Post subject: Apple '10 years behind Microsoft in terms of security' Posted: Fri Apr 27, 2012 1:38 am
1337 Beta Collector
Joined Tue Dec 01, 2009 2:56 am
Posts 6087
Quote:
Kaspersky Lab last week detailed why the increasing market share of the Apple Mac means more malware on the platform. Eugene (Yevgeny) Kaspersky, co-founder and CEO of the security firm, has now gone further in statement made at the Infosecurity Europe 2012 conference.
“I think [Apple] are ten years behind Microsoft in terms of security,” Kaspersky told CBR. “For many years I’ve been saying that from a security point of view there is no big difference between Mac and Windows. It’s always been possible to develop Mac malware, but this one was a bit different. For example it was asking questions about being installed on the system and, using vulnerabilities, it was able to get to the user mode without any alarms.”
Kaspersky is of course referring to the Flashback malware that has infected hundreds of thousands of Macs (see links below). He then reiterated what his employees and many security researchers have been saying for years: Apple needs to step up its game.
Post subject: Re: Apple '10 years behind Microsoft in terms of security' Posted: Fri Apr 27, 2012 6:52 am
1337 Beta Collector
Joined Tue Dec 15, 2009 8:56 pm
Posts 2322
Location England, UK
Favourite OS NeXTSTEP 5.1/Windows NT
They wouldn't have to implement GateKeeper if they knew how to develop software instead of stealing BSD stuff from 10 years ago. Darwin is like swiss cheese.
_________________ #nttalk - the only sensible option for discussion of betas and more! Don't delay, join today at irc.alphachat.net #nttalk!
Post subject: Re: Apple '10 years behind Microsoft in terms of security' Posted: Fri Apr 27, 2012 11:18 am
Site Moderator
Joined Sat Feb 24, 2007 4:14 pm
Posts 5933
Location United Kingdom
Favourite OS Server 2012
Gatekeeper isn't a real solution.
It's like the Government "solving crime" by telling everyone to stay in doors, disconnect everything from the outside world and their food will be bought to their house by state-approved private enterprises.
That system will fail from time to time, heavily restricts what you're able to do with your own property and does not protect against blackhats who'll just punch through anyway.
It's a case of treating the symptoms rather than the causes. And it's why Apple are still 10 years behind MS in terms of security - MS quit that assumption that AVs and Firewalls would solve everything back after XP SP1. Security is a big part of everything MS does now.
Code is audited for common mistakes that could pose a security risk. They have a large team dedicated to patching any flaws that are found. They proactively target and assist law enforcement in targetting criminal elements that rely on these security flaws. They look to minimise surface area, and when they do have to open something up, they look to minimise the damage that could happen in the event it's compromised. They look beyond simple technical issues and recognise that social engineering is the dominant attack vector and research ways in which this can be tackled.
They're a far cry from their attitude of 10 years ago, and Apple's attitude today.
Post subject: Re: Apple '10 years behind Microsoft in terms of security' Posted: Fri Apr 27, 2012 2:23 pm
1337 Beta Collector
Joined Sun Oct 18, 2009 2:04 am
Posts 1662
Favourite OS 2428
I thought this was going to be something Ballmer said and was waiting to see the replies, but its nice to see it come from a 3rd party. Unix/Linux systems are pretty secure by nature, but nothing is immune to viruses and hacks. Macs have managed to stay mostly virus free for a while only because they represented such a small part of the market, but as their market share grows we will see more viruses, etc being targeted at them.
Post subject: Re: Apple '10 years behind Microsoft in terms of security' Posted: Fri Apr 27, 2012 6:11 pm
1337 Beta Collector
Joined Mon Jan 23, 2012 12:14 am
Posts 1372
Location Orange County, California
Favourite OS OSX 10.8 Dev 4
spunker88 wrote:
I thought this was going to be something Ballmer said and was waiting to see the replies, but its nice to see it come from a 3rd party. Unix/Linux systems are pretty secure by nature, but nothing is immune to viruses and hacks. Macs have managed to stay mostly virus free for a while only because they represented such a small part of the market, but as their market share grows we will see more viruses, etc being targeted at them.
Not too long from now Macs will slowly be targeted maybe even more than PC's virus wise. Seeing Apple's stocks rise everyday and how Apple is so "prestigious" more people of the public will buy more macs, which is what hackers want, I bet they're tired of infecting windows but will also move to OSX.
_________________ Japanese Animation Connesieur #nttalk is the best beta chat room on IRC!
Post subject: Re: Apple '10 years behind Microsoft in terms of security' Posted: Fri Apr 27, 2012 8:40 pm
Ex OSBA Member
Joined Sun Jan 27, 2008 8:09 pm
Posts 4041
Favourite OS OS X 10.8
linuxlove wrote:
Sounds like to me that everyone who believed the "Macs don't get viruses" advertising are going to get bit really hard...
But traditionally speaking, Mac's don't get viruses. It's also worth noting that this comes from Kaspersky, a corporation that makes it's money off of viruses and malware. It's in their best interest to get people nervous about viruses on any platform.
DeFacto wrote:
They should've thought of that earlier... Now they got what they deserved.
Absolutely, damn those dirty Apple users who got away with not needing antivirus software for 20+ years and still get away with it today. (Remember, hype like this stems from Flashback - the first major virus that the platform has seen in years.)
Post subject: Re: Apple '10 years behind Microsoft in terms of security' Posted: Fri Apr 27, 2012 9:42 pm
Site Moderator
Joined Sat Feb 24, 2007 4:14 pm
Posts 5933
Location United Kingdom
Favourite OS Server 2012
Derf wrote:
But traditionally speaking, Mac's don't get viruses.
Playing the semantics game is pointless.
It's a widely accepted fact that Apple have had a largely cavalier attitude to securing their users devices. The only security that interests them is securing their walled garden.
The most interesting statistic Kaspersky had to offer is that while malware that affects Macs is still relatively rare, malware that uses Macs as a distribution platform for attacking Windows PCs is much more prevalent (as high as 1 in 7 Macs having this form of malware). This says all you need to know about Mac security: Macs themselves are a low-value target. Their greatest value to malware writers is as low-hanging fruit that can serve as a launching point from which to attack a higher value target - the PC. Once again, Apple have been exposed as the weak link in a mixed-platform world. Why, as a malware writer, should one spend an increasingly rare Windows exploit when I can use a Mac exploit to expose a whole number of Windows PCs - it's likely that these Macs will share a network with PCs and getting malware into the same network where devices more readily trust each other and share resources is a huge bonus. And its well documented that Apple takes longer to patch and patches less of its security flaws than any major competitor in the OS market.
When will people admit that this is simply not acceptable? Until customers hold Apple to account over their shocking and reckless negligence, they will not invest time nor money in correcting this disgraceful situation.
Post subject: Re: Apple '10 years behind Microsoft in terms of security' Posted: Sat Apr 28, 2012 7:41 am
1337 Beta Collector
Joined Sat Aug 22, 2009 4:28 pm
Posts 4204
Favourite OS Mountain Lion, 6730, 8400
angelwolf71885 wrote:
apple first to fall at pwn2own EVERY YEAR nuf said
Yes, that's 0-day exploits that get fixed. Any system may have one vulnerability like that.
But what to say, a 2004 virus ran on my Windows 7 machine with all the updates on January 2012 and infected most exe files. I had a hard time removing it. Now THAT'S a problem.
_________________ Longhorn Packet 1.21 - Solves most of the problems with Longhorn Setup
Post subject: Re: Apple '10 years behind Microsoft in terms of security' Posted: Sat Apr 28, 2012 9:58 am
Site Moderator
Joined Sat Feb 24, 2007 4:14 pm
Posts 5933
Location United Kingdom
Favourite OS Server 2012
You're right. You ran an infected, and therefore unverified EXE with sufficient permissions to be able to do so.
And that's the true security flaw with any system - the user. At least MS are trying to do something about that. Apple just pretend the problem doesn't exist.
Post subject: Re: Apple '10 years behind Microsoft in terms of security' Posted: Sat Apr 28, 2012 10:07 am
1337 Beta Collector
Joined Sat Aug 22, 2009 4:28 pm
Posts 4204
Favourite OS Mountain Lion, 6730, 8400
hounsell wrote:
You're right. You ran an infected, and therefore unverified EXE with sufficient permissions to be able to do so.
And that's the true security flaw with any system - the user. At least MS are trying to do something about that. Apple just pretend the problem doesn't exist.
Yeah, hounsell. I wanted to run this program usermode only (is there even a "Run program without Administrator" thing on Windows). I don't usually run apps under root, do I? And I'm pretty much sure I got that virus from a fake game release.
_________________ Longhorn Packet 1.21 - Solves most of the problems with Longhorn Setup
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum
All views expressed in these forums are those of the author and do not necessarily represent the views of the BetaArchive site owner.