main

Security expert says Mac users may have a false sense of sec

Steven Parker   on 30 December 2005 - 11:11 · 23 comments & 2690 views

Advertisement (Why?)
Spyware and keystroke loggers have often been thought of as a Windows only problem, but Nicholas Raba, CEO of SecureMac.com and co-author of Maximum Security says many Apple Macintosh users may have a false sense of security. SecureMac has released MacScan which detects and removes Macintosh spyware, remote administration utilities and keystroke loggers. In a telephone interview, Raba talked to us about current and future Macintosh spyware and virus threats.

Raba hails from Las Vegas, Nevada and has been programming on the Macintosh since the Mac Classic days. He has been involved in the computer security for several years and is probably more well-known for his hacker handle "Freaky" than his real name. Raba has authored Mac Security in 2004 and co-authored the 4th edition of Maximum Security.
 
View: Full Article @ TG Daily

Post a comment · Send to friend Comments · There are 23 additional comments
#1 bobbba on 30 Dec 2005 - 12:04
Nice objective article then:

State that Macs may not be secure and oh, by the way I've released a Mac anti spyware product, please buy it...
(3 replies) #2 digitalslacker on 30 Dec 2005 - 16:34
...why do people insite on using fear to market their products?
I'm going to worry about mac security when there is a valid reason.
#2.1 MrCobra on 31 Dec 2005 - 13:49
I think if Macs had a larger share of the global market than the %2-%5 that there is now, the security issues would be on the rise. Not trying to bash but why would someone try to exploit or compromise a system that has such a small market and user base when it really wouldn't be benificial to do so? Just a thought.
#2.2 Qumahlin on 31 Dec 2005 - 23:31
It has nothing to do with lack of market share. It has to do with the way such things need to be "instaled"

There is no way to get infected on OSX unless you are dumb enough to not wonder why your suddenly being asked for your admin password, and then you are actually dumb enough to type it in.

Even in a buffer overflow situation a install could not happen because you will still be asked for your admin password.

The reason Macs's aren't infected is because Macs do not have a way for a "drive by download" to occur.
#2.3 Ironman273 on 05 Jan 2006 - 00:23
Wait a minute.... I'll admit that I don't know much about Macs (I do plan to get an Intel Mac when they come out so I can doubel boot) but in using my friends powerbook I ran programs downloaded from the web without it asking any passwords.  Why would running any program be any different?
(4 replies) #3 thenewbf on 30 Dec 2005 - 20:00
Microsoft will admit defeat before OS X gets a virus or spyware.
#3.1 Qumahlin on 31 Dec 2005 - 23:27
Um...OSX can have both Virii and Spyware, There is nothing hard about coding a virus/spyware for OSX, it's just how are you going to get the user to willingly install them.

The point is its not really feasible to mass install it like you can on windows systems because anytime something needs to be installed that hooks itself into the system OSX requires you to enter the admin password.

I would recommend you read up on Macs and how exactly they are secure, it has nothing to do with bug free coding

Last edited by Qumahlin on 31 Dec 2005 - 23:32
#3.2 Miran on 03 Jan 2006 - 19:14
No such word as "virii".
#3.3 obsolete_power on 11 Jan 2006 - 14:47
viri is the plural for virus
#3.4 PCyr on 17 Jan 2006 - 04:23
http://en.wikipedia.org/wiki/Viri

"The less frequent variations viri and virii are virtually unknown in edited prose, and no major dictionary recognizes them as alternative forms."
#4 domgrimm on 30 Dec 2005 - 23:55
Haha, great news. Let's get some independent confirmation before believing this...
#5 virtorio on 31 Dec 2005 - 06:01
I'm happy with my false sense of security for the time being.
#6 semaja2 on 31 Dec 2005 - 16:08
well this is possible where as a virus is based on stupid users becuase they would have to enter a adminpassword to run the virus which i think i would find sucpesous, oh btw there would also be adware and that stuff for linux as well its the fact of its harder to get onto a unix os such as macosx or linux
(1 reply) #7 Stunna on 01 Jan 2006 - 17:54
How hard would it be to implement a system like that for windows and would it slow down performance?
#7.1 bobbba on 02 Jan 2006 - 14:01
They are trying to do it with Vista through features such as limited user interent explorer and better support for using only normal user accounts with admin rights only being used when needed. There is a long way to go with it though judging by the look of the current beta imop.
#8 Yvo on 02 Jan 2006 - 17:41
This story was posted on digg.com a few days ago. It was basically slaughtered (by Windows & OS X users) about the credibility.

1. No one knew/knows this guy in the security scene.
2. This guy claims there are dozens of different spyware available, why does Apple to this claim on their website that OS X is spyware free (and so do its many users). The only spyware it currently has (if it even exists) is that from a browser such as Firefox, but if that were the case, then all platforms running Firefox will be vulnerable and it is most likely in the form of an user installed extension.
3. He continues to lie when he says this:
"He adds that proof of concept virus code is already running around the Internet and that a major Mac virus is inevitable."
Let's underline this to make it very clear. There are zero viruses for the Mac OS X. Some guy offered a large amount of sum a few months back.. he has yet to pay out.


Here are some more jolly comments:
http://digg.com/apple/Spyware_Keyloggers_for_Mac_OSX_
#9 MNS on 03 Jan 2006 - 05:43
in case this hasn't become clear, let's beat a dead horse, shall we?

OSX has no viruses or trojans because:
1. it doesn't run as root by default.
2. it's based on a very secure BSD core.
3. and lastly, and certainly the least important reason, the Macs have a smaller market share. malicious programmers simply don't feel the need to waste their efforts on a system that is practically unexploitable AND happens to have a small market share, which even further stops the mass spreading of their viruses because of the first two situations.

i'm a Windows user and i loathe both OSX and Apple, so don't think i'm trolling. just stating some facts that should end OSX/Virii discussions.
(2 replies) #10 evo_spook on 04 Jan 2006 - 13:55
Have you ever used OS or Apple MNS?

I've used Linux, Windows & OSX and I can't recall any off them producing such feeling as to loathe them
What is the reason for your loathing?
#10.1 MNS on 04 Jan 2006 - 15:35
been using the latest version of OSX and OS9.2.2 on several G4s for 4 years now at work (graphic design / print lab). without going into too much details (don't want to steer this thread in the wrong direction) i'm much less productive with them (OS9 doesn't count, since it's a legacy OS.. yeah, "legacy" OS from 1999! good job at phasing that one out Apple!, i find them to be extremely counter-intuitive in the sense that they won't let me do things the way i want to do them, but they force the Apple way on the user.. which is not only frustrating, but very arrogant of them to assume everyone will like their approach towards computing..

secondly, and probably more importantly, the lack of software (especially for specific needs).. i can't believe there's not a decent audio player that gives me the freedom of say, foobar2000 on Windows.. iTunes is usable for a listen-only experience, but it doesn't let me do much else with my music collection.. not to mention, playing different audio formats than AAC/MP3 and the more popular of the bunch.. there are a couple of them rising and i got my eye on them, but in general that is the situation i encounter with the system.. there may be one or two apps for a specific purpose, and usually one is regarded as the absolute savior of that category and the sole reason to use OSX, when in fact it's belittled when compared to similar programs on Windows or Linux..

there are many, many much smaller aspects of the system that bother me to high heaven, mainly UI design.. what if i don't like the damn Apple bar to be on top? what if i want it on the left, or the right, or hey -- the bottom? it's things like this that Apple forces on to the users that pisses me off.
#10.2 RufioPan on 04 Jan 2006 - 21:20
It sounds like you're a more advanced user with some requirements for customization, whereas I think Apple's strength lies in producing a good standard for the majority of users. When simplifying UI design, you invariably have to remove features and the ability to customize in order to prefer consistency. I don't have a great deal of experience on the Mac, but that's my take on it.

That said, if repositioning the taskbar is high on your priority list then it seems that OSX is not the platform for you Thank goodness there're plenty of other choices out there!
#11 evo_spook on 04 Jan 2006 - 16:35
hhhmm, while what you saying is largely personal opinion on the subjective area of UI, but I can't really see how Windows (my Linux usage is more on the command line) give you so many more options of moving Apple/Windows bar, unless you are meaning dock/taskbar where they have similar amounts of adapability, everything else is either forced by MS or Apple, no difference, unless you use 3rd party apps on both systems

On the programs for Audio, whilst no foobar, version tracker lists a lot of audio software
http://www.versiontracker.com/macosx/cat/audio
#12 Double Agent 678 on 15 Jan 2006 - 07:38
And i thought Freaky had all but died and fell off the face of the earth! The last time I checked out Freaky's page it was long overdue for an update. It's good to know that he's still around!

Commenting has either been disabled on this article or you are not logged in. Click here to login or register, its free!

Note: Anonymous commenting is disabled in order to keep the quality of responses to a high standard.

Advertisement (Why?)