Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
Also, the test Mac's security settings were set to default, which is 'allow all incoming connections' without question.

For some strange reason. Maybe it's to avoid users getting messages like "allow meaninglessname.app to accept incoming connections?" and they go "wtf is that? no way!" and then they can't get mail or connect to airport and so there goes the Mac user experience.
 
And you got these numbers from where?
It was more a figure of speech than a real statistic. All I'm trying to say is that even on Windows or any other OS you consider insecure, a fully patched system with a careful user will almost never get infected.

While it may be common sense to you and me, most people don't protect their machines, they don't install patches, they open strange emails and click on links. That's how machines get infected most of the time and it is because of this I think the security issues we mentioned should not be dismissed as something caused by a dumb user.
 
1. You don't think all these Mac users thinking they're so secure won't click on pretty much every link? Most (not all, for sure, but most) infections are caused by user stupidity somewhere. Hell, take the Conficker worm for Windows. Microsoft was notified about it, patched it, and then this worm was created. In other words Microsoft aren't to blame for conficker, users not patching are!

2. It turns out that the IE8 Beta that was used in this didn't have DEP and something else turned on, which now it's released is on in Windows Vista & 7. Reports are coming in that this would've prevented the attack.

3. Chrome is the only browser to come out of this looking good!
 
And, still, the person had to open the email and then click the link in order for the damage to be done. Which, if you have some common sense, is removed from the equation and therefore no longer such a big deal.

Really? So if you received an email from store@apple.com, with a link to a list of refurbished machines on special offer or something, you would never click it? Spoofing the sender and the content of the mail is as easy as pie....

Noone, however sensible, is immune.
 
Really? So if you received an email from store@apple.com, with a link to a list of refurbished machines on special offer or something, you would never click it? Spoofing the sender and the content of the mail is as easy as pie....

Noone, however sensible, is immune.

No, I wouldn't actually.

I would go to Apple.com and look for the refurbished machines.

Unless I know the source personally, and I know the linked site, I won't travel to it. And I NEVER open videos or programs from emails. If I miss a funny joke or an animation or two because of it, I figure I'll survive. Losing terabytes of information due to corruption or infection ... not worth it.

So, you'd have to be a personal friend sending me an email with a link to a site I'm familiar with in order to get me. And that's assuming I don't just go to the site directly anyhow as I don't trust my eyes to point out paypa1.com.

Sure, I'm not immune, but damn close to it.
 
No, I wouldn't actually.

I would go to Apple.com and look for the refurbished machines.

Unless I know the source personally, and I know the linked site, I won't travel to it. And I NEVER open videos or programs from emails. If I miss a funny joke or an animation or two because of it, I figure I'll survive. Losing terabytes of information due to corruption or infection ... not worth it.

So, you'd have to be a personal friend sending me an email with a link to a site I'm familiar with in order to get me. And that's assuming I don't just go to the site directly anyhow as I don't trust my eyes to point out paypa1.com.

Sure, I'm not immune, but damn close to it.

Thank you - that was the point I was trying to make.
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.