Latest Comments
"I too have been a labor voter for many years and will not be voting for them again. The ..."
by maxt | Feb 9, 2010 7:56 PM
 
"I’ve just had a user receive a rehashed version of this with an attached html file containing a ..."
by Owen Lutz | Feb 9, 2010 6:01 PM
 
"hi"
by manish kumar | Feb 9, 2010 4:27 PM
 
"Hey 'hey con-roy' ... from Google Australia's head of policy Iarla Flynn"We don't believe that ..."
by Keep it real | Feb 9, 2010 3:33 PM
 
"@penno Off-site storage is a good solution unless you have some decent backup software to ..."
by Charmgene | Feb 9, 2010 2:36 PM

Commentary: Experts in denial about Mac security?

  • Email a Friend
  • Print Page
Commentary: Experts in denial about Mac security?
By Munir Kotadia
Nov 6, 2009 4:22 PM | 7 Comments
Tags: apple | mac | os | x | security | trojan | virus | mcafee | symantec | malware | windows
How important is security when buying a Mac?

Have you noticed the most popular laptop brand on display at any security conference?

In my experience Apple Macs seem to make up significantly more than the five percent usually attributed to them.

At the last AusCERT conference I attended, Macs seemed to account for more than half the total notebook population.

I recently met with Dmitri Alperovitch, McAfee's vice president of threat research - who uses a Mac. When I asked him about why he picked OS X, he denied it had anything to do with security.

"I use Mac because I think it is a great computer and not necessarily for any security that it may or may not offer. It is a great machine that has Unix-based capabilities that is very easy to use," he said.

John Harrison from Symantec Security Response also has a MacBook and again denied choosing it for security reasons. He said it was simply his "travel machine". Just for the record, Harrison's MacBook wasn't even running security software.

According to Harrison, Mac users are just as vulnerable to social engineering, so the operating system is irrelevant.

"You are installing something you thought was ok. If you have to type a password, whether it is Vista, Windows 7 or Mac OS," said Harrison.

For years now I have heard security companies and analysts claim that Apple Macs are just as vulnerable as Windows and the only reason there is virtually no malware for the Mac is because it has such a tiny market share.

"When it is financially profitable for the bad guys to target it, they absolutely will," said Harrison.

Am I wrong in thinking the information on John's and Dmitri's MacBooks might be worth a buck or two?

I am on my third MacBook and security was an important reason for moving to OS X but it is not the only reason I still use a Mac. Basically, I switched for the security but stayed for the experience!

Do you own a Mac? How relevant was security when making your purchasing decision? Have you ever been infected with Mac malware? Please use talkback below or catch me on Twitter @mkotadia.

 
Ads by Google
Thoughts on this article? Add a comment below.
Comments: 7
I have used a mac now for about the last 5 years and I have yet to have a single issue with a virus. The only prominent Trojan I've even heard of was packed into people who were downloading software (I.e. iWork 09, Photoshop) via a torrent but in my opinion that's what they get for stealing software. I really don't see how it can't be even a little profitable with ten of millions of mac users and now tens of millions of iPhone users to exploit.
SC Magazine - comments icon Posted by JamesNov 7, 2009 6:23 AM
Real world - Buy a Mac and don't install any anti-virus or anti-spyware or any security software at all. Use it for years and years and don't get malware. Buy a PC and spend time and/or money on anti-virus, anti-spyware or maybe a full blown internet security suite. Deal with daily updates, scans and scams. Maybe or maybe not get malware. Buy a PC and don't install any security software and you will get malware. It's nice to talk about what could happen and what should happen but for most people it's much better to to talk about reality. Why people put up with how insecure Windows is, is a mystery. Use Linux or get a Mac.
SC Magazine - comments icon Posted by sfmitchNov 7, 2009 6:28 AM
I'm a relatively paranoid Mac user – I have anti-virus software installed and I occasionally run it. Every week or so I let it scan my main machine for viruses and other malware. It never finds anything. The rest of the time I leave it turned off, because it's something of a glutton for CPU cycles. I certainly don't believe that nonsense about the Mac's market share being too insignificant for malware writers to bother with. Doesn't the same apply to every type of software? If Mac software is so insignificant, why does Microsoft bother to run a Macintosh Business Unit? Or Adobe? Why would anyone bother to make Macintosh software? Malware writers don't target Macs for one main reason: it's too hard.
SC Magazine - comments icon Posted by Steve BallantyneNov 8, 2009 10:33 AM
yea, macs are not worth the time to write bugs for.. whatever, you just know whoever could break into the wild with one would sure do it just for bragging rights. you think bug writers write only for money? (what money.., really) its unix based, built for security. too late for microsloth. they need a do-over. get it right, then talk to me.
SC Magazine - comments icon Posted by SteveNov 13, 2009 3:25 AM
Macs used to have security via obscurity, that was catching up on them and they were about to get PWND bigtime so they moved to linux based OS, achieving security without doing much work. Malware writers don't target Macs and Mac Users because they know that each Mac user is highly likely a poorly paid graphic/audio/film artist that has no savings left after buying their Mac.
SC Magazine - comments icon Posted by toohardNov 16, 2009 12:35 PM
I have seen a number of Mac's over this past year with password stealers and keyloggers installed on them and have laughed my butt off at the users of these Mac's who have had their bank accounts stolen, email accounts hacked and other terrible things. There ARE malicious things by the thousands that are at this very moment infecting Mac's, the great thing about them is they are silently stealing info unlike Windows malware which almost always makes its presence known. As for "Malware writers don't target Macs for one main reason: it's too hard" - please please keep believing that while your bank account gets drained
SC Magazine - comments icon Posted by tooeasyNov 19, 2009 6:07 AM
New Flash: Macs ARE more vulnerable than PCs. At the latest Black Hat in Vegas they had a compitition. Long story short, the first working exploit won. The winner built and executed a remote takeover of a Mac in under 10 minutes. When asked why he picked the Mac over a PC he said "Because Macs are much easier to hack" Macs really do rely on the fact that there are no automated attack tools for them, there are no automated virus creation kits for them, why, there is no 'bang for your buck' attacking a Mac. You don't write software or malware for a tiny portion of the market. Yes, they are great machines, but the OS sucks. Apple is the only company capable of taking a solid OS like BSD, and regressing it to recreate 5 vulnerabilities that BSD had fixed years earlier. If Macs were subjected to even 10% of the attacker attention that Windows is, they would have 0 market share.
SC Magazine - comments icon Posted by Macs r for SheepNov 25, 2009 11:39 AM
Report this comment as offensive:

   * Indicates information we require to process your submission.

Name: *
Email: *
Reason for offense: *
Your report will not be displayed.  
Name:
*
 
Email:
(will not be displayed)
*
 
Comment:
(HTML not permitted)
*
 
Validation
*

Enter the code you see below:

 

 
 
 
 
 
 
Vulnerabilities & Exploits Whitepapers