The Apple of Symantec's eye

Daily Newsletters

Sign up to ZDNet UK's daily newsletter.

COMMENT

Security vendor Symantec has once again pointed the knife at Apple Macintosh users.

Symantec's latest Internet Security Threat Report  continues to voice concern for the security and stability of the Mac operating system, OS X in particular. The publication covered findings for the first half of 2005.

"An ever-increasing number of users are adopting OS X. Many of these users believe that this operating system and the applications that run on it are immune to traditional security concerns. However, as evidence suggests, increasingly they may be operating under a false sense of security," the report stated.

What exactly was the supporting and undisputed evidence? A SecurityFocus page that aggregates 78 entries of OS X flaws starting from version 10 (circa 2001) onwards. Compare this to Windows ... well, where would you start? OK, I hear your ... it's not an apples-to-apples comparison.

SecurityFocus describes itself as a vendor-neutral site that provides objective, timely and comprehensive security information to all members of the security community. Oh, and by the way, SecurityFocus was acquired by Symantec in 2002.

The report briefly touched on a Trojan called OSX/Weapox — its discovery indicates that OS X may no longer be spared from widespread attack. "Though vulnerabilities and malicious code targeting other operating systems continue to outnumber those on OS X, Symantec recommends users continue to apply security patches and educate themselves on OS X security issues," the report stated.

Symantec's stance against OS X users — that this group is delusional — is familiar.

The false-sense-of-security claim was mentioned in a previous report which covered the second half of 2004. Then, Symantec said increased adoption of the Mac mini will escalate malicious activity since it could be purchased by less security-savvy users. These statements were widely covered in the press and opined on by your writer.

The company also claimed OS X's BSD-Unix origins made it susceptible to vulnerabilities.

In the latest report, however, the Mac mini didn't score a mention. This is due to the fact that OS X has increased in popularity on all of Apple's platforms, Symantec security manager Dean Turner said.

"When we referred to the Mac mini we were referring to it as a popular device for OS X (which we continue to talk about).

"Cheaper hardware can mean increased adoption ... which has been the case for Apple," Turner said.

Indeed, the mini version is more affordable compared with the sleek iMac; a 1.25GHz 40GB Mac mini costs £359 but throw in a keyboard, mouse and monitor, and the cost is almost comparable to a Dell or any other IBM compatible, while a 1.8GHz, 17 inch iMac starts at £899.

Symantec reckons as Mac OS X increases in usage, bad things will happen. Last week was a prime example — Apple released 10 security patches but made no mention to how dangerous the flaws were.

As company policy, Apple tends to...

For more, click here...

Talkback

I have been a Mac user since 2002 having got tired of the instability and continual security problems of Windows. Like most Mac users I would regard myself as a convert as it IS a positive pleasure to use compared to XP which I use at work. Apple's update procedure is simple and efficient and does give you a sense of security. I also use Intego anti-virus although I get so few updates sometimes I wonder if it simply isn't working. I think the problem is not just one of market share. Apple use unix and unix was designed a long, long time ago to be robust and run on minicomputers with multiple users needing security. Windows grew from MS-DOS that was knocked together to run on something small with a single user. Personally I think Windows' security problems are due to its heritage rather than its market share. Symantec are just trying to open a new market which is proving frustratingly difficult for them. Solaris is unix too, why aren't they flogging anti-virus programs for that? I use a Mac with OS X because it's the best consumer unix solution available, not because I like the logo. Just my opinion.

via Facebook 29 September, 2005 11:11
Reply

"Do you think Apple should start following Microsoft's model by rating vulnerabilities and patches?"

What is there to rate? As much as what Symantec and other anti-virus sellers out there says, there hasn't been any report of macs getting infected by a virus.

If you know one then post your claim here:
Mac OS X Viruses: Put Up or Shut Up (part 1)
"All, right, I'm sick of people reporting that Mac OS X is 'mostly' virus-free. It is, as far has been proven, ENTIRELY virus-free. Macs are not magical, and one day there will be virus that infects them. However, I don't think it's happened yet, and I think it's time we, the Mac community, started saying, "No, we don't have any viruses." "
http://wilshipley.com/blog/2005/09/mac-os-x-viruses-put-up-or-shut-up.html

and win $500

read this also:
http://blogs.zdnet.com/Murphy/index.php?p=431

"That's why there have been hundreds of widely publicized Solaris and MacOS X vulnerabilities for which there are no actual exploits and therefore no victims."

via Facebook 29 September, 2005 15:34
Reply

Lets see if I can make this clear. I live in San Diego and we have never had a hurricane. But we live on the coast and water temps are changing so lets assume that a hurricane is at least theoretically possible (maybe it is?). Do you think it is prudent for me to purchase storm shutters, backup generators etc to be ready? This is what Symantic is asking us to do.

Now, on the other hand, is it worthwhile for me to have a weeks worth of food and water for my family just in case any disaster happens? Hell yes. This is sort of like allowing your system to download regular patches from Apple (say weekly as a minimum).

Also this doesn't mean that if the weather agency says a hurricane has formed and will make land in one day that I would ignore it. Just like hurricanes, Viruses take time to affect most people and I would be quick to board up the windows (immediately load any patches) and get out of town (purchase virus software).

Today the ranting of Symantic is them saying that it is possible for the storm to hit and I and my fellow mac users are waiting for them to say that the storm has formed and is coming to land. Until then, any efforts in this direction are probably a waste of time.

via Facebook 29 September, 2005 20:13
Reply

Geez Louise, what the hell is a sanitary reminder?
Is it:
1 A reminder from the female of the species to pick up sanitary napkins/pads from the shop?
2 A reminder to wash your hands after going to the toilet?
3 A reminder to sanitise a purification system with 1 molar sodium hydroxide prior to producing parenterally administered pharmaceuticals?
Answer, none of the above.
What I think the geek in a suit was trying to communicate was that it was a "salutary reminder".
Please people, if you are pretending to be journalists, or writing verbatim from some clueless dweeb's witterings trying to flog their wares, clarify exactly what it is they've said.

via Facebook 30 September, 2005 02:56
Reply

http://wilshipley.com/blog/2005/09/mac-os-x-viruses-put-up-or-shut-up.html

via Facebook 30 September, 2005 22:47
Reply

of course ALL computers are susceptible to mailicious code, but when an operating system is designed to have all ports open before youve even logged on then thats a fundamental design flaw, i myself am sick and tired of the XP vs OSX 'thing'. Most new users of a mac are semi-computer/net savvy, most, have just had enough of the constant battle of XP based pc's. As for symantec..pfft..your jedi mind tricks might work by scaring the entire microsoft community but they wont work on apple converts, we've been there already you see, thankyou but cry wolf to a market that haven't made an informed switch to OSX.

via Facebook 1 October, 2005 14:26
Reply

Post your comment

In order to post a comment you need to be registered and logged in.

You can also log in with Facebook. Log in or create your ZDNet UK account below

  • Login

Will not be displayed with your comment

By signing up for this service, you indicate that you agree to our Terms and Conditions and have read and understood our Privacy Policy. Questions about membership? Find the answers in the Community FAQ

Get ZDNet UK's daily newsletter

Enter your email address to sign up

ZDNet UK Live

UnderINK

I agree with the previous commenter wholeheartedly. I couldn't say it better myself. This is very 'Big Brother'. And while I agree with protecting...

4 hours ago by UnderINK on European e-identity plan to be unveiled this month
Simon Bisson and Mary Branscombe

Nice to see that Turing's idea of a general purpose computer doing once-hardware-powered tasks in software is now universal ;-) Mary

9 hours ago by Simon Bisson and Mary Branscombe on Software with everything
Jason Burchell

seriously now. I've only bothered to read a small bit of the comments. do me and the rest of the world a favour. stop saying it does not work or...

13 hours ago by Jason Burchell via Facebook on Music industry negotiating over 24-bit downloads
Philip Charles Cohen

Read about it and weep, John Donahoe ... In addition to Visa’s V.me, there is now MasterCard’s PayPass digital wallet soon to arrive; another...

17 hours ago by Philip Charles Cohen via Facebook on PayPal takes phone-based payments to the high street
apexwm

Leslie Satenstein : Where have you ever seen Mozilla even mention this? Firefox is the most popular browser in the GNU/Linux OS, so I don't see...

18 hours ago by apexwm on Firefox rapid release improves Fedora Linux
songmaster

SHleG: Do you remember building a clockwork scorpion kit (I'm pretty sure I have a photo of it somewhere) — I think it was called something like...

20 hours ago by songmaster on Software with everything
Chris Wortman

Good I love Yahoo! Their search engine is getting better than Google as of late. I find more of what I want on the first page, and usually within...

20 hours ago by Chris Wortman via Facebook on Linux Mint 13 ramps up for KDE release
PatrickG

openhgs has made the point for Windows 8 multiple monitors without realising it! With Windows 7 you have to switch the mouse and so your focus...

22 hours ago by PatrickG on Windows 8 could speed multi-monitor uptake
Leslie Satenstein

Mozilla has threatened to stop supporting Linux. I guess that UBUNTU is going with another browser. I indicated that if Mozilla stops supporting...

23 hours ago by Leslie Satenstein via Facebook on Firefox rapid release improves Fedora Linux
Andy Bolstridge

Much as I abhor Microsoft's licensing practices, this is almost certainly down to purchasing IT equipment via 3rd party consultants - you get the...

24 hours ago by Andy Bolstridge via Facebook on 6 million wasted licences and £1,200 PCs: welcome to government IT
Jack Schofield

@openhgs Windows users have had multiple desktops since Linus started writing Linux. They just haven't shipped as standard because not enough...

2 days ago by Jack Schofield on Windows 8 could speed multi-monitor uptake
Jack Schofield

@Phil at Cloud4 What, Microsoft gets £1,200 per PC and £1,622 per server? Gosh, I'm amazed....

2 days ago by Jack Schofield on 6 million wasted licences and £1,200 PCs: welcome to government IT
craigsc

You guys have no idea what is going on at Autonomy. Autonomy could have been a much more profitable organization. The sales operations at Autonomy...

2 days ago by craigsc on HP cuts 27,000 staff as Autonomy chief Lynch leaves
Moley

How does this impact on dual or multi booting? Seems to me to more or less prohibit this, from Windows 8 anyway. Will Grub 2 recognise Windows 8,...

2 days ago by Moley on Windows 8 start-up speed forces USB boot workaround
apexwm

I don't understand why there cannot be a slight pause during the boot process so the user can press a key. Many operating systems do this, even if...

2 days ago by apexwm on Windows 8 start-up speed forces USB boot workaround
Gavin Goodman

You can now buy the Xi3 modular computer in the UK at http://www.ocdistribution.com . This can be bought with the Tand3m software, pricing and...

2 days ago by Gavin Goodman on CES 2012: Xi3 microSERV3R
Phil at Cloud4

I agree: Mike Lynch can clearly build a business and manage strategy. I suspect the exit of Mike is more likely the end of a planned handover...

2 days ago by Phil at Cloud4 on HP cuts 27,000 staff as Autonomy chief Lynch leaves
Phil at Cloud4

This is unbeleivable government wastage with only one winner... Microsoft 1 - Tax payer Nil!

2 days ago by Phil at Cloud4 on 6 million wasted licences and £1,200 PCs: welcome to government IT
Mispam

So what do you do when you can't boot into windows? Why can't I just hold Shift while I power up instead of having to boot into windows and click a...

2 days ago by Mispam on Windows 8 start-up speed forces USB boot workaround
apexwm

I've also seen that Mac OS X for Intel machines is supposed to run in VirtualBox, which would also be a nice solution. I've never tried it though.

2 days ago by apexwm on xTreme Triple Booting: Linux, Mac & Windows