Security threats Toolkit

Story: Outrage at Symantec's OS X claims

• 
• 

There has been linkage (in the security industry) for some time, between those who are writing various types of exploits and the companies (which I won't name) who supply the solutions. It's amazing that patches are released within hours of the virus or worm "being supplied" in the wild. I know for certain that several "solutions" could NOT have been produced in less than a week to ten days. They were obviously produced in advance and got the jump on their competitors. Another 'coincidence' is that these seem to coincide with the release of newer versions of the software, requiring upgrades. If an investigation was done we would definitely find the solution code was written in advance of of the vulnerability discovery. This in the industry is seen as good business sense... Outside the industry it is obvious that it's criminal. At times their is simply 'direction' given in certain chat rooms and of course followed closely by exploits that are immediately patched.

Apples OSX will not be a likely candidate for this since it can't propagate easily. It is the most secure OS you can network today. Windows is the most easily exploited and Linux is close behind. BSD derivatives like OSX are and always have been the most secure. Linux is smaller market share than OSX yet has nearly as many exploits as Windows so the smaller market share defense is a ruse.

Perception is everything to those ignorant of the software world leaving them unable to discern fact from fiction. Microsoft has kept the greater public locked in by using this foible of human nature combined with fear. I would never allow my documents to reside on a Windows device because it's essentially like having a library of everything personal open to anyone at all times. No business today should have any sensitive documents on a network that has any Windows computer attached nor should they be allowed access. Security is simply nonexistent if Windows machines have access.

• 
• 

• 
• 
• 

Full Talkback thread