Free Republic
Browse · Search
News/Activism
Topics · Post Article

To: dayglored
I wasn't SPECIFICALLY talking about Adware on Mac operating systems. I should have made this clear initially. The CERT and ISAC bulletins that I have now are all with respect to commercially sold software products.

I was merely trying to make the point that Mac suffers from its own fair share of problems, and just because the instance of vulnerability rate is low, doesn't mean it's not there, or shouldn't be accounted for.
170 posted on 03/03/2008 5:38:05 AM PST by hiredhand (Check my "about" page. I'm the Prophet of Doom!)
[ Post Reply | Private Reply | To 101 | View Replies ]


To: hiredhand; Swordmaker
> I wasn't SPECIFICALLY talking about Adware on Mac operating systems. I should have made this clear initially. The CERT and ISAC bulletins that I have now are all with respect to commercially sold software products.

Okay, then consider this analogy:

If I buy a car with a cassette player in the dash (an operating system with an API), and I obtain a cassette tape and plug it in (install a commercial application), and the cassette is flawed and jams (the application has a vulnerability), it's damn hard for me to lay that problem at the feet of the manufacturer of the car, or say that "the car has its fair share of problems" because of the flawed cassette. The cassette would have the same problem in any car, any player.

> I was merely trying to make the point that Mac suffers from its own fair share of problems, and just because the instance of vulnerability rate is low, doesn't mean it's not there, or shouldn't be accounted for.

Okay, I'll grant that nothing is perfect.

So where are the OS X exploits? The OS X viruses? The OS X botnets?

There are large money prizes (like $10,000) offered to anyone who can breach an OS X system, and the only way anybody has been able to do it is by "human engineering" -- convincing a live human being, at the console, to give root access. Well, d-uh. No one has been able to do it like it's done on Windows -- with no user interaction required.

Look, I'm not a Mac fanboi -- I'm a System Admin whose biggest daily worry is security. Every vulnerability is of interest and concern to me, regardless of platform. So far, I just don't see anything significant on the Mac side that's actually being exploited. And the vulns reported for the Mac all seem to be in applications, not the OS X operating system itself.

If you have specific evidence to the contrary, other than broadly saying "it's non-zero", I'm all ears. I'll ping Swordmaker on this, too, since he may know of something.

176 posted on 03/03/2008 6:55:31 AM PST by dayglored (Listen, strange women lying in ponds distributing swords is no basis for a system of government!)
[ Post Reply | Private Reply | To 170 | View Replies ]

Free Republic
Browse · Search
News/Activism
Topics · Post Article


FreeRepublic, LLC, PO BOX 9771, FRESNO, CA 93794
FreeRepublic.com is powered by software copyright 2000-2008 John Robinson