Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.

Davy.Shalom

macrumors 6502
Original poster
Dec 23, 2008
465
1
So I was thinking...as Leopard gets older and Apple eventually stops updating the security features, will there be more need to go out and buy a program like Norton Antivirus for mac? We mac users take pride in NOT having to have antivirus programs like the PC market, but is it advisable?

I'm wondering if I should buy Norton for mac (only $50, which I thought was reasonable,) to install on my PM G5. What are your guys' thoughts?
 
There are no viruses in the wild that impact current OSx. The important thing to do is not install software you don't trust such as programs from dodgy sites. I've been running OSx since 2004 with no antivirus and have had no problems.
 
Tab napping.

Now see, I just read this on another forum, which prompted my visit here to look. The writer is a reasonably savvy guy. Note that it took a full manual overnight scan, Norton didn't prevent the attack.

my wife's mac got something that hijacked all the search engines and gave 404 or 500 errors for any website that could help.

this despite the fact that the machine had norton antivirus. but a full overnight manual scan found and elminated to two trojans and appears to have fixed the problem. appears to because who knows whether it actually has.

I wonder what damage the trojan did, how much private data it captured and transmitted to its originator.

to think of the macheads who scoffed at my wife for getting an antivirus program.

And now there is "tab napping", which crosses all platforms:


Beware of "tab napping attacks...

A new phishing concept that exploits a user's inattention and his or her trust in multiple tabs in a current browser session is potentially likely to confuse and make vulnerable even the most security-conscious of Web surfers. It's described Brian Krebs's link below.

The attack (demonstrated on Aza Raskin's site also linked below) is simple. The scenario suggested is that a user has a browser with multiple tabs open. He or she then visits a malicious site that uses special JavaScript code to silently alter the contents of a tabbed page along with the information displayed on the tab itself, so that when the user switches back to that tab it appears to be the login page for a site the user normally visits. In the demonstration, this is a fake Gmail page. the exploit has been nicknamed 'Tab napping'

The proof of concept site linked below has a working example which you can experience. This is yet another potential security hazard that users will have to watch out for when working with multiple tabs in a browser. The Vimeo example below makes it clear that such an attack does not change the URL in the browser, but many users don't always double-check that against the tab they are looking at.

The recommendation is that you should never log-in on a tab that you haven't opened yourself. Since the tabnapping tactic relies on you trusting that you opened the tab - and that the site simply timed out before you used it - the best defence is that if you see a tab that contains a seemingly-legitimate log-in form, close it, then open the site you want to use directly in a new tab or window.

The scary thing about tab napping is that takes advantage of the user's false sense of security, in knowing he/she is immune; as we all know, AV programs will prevent stealth attacks, but are useless if you open the door and invite the attacker in.

First line of defense: constant awareness and vigilance.
Second line of defense: Mac, or up to date AV on Windows.
Third and all other lines of defense: constant awareness and vigilance.
 
... Norton didn't prevent the attack.
but a full overnight manual scan found and elminated to two trojans and appears to have fixed the problem
No antivirus protects against user failures. Trojans can easily be prevented on a Mac by paying attention and being careful when you install anything, especially being careful when you enter your admin password.
And now there is "tab napping", which crosses all platforms:
Redirects, bogus malware warnings, phishing attempts and other browser-related scams have been around for quite a while. While they can be annoying, they can't harm your Mac unless you actually download and install something. Any internet user should be careful when entering login or personal information on any site.
First line of defense: constant awareness and vigilance.
Second line of defense: Mac, or up to date AV on Windows.
Third and all other lines of defense: constant awareness and vigilance.
^ This.
 
You can easily receive a Windows virus via email, download or web site. Even though your machine can't be infected with it, you can most certainly pass it on to other computers. Who knows how many Windows machines have been compromised by viruses they received from Mac users???
:eek:

People who view this as morally/ethically unacceptable typically attain their responsibility status by using ClamXav. It's free/donation-ware, uses very little resources and works well. There are a number of av programs out there but I personally don't know of anyone using them so I can't comment on them.
:D
 
Who knows how many Windows machines have been compromised by viruses they received from Mac users???
Only those Windows users who are foolish enough to run Windows without AV protection. It's not a Mac user's responsibility to protect Windows users. Each user has the responsibility to protect their own computer. If a Windows user is running without AV protection, the threat of receiving infected files from a Mac user is almost non-existent, compared to the threats from other sources.
 
Only those Windows users who are foolish enough to run Windows without AV protection. It's not a Mac user's responsibility to protect Windows users. Each user has the responsibility to protect their own computer. If a Windows user is running without AV protection, the threat of receiving infected files from a Mac user is almost non-existent, compared to the threats from other sources.

I totally agree; the Mac user is responsible for his Mac and the Window's users is responsible for his machine.

As for threats, well, a virus is a virus. Everyone uses email and email viruses do not care whose computer they are mailed to. I have to say its been fairly quiet on my computer lately. I haven't detected a virus for a month or so.
 
A quick comment for the OP; you don't need the antivirus, especially with your system. No one is going to make new viruses for an outdated architecture, especially when there are more Intel Macs in regular use.
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.