backtop


Print 107 comment(s) - last by Smilin.. on Dec 8 at 9:51 AM


Sadly, even Macs need to practice computer safety these days.  (Source: GameSpot)
Macs are not the virus-free playground they once were, says Apple

Most computer users take buying or otherwise obtaining antivirus software protection for granted as part of normal computer maintenance.  However, users of Apple's Macs, while being greatly in the minority compared to PCs for years have most gone with no virus protection.  Apple even supported this belief, through ads indicating that Macs don't get viruses.  And while Apple's software security-related patching rate is among the worst in the industry, for years Apple was mostly right; its computers just didn't get targeted in great numbers by malicious users.

Recently, however, Mac has been building up a slightly larger market share, thanks to multiple months in the number 3 computer retailer spot.  While PCs still greatly outnumber Macs, there are now many more Macs, and that spells trouble for Mac security.  This growing problem is exacerbated by Apple's poor patching as was demonstrated at a recent hacker convention, in which an Apple machine was easily compromised a full day before Linux and Windows machines could be.

Now Apple has recognized this new problem and for the first time is recommending its users install antivirus software.  A little notice popped up on its support website, entitled "Mac OS: Antivirus utilities".  In the page Apple states, "Apple encourages the widespread use of multiple antivirus utilities so that virus programmers have more than one application to circumvent, thus making the whole virus writing process more difficult."

Apple goes on to suggest three products -- Intego VirusBarrier X5 and Symantec Norton Anti-Virus 11 for Macintosh, both available from the Apple Online Store, and McAfee VirusScan for Mac.  Just three months ago Brian Krebs, who first noticed the notice and reported on it in Washington Post, bought a MacBook and was told by Apple employees that he didn't need antivirus software.

Similarly, Apple ads like this have long indicated that Apple is immune to viruses.

So what caused Apple to change its tune?  One major factor appears to be the rise in non-OS attacks.  While Apple's base OS is relatively secure, many of its programs, both Apple and third party have numerous vulnerabilities; among them Flash and Apple's Safari web browser.  Dave Marcus, director of security research and communications at McAfee states, "Apple is realizing that malware these days is targeting data, and valuable data exists just as much on an OS platform that is a Mac as it does on an OS platform that is Windows."

Apple is likely also conscious of the increasingly strong security from Microsoft, and its possible effect on its own users.  With Microsoft beefing up its patching system, adding more OS security layers, and offering free antivirus and malware protection for Windows Vista in mid-2009, hackers may turn to easier hijack Mac computers as a source of bots for botnets or other malicious schemes.

One type of malicious program Apple is particularly vulnerable to is password-stealing Trojans.  Explains Mr. Marcus, "The malware we see today is Trojans, password-stealing Trojans," Marcus said. "They are little apps that are dropped onto the machine to do something. They don't infect files and copy themselves. They are looking for specific information and they send that information somewhere else."

Several such Trojans have popped up, such as the AppleScript.THT Trojan, and another one that targeted Mac users searching pornographic sites.

Apple also has to worry about its adoptees -- Microsoft Office for Mac and Firefox for Mac, both popular targets of exploits.

While some, particularly Mac users may find Apple's new announcement surprising, Mr. Marcus says at the end of the day, it is merely an acknowledgment of reality.  He continues, "At the end of the day, they're (Apple is) advising people to be safe and take precautions.  That's a prudent thing to tell people in Web 2.0 world."



Comments     Threshold


This article is over a month old, voting and posting comments is disabled

Antivirus is a scam and a waste of time
By mmagliaro on 12/2/2008 11:11:52 AM , Rating: 5
Yes, I am a die-hard Mac owner, and also a professional software developer who writes code for Windows machines all day. So I don't harbor these ridiculous religious affiliations. I use both. I like Macs better.
But...
I NEVER, EVER, have installed or used any anti-virus product on either one, and I never will. They are such a waste of system resources and time! Self-discipline. That's the key. Stop installing garbage applications, clicking on whatever the heck random junk goes by you on a web page, and stop opening weird emails. For 10 solid years of using Windows and Mac machines connected to the internet every day, I have gotten a virus exactly one time, and it was because my whole company network got infiltrated because of some idiot using Internet Explorer. And guess what? All the virus products we had did NOT notice that the virus was present. And they couldn't get rid of it either. I had to do it manually by digging through .exe files and the registry.

Like I said. WASTE OF TIME. By the time Norton, or MacAfee, or AVG are updated to recognize or protect you, you are already screwed. Look out for yourself, and stop depending on these things. They don't work.

Oh, that, and NEVER EVER use Internet Explorer or Outlook. But that's another story.




RE: Antivirus is a scam and a waste of time
By TomZ on 12/2/2008 11:40:06 AM , Rating: 5
quote:
Oh, that, and NEVER EVER use Internet Explorer or Outlook. But that's another story.

I've used IE and Outlook for many years and never received even a single virus infection. So applying your own logic, avoiding these programs for fear of viruses is nonsense.

Actually, I think using these programs - not avoiding them - is probably better to help avoid viruses. For example, IE7 has good security features (e.g., Protected Mode, anti-Phishing filter, ActiveX controls run in separate process) and Outlook blocks access to attachments that are typically used to e-mail viruses. Security by obscurity is not security at all.


RE: Antivirus is a scam and a waste of time
By theapparition on 12/2/2008 11:52:05 AM , Rating: 2
I'll agree with you there. I've never once got a virus or adware in all my years using PC's and internet explorer or outlook.

Maybe it's because I don't spend every waking moment looking for warez or porn, but I think the values of most AV programs are overrated at best.


By jeff834 on 12/2/2008 10:22:07 PM , Rating: 2
Wow, warez. Haven't heard that term in a long time. The kids are calling them torrents these days. Not even torrentz lol.


RE: Antivirus is a scam and a waste of time
By AssBall on 12/2/2008 12:04:01 PM , Rating: 1
I agree completely. 50$ a year to make your computer slower.... brilliant. Windows security updates solve most of any virus issues alone.

10+ years ago there was such a huge scare and proliferation of viruses that IT people smartened up and wrote more secure code. Since then Norton and McAfee have been riding the wave of morons that bought into all the hype and disinformation (made me think of Swordfish, which was one of the dumbest movies ever, BTW).

Are viruses and security a huge concern for companies? You bet your ass. This is a big reason why we have IT departments now for even small companies.

For the home user though... well I guess (wish) they were just a little bit more educated and/or responsible. How can one crap all over Windows defender and refrain from pointing fingers at the rediculous limitations a 3rd party antivirus application throws down on your system? In the end the average person understands NEITHER.

But this doesn't stop people from operating a vehicle without having a clue about physics or blood alcohol imparement. This is why highways are regulated. Do not misunderstand, I do not like regulation of any kind in general. However, with more retards and assholes online every day, I think more and more that perhaps some form of regulation wouldn't be such a bad idea. The problem I see is that any regulation(s) will be formulated by those same retards and assholes.

More thoughts?


By CrazyBernie on 12/6/2008 10:12:38 PM , Rating: 2
I use AVG. It doesn't bog down my system, and it's free. At the rate that viruses have been proliferating it's better to be safe than sorry.

I equate it to the people who drive around with no car insurance insisting that they'll never get into an accident because they're "safe" drivers.


By SuperFly03 on 12/2/2008 12:07:22 PM , Rating: 2
Well said. I also concur with your view point about security and self-discipline.


By King of Heroes on 12/2/2008 12:20:23 PM , Rating: 2
I agree with you here. I've never had a virus infection (that I was aware of). Always use a web interface when checking email, never download attachments from people you don't know, and never go to suspicious websites (and yes, its easy to spot a suspicious website). Its amazing how such simple steps can be missed by most people.

Now, admittedly, I still run an anti-virus despite this (NOD32 is awesome). I just feel safer when its there, even though I've never had to actually use it.

P.S.: And always run Firefox + NoScript!


By Reclaimer77 on 12/3/2008 1:53:33 AM , Rating: 3
Wow proof that code monkeys can still be ignorant.

quote:
I NEVER, EVER, have installed or used any anti-virus product on either one, and I never will.


Stupid, stupid, and more stupid. Some ppl claim they never use condoms either, that doesn't mean they are smart because they think they can spot the " clean " women.

quote:
Self-discipline. That's the key. Stop installing garbage applications, clicking on whatever the heck random junk goes by you on a web page, and stop opening weird emails.


Even if you do none of the above, you could STILL be infected.

quote:
For 10 solid years of using Windows and Mac machines connected to the internet every day, I have gotten a virus exactly one time, and it was because my whole company network got infiltrated because of some idiot using Internet Explorer.


I think the idiot here if your companies IT head. Internet Explorer is only the most used browser on the planet. Sheesh how DARE that " idiot " use it and intentionally infect your company ! /sarcasm.

And how the hell do you know you never had a virus/worm/trojan/malware etc etc if you never run security software in the first place ? You sound like the type of idiot who has his machine running 8000 bots and never knows it. On behalf of the Internet community, thanks pal, we appreciate it...

Sounds to me like your entire company has the same fast and loose approach to computer security as you personally practice. Let me get this straight, we're supposed to blame the end user's choice of browser and NOT the IT department for poorly patched and protected work machines ? Uhhh, riiight.

quote:
. And guess what? All the virus products we had did NOT notice that the virus was present. And they couldn't get rid of it either.


And guess what ? It wasn't a virus. It was a trojan or malware. I'm taking a shot in the dark here, but given your proclivity for being slack, you probably relied on some crappy " all in one " security suite instead of doing some research and getting the best solution for EACH type of threat.

Virus scanners work on viruses. Trojans and malware specialize in being hard to clean and kill. Even if the virus scan cleans the infected files, they aren't set up to find and quarantine the cause and the machines become infected again.

quote:
I had to do it manually by digging through .exe files and the registry.


*smacks forehead* No, you didn't HAVE to do that. Your illogical fear and ignorance of security products is why you HAD to do that. Five minutes, tops, of Google searching would have rendered you the perfect app or cleaning utility to fix the problem for GOOD.


“And I don't know why [Apple is] acting like it’s superior. I don't even get it. What are they trying to say?” -- Bill Gates on the Mac ads

Related Articles
Apple's Safari Security Woes
March 31, 2008, 12:22 PM
Microsoft Gets Cozy With The iPhone
March 26, 2008, 2:39 PM
MacBooks Get Hacked Within 60 Seconds
August 4, 2006, 12:46 PM













botimage
Copyright 2014 DailyTech LLC. - RSS Feed | Advertise | About Us | Ethics | FAQ | Terms, Conditions & Privacy Information | Kristopher Kubicki