Users who Dugg This
Gerakis100
2982 Followers
I am Anomaly
14740 Followers
NewsMeBack
6467 Followers
MediaSight
13125 Followers
clint robards
29 Followers
DIGG-WillNotFixMy-STATISTICS
12956 Followers










kingfootMay 30, 2011
wtf is up with the comments... on all stories!?
three80May 30, 2011
I think the Digg staff has taken the weekend off.
rblancarteMay 30, 2011
There is only so much that Apple can do in this case (and even Microsoft in similar situations).
Mac Defender is a Trojan-horse, those require users to install the software themselves. There is only so much that I would expect from any OS manufacturer to do to protect users from that kind of threat.
dagolithMay 30, 2011
The problem is anything that affects a Windows system is in the same boat. Nothing just walks into a Windows system without the user doing something to allow it, yet they take massive heat from it, usually from Apple fanboys.
monkeyrunMay 30, 2011
Pretty sure you can install virus on windows with javascript exploits.
Even on Chrome.
johnnysoftwareMay 30, 2011
How could Apple be caught off guard?
They generally are not off-guard.
About the time the company put out job requisitions for a person to manage their efforts to foster games development (wildly successful effort on the iPhone/iPad iOS platform) they put out a job requisition for someone to manage security too.
Now, Apple has tons of games people carry in their shirt pocket's iPhones. They still are not getting hacked to death like legacy platforms are that hackers mastered long ago.
It is absurd to claim that Apple "ignores" malware. In fact, if the author was familiar withe the subject of the article - and he is not - he would have mentioned that Apple used to offer Virex antivirus software from MacAfee. In fact, it was free with .Mac subscriptions.
Apple dropped the product like a hot potato when it became clear it was flawed and its flaws were causing widespread problems on Macs. They were behaving like Windows systems: system slowdowns, crashes/instabilities, incompatibilities Virex had with current software prevented people from upgrading from older products. Just messy. Apple dropped it and
Apple was open-minded enough to try out a technology from the world of Windows, open-eyed enough to see it was not working, and responsive enough to kick it to the curb when its problems became evident. Exploits of antivirus software are a really serious problem.
http://reviews.cnet.com/8301-13727_7-10334894-263.html
As Microsoft itself would say, the antivirus software increases the "attack surface" of the system it is running on.
So you have to look at what it is protecting against. In the case of Virex, not much. So it added risk and did not really remove much. It was deemed a net loss.
That is the danger of having a core platform with many exploitable flaws, and then using the same flawed development tools/techniques/habits to create defenses.
Its normal nowadays for PCs running Windows and one of the top-selling antivirus products on Windows to get infected by malware. Just browsing the web on Windows is enough to do it.
There Windows community got complacent about using pattern matchers baked into 3rd party products to put a "band-aid" on the OS each time a new malware for Windows was detected.
The problem with this was two-fold. It sometimes took over a year to even notice a malware that was widespread; e.g. the Sony rootkit fiasco. it created a lax ecosystem where the OS vendor felt it did not have to fix exploitable flaws quickly, just hush up talk about exploits/vulnerabilities.
We saw this when the press reported a series of vulnerabilities reported to Microsoft about six months to over a year before they were exploited, yet the vendor had not released any patch.
It was so slow to respond that for years now, experts have recommended using a non-Windows computer for business & home banking. Booting a Linux CD and launching a web browser directly from the CD to access an online banking site is one technique they suggest.
Banks are not sympathetic to users who run Windows. Users running Windows and antivirus products still got their login credentials stolen and criminals used those credentials to rob the bank accounts. The money often flits over to Eastern Europe. By the time banks respond, which seems fairly quickly compared to typical business processes - the money is long gone, without a trace of where it ultimately went. Vanished.
Now, if that situation, which has been going on for years on Windows does not typify complacency - I do not know what does.
At present, Apple's actions seem adequate - and what is going on upon Windows systems is insufficient. Insufficient for banking customers, oil companies, government agencies around the world, computer gamers, etc.
Microsoft needs to speak more frankly, in simple terms, to how malware is getting control of their customers systems. Without vague descriptions or programmer/security lingo.
And they have to stop redefining terminology too, like "security by obscurity". In short, it really means a cover-up or lack of disclosure about vulnerabilities and dangerous features. Windows... has those in spades. Covering them up is mostly a PR/marketing move that enables hackers to harm the public unaware, and gives the public a false sense of security. When real security is noticeably not there.
What does that have to do with market share - what Microsoft claims the term means? Nothing, but apparently marketing flacks who run the company decided to ignore the real definition/importance of the term and make security by obscurity (a weakness) the backbone of their security strategy.
Microsoft is clinging to this practice. It is clear that it will have to stop it, do a lot of work for years, before hackers stop infecting just the latest and greatest Windows systems. In the meantime, even those are getting compromised.
The industry needs better programming languages - C/C++ have been known to be unsafe for decades. The programming errors that hackers typically exploit have been known and decent programmers have been avoiding them for decades. Clearly, clinging to bad practices - not emo-states - is what is bringing the US computing infrastructure down.
The industry needs more experienced, realistic programmers. Actually, mostly the latter but the main way you get that is through the former - though it is far from automatic.
The industry needs more technically aware managers so when a programmer points out an issue, the manager understands the issue & related ones - and can decide appropriately what actions to take and recommend.
Microsoft cannot just keep using wrong terminology and emo FUD to shore up its problems. Their customers perimeters are overrun. The enemy is not leaving or stopping.
Apple, Microsoft, and others do need development approaches that prevent more vulnerabilities from creeping into new software. But they also need to face that they have gigs of source code that has to be gone through with static/dynamic analyzer utilities and human teams to get cleaned out. That's the dark/blind spot that computers have right now.
There should probably be some major NSF grants to evolve techniques to a) detect existing problems in this body of software, b) replace it with software using programming languages/tools/techniques that are water-tight.
I don't believe the solution is FUD or complacency. But one thing I know is not going to solve the problem is spreading FUD to protect/promote complacency.
gusDonMay 30, 2011
I simply see it... Microsoft is always spoiling the wearer, their software is not complicated, it's okay I guess. While his opponents also have their own arguments.
dandoniaMay 30, 2011
If Apple really want to learn from Microsoft they need to come up with a better way to get their operating system in the hands of kids. Likewise they need to make their SKD more beginner friendly and they need to push their office suit to the forefront of the line.
It's only when a generation of kids have grown up using OSX in school and at home, that Apple will really take over the world.
Games too.
phillaholicMay 30, 2011
This article is trying equate Windows malware from the past to the current Mac Defender malware on OSX. You cannot compare viruses to Trojans. Mac Defender is a program that the user has to install on OSX just like they would have to install Google Chrome. The vast majority of windows malware over the last two decades have been without the user's knowledge.
I don't care if you are running BSD, if you knowingly install a program, giving it permission to do so, you can be attacked by this sort of malware.
johnnysoftwareMay 30, 2011
Everyone knows the Mac Defender malware appeared as a trojan, working as you said. The user has to go through the equivalent of an "are you sure" dialog with the computer in order to get that version installed/running.
Then someone alleged a version had been created that operated as a web drive-by attack. At the same time, it started being recommended (once again) that users turn off the feature: Open "safe" files after downloading.
In other words, uncheck that checkbox. Run the "Preferences..." menu items in the "Safari" drop down menu of the Safari web browser, and you will see it.
its a dumb feature, in my opinion. If self-downloaded things need to run easily, they need to be put into some kind of a tray or temporary launch pad the user can conveniently but still manually launch them from. Don't ask, don't tell is no way to handle the execution of downloaded executable code. User has to know; needs to be told, and should be asked.
Web browsers have a terrible track record for knowing what is "safe" executable content. In my opinion, they cannot know. The question is too open-ended and nuanced.
rokustudentMay 30, 2011
What Could Apple Learn from Microsoft? How to make a decent OS, for start. Sorry fan boys.
ruzmutuzMay 30, 2011
Surely this comment is equating you to a MS fanboy?
johnpk90May 30, 2011
MS fanboys > Apple fanboys
:)
wilhoitmMay 30, 2011
Shouldn't it be what Microsoft could learn from Apple?
jugglingjonMay 30, 2011
How to make a proper maximize window button.
leftiscorruptMay 30, 2011
The idiot who wrote this article needs to learn that Apple has software built into the OS that warns users when they attempt to download and install *known* Trojan Horse programs.
Of course, when a new Trojan Horse program comes out, Apple has to update this with the digital fingerprints of the new Trojan and release a security update that will render Mac OS immune to the new version.
Apple has already said they will do so.Comment is buried, click here to see the rest.
ruzmutuzMay 30, 2011
This is a stupid article. Why would "Apple fanboys" not be aware of any antivirus offered, surely they would be more in-tune to this kinds of thing. This is generally a bit of a waste of a read.Comment is buried, click here to see the rest.
tac50May 30, 2011
Is it just me or did that seem like half an article?
frankdillMay 30, 2011
Steve Jobs must not go away.
narrowgateMay 30, 2011
Seriously?
How about a "How Not To..." article.
ruzmutuzMay 30, 2011
This is a stupid article. Why would "Apple fanboys" not be aware of any antivirus offered, surely they would be more in-tune to this kinds of thing. This is generally a bit of a waste of a read.Comment is buried, click here to see the rest.