Free Republic
Browse · Search
News/Activism
Topics · Post Article

Skip to comments.

Apple Mythology and Desktop Security
Yahoo News ^ | Thu Apr 21, 2:03 PM ET | Paul Murphy, cio-today.com

Posted on 04/21/2005 8:04:29 PM PDT by coon2000

Two weeks ago theregister.co.uk summarized an analysis (done by Quocirca) of reader response to questions on Linux desktop migration.

To no one's surprise, the study found that business people cite the opportunity to sidestep the insecurity of the Microsoft (Nasdaq: MSFT - news) PC, not cost savings, as the primary reason for considering desktop Linux. Most respondents agreed, furthermore, that the high cost of matching Windows applications, particularly Microsoft Office and custom applications, is the greatest barrier to change.

What's most interesting about this is what it reveals about the respondents: specifically that they're so focused on fighting Microsoft's alligators that they don't see the hardware side of their security problems and are blind to the BSD-based Mac OS X option for running Microsoft Office without Microsoft Windows.

Software and Hardware Vulnerabilities

At present, attacks on Microsoft's Windows products are generally drawn from a different population of possible attacks than those on Unix variants such as BSD, Linux and Solaris. From a practical perspective, the key difference is that attacks on Wintel tend to have two parts: A software vulnerability is exploited to give a remote attacker access to the x86 hardware and that access is then used to gain control of the machine.

In contrast, attacks on Unix generally require some form of initial legal access to the machine and focus on finding software ways to upgrade priveleges illegally.

Consider, for example, CAN-2004-1134 in the NIST vulnerabilities database:

Summary: Buffer overflow in the Microsoft W3Who ISAPI (w3who.dll) allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long query string.

Published Before: 1/10/2005

Severity: High

The vulnerability exists in Microsoft's code, but the exploit depends on the rigid stack-order execution and limited page protection inherent in the x86 architecture. If Windows ran on Risc, that vulnerability would still exist, but it would be a non-issue because the exploit opportunity would be more theoretical than practical.

Linux and open-source applications are thought to have far fewer software vulnerabilities than Microsoft's products, but Linux on Intel (Nasdaq: INTC - news) is susceptible to the same kind of attacks as those now predominantly affecting Wintel users. For real long-term security improvements, therefore, the right answer is to look at Linux, or any other Unix, on non x86 hardware.

One such option is provided by Apple's (Nasdaq: AAPL - news) BSD-based products on the PowerPC-derived G4 and G5 CPUs. Linus Torvalds, for example, apparently now runs Linux on a Mac G5 and there are several Linux distributions for this hardware -- all of which are immune to the typical x86-oriented exploit.

Power of Attraction

In addition, Apple's Mac OS X has several compelling attractions of its own. First, it's the most advanced and user-friendly graphical user environment in commercial use. It offers thousands of commercial applications, including Microsoft Office. And it runs nearly all open-source applications.

Also, Macs are less expensive. That's not what you see in the PC press, but it's reality. The explanation for that, besides dishonesty on the part of PC reviewers going as far back as 1984, is primarily that Apple's product cycles resemble those of other consumer electronics manufacturers, not those of the PC industry.

Thus, Apple's products have generally been considerably less expensive and faster than PCs at the beginning of the Apple product cycle, and comparably slower and more expensive than PCs at the end. That probably ended, however, in the late 1990s when the combination of decreasing hardware prices with increasing Microsoft licensing cost reduced the pricing advantage enjoyed by PCs introduced at the end of an Apple product cycle.

Notice that in assessing relative price and performance, both aging and software confuse the issue. Macs run more functional software and have a much longer useful life. As a result, the Macs that PC users see most often -- in schools or at grandma's house -- tend to be significantly older and slower than the PCs people compare them to because Wintel product churn means that a three-year-old PC is a museum piece, while a six-year-old iMac running OS 9 is likely still to be in use.

Apples to Apples?

It's possible, however, to take both aging and software out of the comparison by looking at situations in which both groups use the same software on the latest hardware they can afford. Check out supercomputer performance data, for example, where everybody runs the same applications under Unix, and you'll see that a dual G5 Xserve at 2.3 GHz makes about twice the cluster contribution offered by dual Xeons at 3.2 GHz.

Although Apple is expected to announce further speed bumps (and video upgrades to the 128-MB Radeon 9600) several weeks after you read this, prices are currently well below comparably configured Dell (Nasdaq: DELL - news) gear, but the difference is narrowing as PC manufacturers close out the 3.X-GHz era and pre-announce their second new generation since Apple's first G5 desktop was introduced in June of 2003.

For example, using pricing and configuration data from the Dell and Apple Web sites on April 10, 2005, Dell's 810 laptop is now about $300 more than Apple's midrange; Dell's Optiplex GX280 is about $77 more than Apple's midrange iMac (but the 670 Precision workstation remains more than $1,200 more expensive than the dual-G5, 2-GB PowerMac); and Dell's 2850 dual Xeon server is about $1,700 more than the midrange on Apple's dual G5, Xserve/RAID combination.

Faster and More Capable

Although the Apple products are generally a bit faster and more multimedia capable than their PC counterparts, the most important differences aren't in things like memory and processor speed, but in design, software and licensing.

The iMac is the first genuinely ultrathin desktop, the laptop a second-generation Titanium and the server combination highly optimized for rendering, multimedia and Web serving. All combine BSD Unix with the Mac OS X supershell, and not only do Apple's licensing policies on the server not restrict you to 25 clients, but the use of BSD Unix means that you don't have to buy separate machines for each major application or suite.

In other words, if security concerns are your most important driver for desktop change, and Microsoft Office compatibility is your most significant barrier, then switching to Macs actually offers you the best of all possible worlds. Microsoft Office on Unix/Risc with a better GUI, longer product life, some cash savings and a performance bonus thrown in.

Paul Murphy, a CIO Today columnist, wrote and published The Unix Guide to Defenestration. Murphy is a 20-year veteran of the I.T. consulting industry, specializing in Unix and Unix-related management issues. He maintains a discussion forum for his column on Winface.com.


TOPICS: Business/Economy; Technical
KEYWORDS: apple; getamac; linux; microsoft; unix
Navigation: use the links below to view more comments.
first 1-2021-31 next last

1 posted on 04/21/2005 8:04:34 PM PDT by coon2000
[ Post Reply | Private Reply | View Replies]

To: Swordmaker

MacPing!


2 posted on 04/21/2005 8:06:22 PM PDT by Spktyr (Overwhelmingly superior firepower and the willingness to use it is the only proven peace solution.)
[ Post Reply | Private Reply | To 1 | View Replies]

To: coon2000

Linux on a Mac, makes sense, macs are cooler than PC's.
Mac Guy in my youth, PC guy now. Was much cooler in my youth.


3 posted on 04/21/2005 8:10:11 PM PDT by HKTechBoy (There is no gray area in Life)
[ Post Reply | Private Reply | To 1 | View Replies]

To: HKTechBoy

Come away from the Dark Side of the Force.... it's much better in the light....

(Mac OS X is BSD, not Linux).


4 posted on 04/21/2005 8:12:39 PM PDT by Spktyr (Overwhelmingly superior firepower and the willingness to use it is the only proven peace solution.)
[ Post Reply | Private Reply | To 3 | View Replies]

To: Spktyr

When I get a couple of extra bucks, I'm going to buy the MacMini, or a 21-inch flatscreen.

The good thing about HK is tech stuff is so much cheaper over here (and the software is really cheap :) )


5 posted on 04/21/2005 8:17:53 PM PDT by HKTechBoy (There is no gray area in Life)
[ Post Reply | Private Reply | To 4 | View Replies]

To: coon2000
Please understand I like Apple and used to install and support many networks of Mac, NeXT, and PCs.

This article severely overstates the case for the Apple in the corporate environment.

A big part of supporting systems is the ability to centrally administer your computers. Additionally, auditing and the availability to access high-end business software are other big necessities. In short, these three are sorely lacking on Apple systems.

However, to Apple's advantage, you have an easier-to-use environment and the ability to run Windows software on Apple systems through emulators. Unfortunately, Windows XP is almost as easy to use as Mac OS X and emulation is a terribly slow approach raft with its own support problems.

In the end, Apple could only be well-suited for an environment of graphic designers or the like, with the premier programs only available on OS X. Such users enjoy the environment Apple has created over the years and have been conditioned to use them while in school (using the same applications then).

Ironically, the same reason holds as to why Windows is better for almost everyone else. We learn on PCs for the vast majority of other programs.

Apple has a long way to go before they can crack the installed base of Windows machines in the corporate environment. I hope they do, but it is not an appropriate choice any time soon.
6 posted on 04/21/2005 8:21:22 PM PDT by ConservativeMind
[ Post Reply | Private Reply | To 1 | View Replies]

To: ConservativeMind
I meant to say "rife" with its own support problems. Sheesh!
7 posted on 04/21/2005 8:23:38 PM PDT by ConservativeMind
[ Post Reply | Private Reply | To 6 | View Replies]

To: ConservativeMind

What about Apple clones to increase market share? I seem to recall an Apple clone in the early 1990s.


8 posted on 04/21/2005 8:23:58 PM PDT by Army Air Corps (I am sick of brownshirts in black robes)
[ Post Reply | Private Reply | To 6 | View Replies]

To: Army Air Corps

YEah PowerPC's. Still didnt help


9 posted on 04/21/2005 8:26:55 PM PDT by aft_lizard (This space waiting for a post election epiphany)
[ Post Reply | Private Reply | To 8 | View Replies]

To: HKTechBoy
(and the software is really cheap :) )

Lemme guess... The smiley face is meant to say, "cheap" as in "pirated"?

10 posted on 04/21/2005 8:32:01 PM PDT by newgeezer (Just my opinion, of course. Your mileage may vary.)
[ Post Reply | Private Reply | To 5 | View Replies]

To: Army Air Corps
I remember the licensing opportunities Apple once allowed. However, should they undertake this again, it will still be a much harder sell then getting Linux on the corporate desktop--and that is essentially free!

I love OS X. It is an upgraded version of the NeXT operating system and environment ("NeXTStep" then as "OpenStep") which I dearly loved. But the dearth of software will continue to hobble OS X regardless of hardware. Unfortunately, there's just so little incentive to rewrite an application for 3-5% of the total market (and probably less than 1% of the business market).

Linux has a much better case going for it, but it is not nearly as polished. But "free" and having an appeal to much open source-type software means that in time, freeware will allow functionality that software companies cannot otherwise justify investment in.
11 posted on 04/21/2005 8:33:50 PM PDT by ConservativeMind
[ Post Reply | Private Reply | To 8 | View Replies]

To: aft_lizard

Weren't the Power PCs still Macs but with IBM PowerPC processors?


12 posted on 04/21/2005 8:34:28 PM PDT by Army Air Corps (I am sick of brownshirts in black robes)
[ Post Reply | Private Reply | To 9 | View Replies]

To: ConservativeMind

Yep. Windows is a business machine. Mac is a fun machine. Windows will manage an enterprise network. Mac will not.


13 posted on 04/21/2005 8:38:46 PM PDT by Musket
[ Post Reply | Private Reply | To 6 | View Replies]

To: aft_lizard

BTW, I was speaking of the machine (IIRC) called Kangaroo. It was a laptop that looked like a powerbook and was offered as a Mac clone.


14 posted on 04/21/2005 8:39:18 PM PDT by Army Air Corps (I am sick of brownshirts in black robes)
[ Post Reply | Private Reply | To 9 | View Replies]

To: ConservativeMind
...Apple has a long way to go before they can crack the installed base of Windows machines in the corporate environment. I hope they do, but it is not an appropriate choice any time soon.

I hope they do too, but I'd prefer computers like those on Star Trek. Nobody makes them and therefore they run nearly perfectly and are only susceptible to attacks from more highly advanced civilizations and cheese. Although, the cheese attack is more an attack on the hardware, it still causes glitches in the software.

15 posted on 04/21/2005 8:40:05 PM PDT by Duke Nukum (King had to write, to sing the song of Gan. And I had to read. How else could Roland find the Tower?)
[ Post Reply | Private Reply | To 6 | View Replies]

To: coon2000

Great Mac luvin' article -- thanks


16 posted on 04/21/2005 9:02:04 PM PDT by Californiajones ("The apprehension of beauty is the cure for apathy" - Thomas Aquinas)
[ Post Reply | Private Reply | To 1 | View Replies]

To: Army Air Corps

Macs use PowerPC chips.


17 posted on 04/21/2005 9:17:48 PM PDT by cabojoe
[ Post Reply | Private Reply | To 12 | View Replies]

To: cabojoe

All of them? I thought that some were still using Motorola chips.


18 posted on 04/21/2005 9:19:52 PM PDT by Army Air Corps (I am sick of brownshirts in black robes)
[ Post Reply | Private Reply | To 17 | View Replies]

To: Army Air Corps

The mini and the G5 for sure, that's all I googled. :)


19 posted on 04/21/2005 9:24:32 PM PDT by cabojoe
[ Post Reply | Private Reply | To 18 | View Replies]

To: cabojoe

Okay, no problem.


20 posted on 04/21/2005 9:25:38 PM PDT by Army Air Corps (I am sick of brownshirts in black robes)
[ Post Reply | Private Reply | To 19 | View Replies]


Navigation: use the links below to view more comments.
first 1-2021-31 next last

Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.

Free Republic
Browse · Search
News/Activism
Topics · Post Article

FreeRepublic, LLC, PO BOX 9771, FRESNO, CA 93794
FreeRepublic.com is powered by software copyright 2000-2008 John Robinson