Safe to Watch Videos Online??

[doubledee]

All of those examples you posted exploit a specific hole in a specific version of a specific program. So yes, I guess there's a risk there's an unpatched exploit in the media player of your choice that a video file could exploit, but at the same time, there's a risk that there's an unpatched hole in the browser of your choice and merely visiting Google next time will exploit that bug and allow the Russians to take control of your computer.

So we finally agree.


Let's rewind a minute...


The purpose of this thread was to determine how great of a risk I pose to my new MBP by watching (presumably decent) videos online at places like YouTube...


I have never said Mac are inherently predisposed to viruses.

And I know that *anything* I do online can possibly lead to malware or attacks.


Is it such a sin for a girl to be cautious and a little untrusting about Internet Security?!


Hello... I have spent since March 2013 setting up my MBP and trying to make it secure and super usable, and I'd be mad as hell if I easily screw it up because of something dumb I do.


You also don't seem to appreciate this computer is for my BUSINESS, so it is my life!!!


If I pick up a Back-Door or Root-Kit or Key-Logger, I'd never know, and you better damn well believe that could cause me infinite heartache.


Maybe you'd a hobbyist on your Mac. But for me, my mac is serious business!!

tl;dr: You're being way too paranoid, and if you're that concerned about viruses, stop using the internet.

I never said I was so terrified that I wouldn't go outside or go online, but there is no reason to ridicule my cautious nature...


Maybe you're so casual because you have nothing to lose on your Mac or in life?

Sincerely,


Debbie

 

[yg17]

I have personal data on my Mac and rely on it daily just like everyone else. I have backups, but frankly, I'm more worried about a hardware failure than a virus infection. The absolute worst a virus could do is hose my operating system to the point where I'd have to wipe my hard drive and restore from a backup. I'd be out of commission for a day at the most if that happened.

You spent 9 months setting up your new Mac, I spent 9 hours. I'd wager that we're both equally secure and protected against malware, and yet, I have no fear of watching Netflix on my Mac.

 

[doubledee]

I have personal data on my Mac and rely on it daily just like everyone else. I have backups, but frankly, I'm more worried about a hardware failure than a virus infection. The absolute worst a virus could do is hose my operating system to the point where I'd have to wipe my hard drive and restore from a backup. I'd be out of commission for a day at the most if that happened.

There are some fundamental concepts in security you keep seeming to ignore...

Even if you are security minded - and I'm not so sure - you likely have used the same Username or Email or Password amongst at least two accounts in your lifetime.

As such, if someone hacks into your computer, they have the ability to steal quite a bit more.


You should be a hell of a lot more concerned with someone getting your Usernames, Email Accounts, Passwords and other vital data versus your enormous stash of Justin Bieber videos...

Backups don't help you recover from that.

Ever hear of "Identity-Theft"?


While I try to not write things down, the reality is that if you gained access of my MBP, you'd have more info on me than God does!!

You could pretty easily piece together where I live and work and bank and surf to on the Internet and how much money I have and you'd also have a boat-load of information on my company.

(FileVault and Backups don't do s*** if you give someone the "keys to the kingdom", which someone with physical access or a Back-Door/Root-Kit/Key-Logger would have.)


It seems that your "Digital Life" has no value beyond needing to be backed up regularly.

Congrats on such a worry-free life!

But for the rest of us...

and yet, I have no fear of watching Netflix on my Mac.

I'm not talking about Netflix... (Since you pay for their service, I would hope they are trustworthy.)

Sincerely,


Debbie

 

[yg17]

I don't save passwords on my Mac. I'm able to remember them, and yes, I use different passwords on different sites. I still have data on my Mac, like tax returns, complete with my SSN, that I wouldn't want anyone to get their hands on. I do use FileVault, and have the more important stuff in an encrypted DMG as an extra layer of security.

At the same time, I'm aware that the risk of getting a virus from a YouTube video is next to nothing and I accept the risk. Just like I know there's a chance of the plane I'm getting on crashing, but I continue to fly because the reward is much greater than the risk.

And really, if someone hacked into something like my credit card account online, the most damage they'd be able to do is pay my bill. What a shame that would be.

 

[GGJstudios]

I understand that, but my OP was asking about the potential for online videos to have malware. Slightly different question.

No, it's not different. The safe computing steps I mentioned also cover web surfing and watching videos online. There is no OS X malware in the wild that can infect a Mac simply by watching a video online. None. All the malware links you posted are referring to Windows, not OS X.

If you follow the safe computing steps that are listed, there is no malware in the wild that can infect your Mac. You came here asking a question and you've been given a factual answer. Now it appears you prefer to argue with those who are more informed than you on this topic, rather than accept their accurate answers.

Why did they take those guides down?

Sure wish they would update them and get them back online....

The guides are updated. They were taken offline when the MR site was hacked and have not yet been re-activated.

 

[doubledee]

I don't save passwords on my Mac.

Neither do I.

I'm able to remember them, and yes, I use different passwords on different sites.

You've never used the same username or email or password between two accounts?

I still have data on my Mac, like tax returns, complete with my SSN, that I wouldn't want anyone to get their hands on. I do use FileVault, and have the more important stuff in an encrypted DMG as an extra layer of security.

Now you are talking about the "gems" that I am worried about. (Not backups of Cat Videos!)

At the same time, I'm aware that the risk of getting a virus from a YouTube video is next to nothing and I accept the risk.

And that was my basic question...

What is the risk of watch YouTube Videos?

(And to be fair, "What is the risk of watching YouTube Videos and using SnagIt to capture them while I watch them and then save them to my HDD as a .mpeg??)


Have I pushed back? Yes!!

But if you guys can back up your positions, then I am willing to trust the advice.

Just like I know there's a chance of the plane I'm getting on crashing, but I continue to fly because the reward is much greater than the risk.

Right.

But all that I have heard in the past says the risk of videos is fairly high.

You seem to disagree.

I stated my reason for concerns along with some links.

And really, if someone hacked into something like my credit card account online, the most damage they'd be able to do is pay my bill. What a shame that would be.

Ha ha.

Yeah, but when they get your Social Security Number because you weren't sensible enough to never store that on your Mac, you'll think differently...

My accountant has my Tax Returns on his laptop, and every year after he completes them, he prints them out and I hand write in my SSN.

Problem solved!

Sincerely,


Debbie

 

[Tomorrow]

OP, you asked if watching videos online is safe.

With the exception of yourself, this thread has given you a resounding "yes, it's safe" as an answer. You seem unwilling to accept the answer you've been given, which makes me wonder why you asked in the first place.

In any event, best of luck scouring the 'net for every possible threat, no matter how insignificant and remote it may be.

 

[gollys]

I don't save passwords on my Mac. I'm able to remember them, and yes, I use different passwords on different sites. I still have data on my Mac, like tax returns, complete with my SSN, that I wouldn't want anyone to get their hands on. I

.

Tax returns, SSN etc - why store them on the Mac? With things that are sensitive like that, I always copy them to a hard-drive and remove them from the Mac itself. Afterall once the tax return is lodged you should not need to go to it again? And if you do, it is there on the backup? I try not to keep too much sensitive stuff on my Mac.

 

[iJohnHenry]

None of that Internet jargon matters, as videos have an embedded subliminal message, telling the viewer to ......






..... kill, KILL, KILL!!!

 

[hwojtek]

(And to be fair, "What is the risk of watching YouTube Videos and using SnagIt to capture them while I watch them and then save them to my HDD as a .mpeg??)

1. This sounds like trolling.
2. The workflow described above is just ridiculous (why screengrab a video when you can just download it with a simple Safari extension?)
3. By the way this extension makes Safari web browsing even more secure by disabling the plug-ins.

But all that I have heard in the past says the risk of videos is fairly high.

I've heard they've seen Elvis playing golf with Michael Jackson. There is ZERO risk involved in watching Youtube videos.
Oh, and by the way, your links are Windows-specific, so they're irrelevant, and since you desperately try to convince us of your being security-minded, but fail to see that your links are targeted at a different software platform, I stand by my #1: you obviously have no idea what are you talking about. And this sounds like trolling.

 

[powerstrokin]

You could certainly get a virus by downloading a video/whatever kind of file from a torrent site- many people for some odd reason love to break a video file into multiple .rar files, of which a virus could be stored...just waiting to leap out and soul rape your computer.


Sometimes, OP, you kind of have to just dive in and make a few mistakes and 'figure it out' to know what you should or shouldn't do.

On my last Windows computer, I didn't run antivirus software or anything like that- because I knew what I was downloading, or at least paying a fair bit of attention. Enough to figure things out.

If you're THAT concerned about something as remote as YouTube screwing up your rig, then maybe you should just get a second computer for watching online videos or better yet, a tablet. Cheap and easy.

Good luck. You sound about as paranoid as the government would like its citizens to be.

Stay vigilant, Debbie. You never know what's lurking around the corner.

 

[GGJstudios]

You could certainly get a virus by downloading a video/whatever kind of file from a torrent site- many people for some odd reason love to break a video file into multiple .rar files, of which a virus could be stored...just waiting to leap out and soul rape your computer.

Not true for OS X. First, there are no viruses for OS X in the wild, as already stated; only Trojans. Second, you aren't going to get malware installed on OS X simply by opening a compressed file. You would have to actually install something in order to get malware on the Mac.

 

[doubledee]

You could certainly get a virus by downloading a video/whatever kind of file from a torrent site- many people for some odd reason love to break a video file into multiple .rar files, of which a virus could be stored...just waiting to leap out and soul rape your computer.

At least one person can see things for what they are...

Sometimes, OP, you kind of have to just dive in and make a few mistakes and 'figure it out' to know what you should or shouldn't do.

True. But it is even better to learn from other people's mistakes and minimize my own!

If you're THAT concerned about something as remote as YouTube screwing up your rig, then maybe you should just get a second computer for watching online videos or better yet, a tablet. Cheap and easy.

Well, I have my old MacBook.

If I felt that YouTube was a high risk, I might just do that.

I'm just here asking the tough questions and hoping for some fair answers...

Good luck. You sound about as paranoid as the government would like its citizens to be.

Stay vigilant, Debbie. You never know what's lurking around the corner.

Is that sarcasm, or are you being supportive?


Debbie

 

[powerstrokin]

Not true for OS X. First, there are no viruses for OS X in the wild, as already stated; only Trojans. Second, you aren't going to get malware installed on OS X simply by opening a compressed file. You would have to actually install something in order to get malware on the Mac.

Ok ok I get that, but really the main point I was making (I know, I wasn't clear at all) was for OP to just use a different computer if she's that worried about it.

 

[GGJstudios]

At least one person can see things for what they are...

No, that's not how things are, as already explained. You appear determined to ignore the facts that have been presented, preferring to cling to your unfounded fears.

 

[powerstrokin]

At least one person can see things for what they are...




True. But it is even better to learn from other people's mistakes and minimize my own!




Well, I have my old MacBook.

If I felt that YouTube was a high risk, I might just do that.

I'm just here asking the tough questions and hoping for some fair answers...




Is that sarcasm, or are you being supportive?


Debbie

I was being both sarcastic and supportive. Sincerely, I think you have NOTHING to worry about in regards to watching online video from trusted sources such as YouTube and Vimeo. I'm sure there are a couple more I'm forgetting like LiveLeak and more but generally- you're good to go.

Lighten up. Watch some videos.

 

[doubledee]

Not true for OS X. First, there are no viruses for OS X in the wild, as already stated; only Trojans.

Why am I the only one that seems to get this concept...

Um, HELLO, Trojans and Back-Doors and Root Kits and Key Logger are WHAT you should be concerned about!!!

A virus or worm by definition will just trash your data and software. (THat is a survivable incident.)

If someone hacks into your system and is STEALING your info then you are ********d!!!


You keep coming back to the platitude "Macs don't get Viruses". (Mostly true in 2013.)

But they sure as hell can fall victim to Trojans and Back-Doors and Root Kits and Key Loggers!!!!

Understanding the difference between those two categories of threats is "Security 101"

Second, you aren't going to get malware installed on OS X simply by opening a compressed file. You would have to actually install something in order to get malware on the Mac.

You can get malware by...

- Viewing a compromised Flash video

- Clicking on a compromised Image

- Opening a compromised Web Page

- Downloading and viewing a compromised Image file

- Clicking on a compromised Web Link

and on and on...


You can definitely get malware by more than installing an executable...


Back getting back to the "essence" of my OP...

My question (and fear) was "What is the Risk Factor of watching videos on YouTube with the emphasis being on getting nasty things in the video payload that would kill anyone's Identity courtesy of Anonymous, the NSA, the Chinese, or the Russian Mafia?"

I don't want a virus, but I agree that at this point in time, Macs are basically free from virus threats.

However, Macs are not free from the really nasty stuff like Trojans, Back-Doors, Root-Kits, Key-Loggers, Man-in-the-Middle Attacks, and so on.

Those are the things you need to be watching out for...

And if you do NOT think you can get your * ss hacked off by going to BitTorrent and downloading Porn and Pirated Music/Movies on a PC or on a Mac, then just wait and see what happens to You, Your Identity, and Your Computer!!!


Also, in my OP - as always - it was *implied* that I wanted people to back up what they said with some facts. ("I think..." doesn't cut it!)

So no need for a large group of people to get pissy because I ask for something to back it up.

Um, I went out and found links to support my concerns.

At least GGJstudios is trying to back up his "Virus Theory", although he keeps sending me to dead links...

But I already know what he is saying.

This isn't supposed to be a battle, and if some people in this thread would back down their egos, we all might learn from each other...


We basically ruled out Viruses. Agreed upon.

I've had a handful of people tell me in the last few days that YouTube and Vimeo are fairly vigilant protecting their Users/Visitors. I can accept that at face value.

Powerstrokin seemed to give a reasonable response, although a little sarcastic at the end.

So I feel somewhat reassured that I can watch Video safely on my new MBP.


But then again, when people like yg17 say,

A GIF file cannot install malware. Neither can a video file or an MP3. I don't know where you're getting your information from but it's wrong.

I flipping fall over laughing, and the rest of the conversation goes out the window...

Sincerely,


Debbie

 

[GGJstudios]

Um, HELLO, Trojans and Back-Doors and Root Kits and Key Logger are WHAT you should be concerned about!!

You're not going to get those on OS X unless you install them yourself or give someone access to your computer to install them.

If someone hacks into your system and is STEALING your info then you are ********d!!

Hacking and malware are two different things. In over 5 years of reading "my Mac was hacked!" claims, not a single one ever was. The chances of an average Mac user being hacked is ridiculously remote. In fact, the chances of an average Mac user encountering malware is extremely remote.

You keep coming back to the platitude "Macs don't get Viruses". (Mostly true in 2013.)

No, it's completely true. There has never been a single true virus in the wild that can infect OS X in the 12+ years since OS X was released.

But they sure as hell can fall victim to Trojans and Back-Doors and Root Kits and Key Loggers!

Not if you practice safe computing, as already described.

You can get malware by...

- Viewing a compromised Flash video

- Clicking on a compromised Image

- Opening a compromised Web Page

- Downloading and viewing a compromised Image file

- Clicking on a compromised Web Link

and on and on...

None of that is true if you're running OS X and practicing safe computing.

You can definitely get malware by more than installing an executable...

Completely false on OS X.

My question (and fear) was "What is the Risk Factor of watching videos on YouTube with the emphasis being on getting nasty things in the video payload that would kill anyone's Identity courtesy of Anonymous, the NSA, the Chinese, or the Russian Mafia?"

And the answer, as stated many times, is "none."

At least GGJstudios is trying to back up his "Virus Theory", although he keeps sending me to dead links...

What dead links?

 

[doubledee]

You're not going to get those on OS X unless you install them yourself or give someone access to your computer to install them.

Care to elaborate?

My *general* knowledge of such things would say, "There are lots of ways to get malware by by simply open a webpage or email or clicking on a link or image..."

I find it very hard to believe that Macs are immune from such things.

(I'd Google this, but I've gotten pretty beat up in this thread already!)

Hacking and malware are two different things. In over 5 years of reading "my Mac was hacked!" claims, not a single one ever was. The chances of an average Mac user being hacked is ridiculously remote. In fact, the chances of an average Mac user encountering malware is extremely remote.

They are often intertwined...

You go to www.NoSoSafeWebsite.com, suffer from a "drive-by" attack, and now you have malware that is a means by which a hacker can either directly access your computer or achieve this in a few hops.

Hacking is often accomplish VIA malware...

No, it's completely true. There has never been a single true virus in the wild that can infect OS X in the 12+ years since OS X was released.

So it is *completely* true in 2013. I'm not debating viruses with you, so let's move on.

But they sure as hell can fall victim to Trojans and Back-Doors and Root Kits and Key Loggers!Not if you practice safe computing, as already described.

None of that is true if you're running OS X and practicing safe computing.

I think you oversimplify this entire topic.

(If the Chinese can hack into the U.S. Federal Gov't and Major U.S. Banks, and Nuclear Reactors, and people who do practice "safe computing", then I'm sure they could nail you or I...)

You can definitely get malware by more than installing an executable...

Completely false on OS X.

An oversimplification...

My question (and fear) was "What is the Risk Factor of watching videos on YouTube with the emphasis being on getting nasty things in the video payload that would kill anyone's Identity courtesy of Anonymous, the NSA, the Chinese, or the Russian Mafia?"

And the answer, as stated many times, is "none."

If that is your final answer, so be it.

What dead links?

You keep sending me to this "Mac Security Guide" which was taken down...

You've mentioned it like 4 times in the past few weeks.

In fact, it was "I" who asked where that guide was, because I wanted to read it!!!

Sincerely,


Debbie

 

[GGJstudios]

My *general* knowledge of such things would say, "There are lots of ways to get malware by by simply open a webpage or email or clicking on a link or image..."

I find it very hard to believe that Macs are immune from such things.

Your general knowledge appears to be based on the Windows malware environment, which is quite different from the OS X malware environment. It is wrong to assume things are the same with OS X as they are with Windows. The only OS X malware in the wild is a very small number of Trojans that are ALL easily avoided by practicing safe computing, as has been demonstrated by countless Mac users over the past 12+ years.

(If the Chinese can hack into the U.S. Federal Gov't and Major U.S. Banks, and Nuclear Reactors, and people who do practice "safe computing", then I'm sure they could nail you or I...)

They have no interest in hacking your Mac. If you go back and look at most hacks, they were performed on high-value targets, not average users with boring and useless data on their computers.

You keep sending me to this "Mac Security Guide" which was taken down...

Go back and read my first post in this thread. Post #15. Read it all this time.

 

[mossy]

You also don't seem to appreciate this computer is for my BUSINESS, so it is my life!!!

Why don't you just buy another computer?
One for business - and one for entertainment!

 

[doubledee]

My *general* knowledge of such things would say, "There are lots of ways to get malware by by simply open a webpage or email or clicking on a link or image..."

I find it very hard to believe that Macs are immune from such things.

Your general knowledge appears to be based on the Windows malware environment, which is quite different from the OS X malware environment.

Could be. (I never claimed to be a security expert. Just damn cautious!!)

It is wrong to assume things are the same with OS X as they are with Windows. The only OS X malware in the wild is a very small number of Trojans that are ALL easily avoided by practicing safe computing, as has been demonstrated by countless Mac users over the past 12+ years.

So can you please be more specific with what you mean by "safe computing"!

In Post #12 I listed some of the things I have done to make myself safer.

(Like I said, this has been quite the project since March 2013. I have spent hundreds of hours on here and online and on my new MBP getting it set up just right. I'd like to think I have an extremely secure MBP, although I'm sure it could be better!!)

They have no interest in hacking your Mac. If you go back and look at most hacks, they were performed on high-value targets, not average users with boring and useless data on their computers.

Lucky for me the Chinese don't know I have the cure for cancer on my MBP...

Go back and read my first post in this thread. Post #15. Read it all this time.

Three of your four links in Post #15 are dead. (Like I already said before.)

I read the 4th link a few weeks ago.

Blah!!!!

Please sir, I want some more... (Queue Oliver Twist music)

Sincerely,


Debbie

----------

Why don't you just buy another computer?
One for business - and one for entertainment!

Like I said, I still have my old MacBook.

But here are the catches...

1.) Being away from home it is a PITA dragging two laptops around regularly.

2.) I don't have all of the security advantages on my old 2008 MacBook that I have on my new MBP.

3.) The videos we have been debating over are for work. So even if I watch and capture them on a 2nd Mac, they'd ultimately end up on my Business MBP. (Although if I capture them, in theory they couldn't have malware in them...)

Good idea, but in an ideal world I wouldn't feel guilty knowing I am watching a video on YouTube about Chinese global domination on the same MBP I use to manage my production webserver and database?!

Sincerely,


Debbie

 

[GGJstudios]

So can you please be more specific with what you mean by "safe computing"!

As stated in my first post, read the WHAT SECURITY STEPS SHOULD I TAKE? section of the link you claimed you read from that post. Many of the items listed in your post #12 are not necessary to keep your Mac malware-free. While they're not bad things to do, they're not required for malware avoidance.:

- Standard and Admin account created
- Use Standard account
- Use Pass-phrases
- FileVault2 running
- Turn off Auto Login
- No File Sharing
- BlueTooth Off
- No Gaming
- No Social Media
- No Peer-To-Peer
- No Porn
- No Free Software like Screen-Savers
- Visit Trusted Sites

 

[doubledee]

As stated in my first post, read the WHAT SECURITY STEPS SHOULD I TAKE? section of the link you claimed you read from that post. Many of the items listed in your post #12 are not necessary to keep your Mac malware-free.

When I go to your Post #15 and click on...

Read the What security steps should I take?

It takes me here...
http://guides.macrumors.com/maint.html#What_security_steps_should_I_take.3F

And all the page display is...

Sorry, Guides are down for now. Please visit https://forums.macrumors.com

Debbie

 

[GGJstudios]

When I go to your Post #15 and click on...


It takes me here...
http://guides.macrumors.com/maint.html#What_security_steps_should_I_take.3F

And all the page display is...



Debbie

How many times are you going to ignore the last line of that post? Use the last link provided..