Quote:
Originally posted by Petronius@Dec 10 2005, 07:58 PM
I'm only relatively new to using a Mac, and don't know very much about Unix at all - you may be absolutely correct about the strengths of Unix.
However, that doesn't stop applications running on OSX being security risks does it? The SANS Institute seems to think there are some, especially with Safari http://www.sans.org/top20/#u2
|
Eventually there will be some. There have been wide open holes in OSX in the past that would allow the creator of a webpage to run any code they wished on a visiting mac, as administrator, without the user needing to do anything more than visit the page. There are plenty of smaller vulnerabilities (a few with exploits) between each security update that might allow malware to jump up privileges a peg or two, and there are, as always, an infinite number of pieces of malware that can do real damage to your data if you run something you downloaded from an untrustworthy source. (and remember all - while OSX may normally require an app to get your password from you if it wants to mess with the system, that offers NO protection from an app trouncing all over your home folder, or running in the background and spying on you, or running in the background and using your networking connection to send spam out to the world).
So far there's no malware, and it's not because of one simple reason (be it a secure system, or small userbase, or lack of knowledge from crackers/malware authors, or smart users) rather it's a bit of everything. Eventually we'll be successfully attacked...
...but not yet
dana