there is a problem.

Actually, what you're saying is completely unfounded. There are only 2 active trojans for OS X, iServices and Jahlav, and they're both detected by Snow Leopard's built in anti malware. So right now I'd say Snow Leopard protects against 100% of the active OS X malware.
 
Do you think popularity in the business sect would make OS X even less secure? Curious for those who know more than myself.

Yes, because that is whats being attacked. Hackers are about making money now Of course you still have your out to be famous or cause chaos hackers, but for the most part organized crime rings run these malicious infections. They are after what they need, numbers. The more computers they take over, the more information they can obtain.
 
This is true and it's the source of the name Window NT.
WNT = VMS + 1

I've heard that one before, but supposedly it stood for:
"N-Ten"-codename of the processor used for development

and

"New Technology"-The name Microsoft started to use in version 4.0

MS began to drop NT in Windows XP/2003, when they merged the desktop and server systems. It is still in parts of the OS today though.
 
Why are there still people here stating Windows has better security features than OS X? This is truly not the case.

A house in the worst neighborhood (Windows) with more locks on the doors and bars on the windows, I suppose, has better "security" than some of my friends who live in the suburbs (Mac) and always have their doors unlocked. Reality is, the house in the worst neighborhood still gets attacked far more often.

Enough with the nonsense. I'm betting NUMEROUS MR readers visit sites they wouldn't admit to and STILL haven't caught anything.

Trojans are a problem, but on Mac, they still require an admin username and password to be entered before installing. On Windows 7ista, a simple "Allow" will install it.

And lastly, as someone else pointed out, as of 10.5, Mac OS X is Unix. It's not Unix-like, or Unix-based, or Unix-wannabe, or a flavor of Linux. It's officially, 100% Unix.
 
NOT INSTALLED by default. The user has to install and configure it themselves. Try doing that it is a nightmare. Apple does all that for you.

Apple does not do it all for you. Apple gives your a small amount of GUI based configuration. We use IPFW here to throttle bandwidth and its all command line driven.

Why are people still comparing OSX to Windows. Nobody gives a rats ass about Windows in this conversation. This is simple article about Mac vulnerabilities. How come every damn time someone brings up an issue with OSX, people throw Windows in it. Who cares about Windows, we know its flaws! Someone is now pointing out OSX's flaws. Its real, they exist, and anyone who says otherwise is frankly stupid. No system is 100% secure.
 
Its not. You're so in love with Apple that you refuse to see any potential need to protect yourself or even comprehend the potential flaws. Others however are not.

Nice try with the "blind fanboy" chestnut. Being "in love" with anything has nothing to do with. I'm talking about factual reality here.

Again, as the line you quoted said, let us know when there's an actual OS X virus plague, malware attack or botnet discovery.

(And I'm sure you will.)
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.