Free Republic
Browse · Search
General/Chat
Topics · Post Article

Skip to comments.

Hacker: Windows More Secure Than Mac OS X
Tom's Hardware ^ | September 21, 2009 | Marcus Yam

Posted on 09/22/2009 6:08:18 AM PDT by Sudetenland

Hackers just like the PC more.

Regardless of which side you're on (though as a true computing enthusiast, you shouldn't be taking sides), you've heard the arguments back and forth on the which operating system is truly safer – Mac OS X or Windows.

It is of the opinion of Charlie Miller, a well known Mac security guru, that even Snow Leopard, the latest version of Mac OS X, isn't as safe as Windows.

One key point is that Snow Leopard still doesn't have ASLR, or address space layout randomization, which randomly arranges the position of key data making it harder for hackers to target for exploits.

Miller said to TechWorld that Apple didn't change the ASLR from 10.5 to 10.6: "Apple didn't change anything. It's the exact same ASLR as in Leopard, which means it's not very good."

Apple didn’t completely missed the chance to tighten up security in Snow Leopard though, as the new QuickTime solves a lot of the issues that Mac OS X had before.

"Apple rewrote a bunch of QuickTime," said Miller, "which was really smart, since it's been the source of lots of bugs in the past."

One thing that Snow Leopard did adapt, which Windows has had since XP SP2, is DEP (data execution prevention). With DEP, buffer overflow attacks are much harder to execute.

Despite Miller's opinion that Windows is the more secure OS, the large install based of Microsoft-based systems make them a much more attractive target for hackers. Still, Miller would like to see security on all platforms.

"Snow Leopard's more secure than Leopard, but it's not as secure as Vista or Windows 7," he said. "When Apple has both [in place], that's when I'll stop complaining about Apple's security."

Source : Tom's Hardware US


TOPICS: Computers/Internet; Hobbies
KEYWORDS: apple; ilovebillgates; iwanthim; iwanthimbad; microsoftfanboys; snowleopard; windows; windows7
Navigation: use the links below to view more comments.
first previous 1-2021-4041-6061-80 ... 101-107 next last
To: Tarpon
40 years of experience of OS and computer design is my guide”

On the internet, even a dog is a King.
Now why don't you show us any scientific studies and papers you have actually written on computer security eh?And no, sheer bomb throwing is not good enough.

While as I said, Windows 7 is better, it’s still not good enough.”

No good enough according to who? You?
Don't make me laugh.
It's going top be good enough for the 90% of computer buyers out there, and that is what counts.
Not to mention studies that are coming out would suggest that Windows 7 IS in fact more secure than the Mac.
Get used to that idea and it won't hurt so much ok?

41 posted on 09/22/2009 8:00:18 AM PDT by SmokingJoe
[ Post Reply | Private Reply | To 31 | View Replies]

To: SmokingJoe
And oh, Windows runs all the essential apps that I need, plus every single AAA game out there.
You can't say the same about Linux.

I am aware that *nix systems have started to be targeted. I never said that they are immune. In fact, if you search some here on FR, you'll see my opinion that people and organizations should have a mix of OS/systems in order to minimize any particular security threat.

I am not a gamer. The biggest game I play is Diablo II. And it runs under Linux. I play some small puzzle-type games as well. They also run under Linux. There are very few these days that won't run under Linux if you know what you are doing. My kids play games. They also only run Linux. There are games out there that don't require you to pay $50 a shot--and they are just as fun.

My advice to people considering the switch is to take inventory of the programs run, determine if any can't run under the OS they are considering, and decide if they can live without those.

If they can't--don't switch. Regardless of my tagline, I tell people to run the OS that runs the programs they can't live without.

42 posted on 09/22/2009 8:01:21 AM PDT by ShadowAce (Linux -- The Ultimate Windows Service Pack)
[ Post Reply | Private Reply | To 39 | View Replies]

To: Sudetenland
Wanna know why the "market share" argument doesn't hold up? Because the world's Internet servers (DNS, etc) run a form of *nix. Whether it's Unix, Linux, or BSD, a virus on those would take out hundreds of millions, if not billions, of people.

The desktop is for pikers.

43 posted on 09/22/2009 8:03:25 AM PDT by ShadowAce (Linux -- The Ultimate Windows Service Pack)
[ Post Reply | Private Reply | To 40 | View Replies]

To: SmokingJoe

LOL ...


44 posted on 09/22/2009 8:06:54 AM PDT by Tarpon (The Obama's plan -- Slavery by debt so large it can never be repaid...)
[ Post Reply | Private Reply | To 41 | View Replies]

To: ~Kim4VRWC's~; 1234; 50mm; 6SJ7; Abundy; Action-America; acoulterfan; Aliska; altair; ...
Another reposting of the FUD article quoting Charlie Miller and his claims... PING!


Mac Ping!

If you want on or off the Mac Ping List, Freepmail me.

45 posted on 09/22/2009 8:14:46 AM PDT by Swordmaker (Remember, the proper pronunciation of IE is "AAAAIIIIIEEEEEEE!)
[ Post Reply | Private Reply | To 1 | View Replies]

To: ShadowAce
Is it? In the 15 years I've been running Linux, I've never:

  • * Had a virus
  • * Had a trojan
  • * Had to clone my drive in case of malware
  • * Run anti-virus
  • * Cleaned up the drive (de-fragmented it)

I've made backups of some directories due to concern about HW failure, but that's it.

Back when i had SuSE Professional 9.2, i installed AVG for Linux. i was pleasantly surprised to find out that i could run it on my WINDOWS XP hard drive (dual boot) from Linux.

i did once find a virus hiding in my Firefox cache. It was huddled in a corner, shivering, lost, looking for the registry.

Of course, i terminated it with extreme prejudice, after dissecting it with emacs to look at the function calls.

46 posted on 09/22/2009 8:15:32 AM PDT by Calvinist_Dark_Lord ((I have come here to kick @$$ and chew bubblegum...and I'm all outta bubblegum! ~Roddy Piper))
[ Post Reply | Private Reply | To 27 | View Replies]

To: TomGuy
Watch out for Mac-sters jumping out of windows from high places.

Thank goodness it isn't true!

47 posted on 09/22/2009 8:17:12 AM PDT by Swordmaker (Remember, the proper pronunciation of IE is "AAAAIIIIIEEEEEEE!)
[ Post Reply | Private Reply | To 14 | View Replies]

To: Sudetenland

Apple doesn’t have one feature that, if an attacker gains access to the system helps him better exploit it.

Except OS X is harder to gain access to in the first place.

Randomization is a good feature, and I wish OS X had it, but it’s just one part of a defense in depth. To claim an OS is less secure in the first place because it doesn’t have the feature is ridiculous. A better overall security architecture is far more important.


48 posted on 09/22/2009 8:22:01 AM PDT by antiRepublicrat
[ Post Reply | Private Reply | To 1 | View Replies]

To: Sudetenland
Another Mac myth busted.

Snow Leopard = Snow Job

Not quite. Miller ignores Apple's different approach to system security. Miller for some reason prefers the Windows ASLR and DEP to the methods that Apple has chosen to use. First of all, Apple DOES use address space layout randomization for their dynamic libraries and system command locations. Miller also totally ignores the fact that data stacks and the heap are NON-EXECUTABLE memory spaces in OSX so his worry about buffer overflows is over wrought.

The point still must be made that after eight years of trying, no one has made a successful self-duplicating, self-transmitting, self-installing malicious virus for Mac OSX. The number of viruses in the wild for OSX is still ZERO. There are fewer than a dozen known Trojans and Apple has included an anti-Trojan method into the OS at the system level in OSX Snow Leopard that recognizes the signatures of known Trojans on download and warns the user that they have fallen for the social engineering and are downloading a malicious app.

49 posted on 09/22/2009 8:25:04 AM PDT by Swordmaker (Remember, the proper pronunciation of IE is "AAAAIIIIIEEEEEEE!)
[ Post Reply | Private Reply | To 1 | View Replies]

To: SmokingJoe
Who you gonna believe, scientific studies of security issues in Vista/Win 7 versus the Mac, or yet another spouting of anti-Microsoft, open source propaganda from some anonymous bomb thrower on the internet?

Windows 7 is nothing more than Windows NT
with this seasons shade of lipstick.

As was Vista.


50 posted on 09/22/2009 8:25:20 AM PDT by Uri’el-2012 (Psalm 119:174 I long for Your salvation, YHvH, Your law is my delight.)
[ Post Reply | Private Reply | To 20 | View Replies]

To: Tarpon
The savior for windows is the new 64 bit NX(no execute) bit technology in the CPU chip, separating out code and data, so the data cannot execute. This should do away with over 95% of the known windows viruses. Script kiddies are done.

Mac OSX has always been using the NX technology, all the way back to the PowerPCs, which had it built in.

51 posted on 09/22/2009 8:26:56 AM PDT by Swordmaker (Remember, the proper pronunciation of IE is "AAAAIIIIIEEEEEEE!)
[ Post Reply | Private Reply | To 17 | View Replies]

To: Sudetenland

If I go home tonight and my Mac is totally and irreversably infected it will be the first time in 20 years of using Mac’s that I have ever had the problem that has plagued Winbloze users on a daily basis for the same period of time and that puts me/Mac users way ahead.


52 posted on 09/22/2009 8:29:24 AM PDT by cowboyway ("The beauty of the Second Amendment is you won't need it until they try to take it away"--Jefferson)
[ Post Reply | Private Reply | To 1 | View Replies]

To: ShadowAce

I have Windows on my Mac. I consider it a “program” for playing games. In that respect, my Mac does everything a PC can and more.


53 posted on 09/22/2009 8:30:10 AM PDT by Wright Wing
[ Post Reply | Private Reply | To 42 | View Replies]

To: ShadowAce

First and foremost, I am a computer person.

When I was doing Unix builds, I was a Unix guy. I worked with PC’s because most people used them to interface with the Unix boxes.

Now that I work in a Windows environment, I’m a Windows guy.

If I worked in a Mac environment, I’d be Mac guy.

My basic interest is computers and maintaining whatever systems I’m working on.

The environment I enjoyed most was a Windows/Linux/OpenVMS network.

Now there was a challenge, maintaining connectivity between those systems.

Which is why I’ll never get the Linux/Windows/Mac sniping.

They’re all good tools, and, like anything else built by man, they have their strengths and weaknesses.


54 posted on 09/22/2009 8:30:27 AM PDT by stylin_geek (Greed and envy is used by our political class to exploit the rich and poor.)
[ Post Reply | Private Reply | To 43 | View Replies]

To: UriÂ’el-2012
“Windows 7 is nothing more than Windows NT
with this seasons shade of lipstick.
As was Vista.”

Utter rubbish!

55 posted on 09/22/2009 8:34:28 AM PDT by SmokingJoe
[ Post Reply | Private Reply | To 50 | View Replies]

To: Sudetenland

All you gushing fan girls crack me up - Just grow up and use what you want.

“They want to deceive their people first because now they are in a very shabby situation,” - Baghdad Bob


56 posted on 09/22/2009 8:35:14 AM PDT by Patrsup (To stubborn to change now)
[ Post Reply | Private Reply | To 1 | View Replies]

To: Swordmaker

Yep, most real systems have done that for years. It was only Windows that didn’t which is why windows suffered from all the viruses. It is a hardware MMU issue.

I am not sure where MS stands on backporting NX to older 32 bit OSes, I do know they support it in Windows 7 64 bit. Vista not sure. I was told by MS they were backporting to XP the support, but never tested it. I plan on recommending people use only Windows 7 64 bit, I feel it’s the best for new hardware for windows users.

But the usual new release push is on with MS propaganda against the *NIXes.

Most newer 64 bit CPUs from Intel and AMD have NX capability, the OS software still must enable it for functionality. With older chips you need to check the vendor site. It’s probably one of the most significant things that you can do to prevent viruses. With Intel chips, Apple hasn’t been 100% with their support I was told — Some Intel chips Apple chose did not have NX capability. The *NIXes usually did software emulation of the NX capability to try and help prevent errors, but not sure of MacOS.

But not a Mac user here, cost is the only reason, windows and Linux for me.


57 posted on 09/22/2009 8:37:26 AM PDT by Tarpon (The Obama's plan -- Slavery by debt so large it can never be repaid...)
[ Post Reply | Private Reply | To 51 | View Replies]

To: Tarpon
With Intel chips, Apple hasn’t been 100% with their support I was told — Some Intel chips Apple chose did not have NX capability.

This worry was discussed heavily when Apple switched from PowerPC to Intel... but it was not a problem. Most of the later discussion came on the Hackintosh websites where PC owners were hacking their generic boxes to run OSX and many of their 32bit only processors did not include it. The fully 64 bit capable Intel processors Apple uses did include the NX switch.

58 posted on 09/22/2009 8:42:19 AM PDT by Swordmaker (Remember, the proper pronunciation of IE is "AAAAIIIIIEEEEEEE!)
[ Post Reply | Private Reply | To 57 | View Replies]

To: SmokingJoe
U-2012>“Windows 7 is nothing more than Windows NT
with this seasons shade of lipstick.
As was Vista.”

Utter rubbish!

Any IT on your CV ?

Either you do not know how to follow the link
provided or you are functionally illiterate.


59 posted on 09/22/2009 8:51:05 AM PDT by Uri’el-2012 (Psalm 119:174 I long for Your salvation, YHvH, Your law is my delight.)
[ Post Reply | Private Reply | To 55 | View Replies]

To: Calvinist_Dark_Lord
i did once find a virus hiding in my Firefox cache. It was huddled in a corner, shivering, lost, looking for the registry.

Now that's just funny.

60 posted on 09/22/2009 8:52:17 AM PDT by zeugma (Life is short.)
[ Post Reply | Private Reply | To 46 | View Replies]


Navigation: use the links below to view more comments.
first previous 1-2021-4041-6061-80 ... 101-107 next last

Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.

Free Republic
Browse · Search
General/Chat
Topics · Post Article

FreeRepublic, LLC, PO BOX 9771, FRESNO, CA 93794
FreeRepublic.com is powered by software copyright 2000-2008 John Robinson