Free Republic
Browse · Search
General/Chat
Topics · Post Article

Skip to comments.

2007's No. 3 most underreported tech story: Hackers take aim at Mac OS X
Infoworld ^ | 12/28/2007 | By Bill Snyder

Posted on 12/29/2007 12:01:37 AM PST by Swordmaker

The Story: It’s not often that an analyst covering computer security issues tells you that he doesn’t do much to protect his systems. But one reputable analyst I know said just that as we talked about the rising threat of malware aimed at Apple’s hardware. I won’t mention his name, but the gentleman is dead wrong. The days when you can assume that Apple’s products are exempt from harm are over.

Is it time to panic? No, actual attacks against Macs and the rest of the Apple family, such as the iPhone, are still rare. But as the platform becomes more and more popular, hackers are gearing up to do damage. You’d better protect yourself.

“Most Mac users take security too lightly. In fact, most are quite proud of the fact that they don’t run any security at all,” says IDC analyst Chris Christiansen. “That’s an open door; at some point it will be exploited,” he says.

First some numbers: In 2006, the National Institute of Standards and Testing (NIST) tabulated 106 “vulnerabilities” in Apple’s Mac OS X. (It defines vulnerabilities as a weakness in the code that could be exploited to perform unauthorized, and generally harmful, functions by the application.) In the first six months of 2007 there were 78 vulnerabilities found in Mac OS X. Windows XP (all flavors), meanwhile, had 55 vulnerabilities in 2006 and 19 in the first six months of 2007. Vista, which wasn’t available in 2006, chalked up 19 vulnerabilities in 2007.

In a sense, Apple is a victim of its own success. Savvy hackers read the same stories and watch the same television programs as the rest of us, and so they are very aware of the burgeoning popularity of Apple’s products. Hacking Windows still provides a lot more bang per bug than attacks on Apple, but the smaller rival is a more satisfying target than ever before. And the company’s deserved reputation for building good products has probably made users overconfident.

“Apple has better commercials, but the Mac is no harder to break into than a Windows PC,” says Gartner security analyst John Pescatore. What’s more, most IT shops can automatically patch large numbers of PCs at the same time, while Macs generally have to be patched one at a time, he said.

The Bottom Line: Actual attacks on the Mac platform are still unusual. But as it becomes a juicier target, that will change. Why take a chance? Give a lot more thought to securing your Macs this year.

Complete list of 2007 underreported stories:

1.  Java is becoming the new Cobol
2.  Sun Microsystems is back in the game
3.  Hackers take aim at Mac OS X
4.  There are some threats you can worry less about
5.  Companies may have found a way around H-1B visa limits
6.  Open source’s new commercial strategy
7.  End-to-end Ethernet finally arrives
8.  Blade servers arrive for the masses
9.  BI is dead; long live BI
10. Balance of power shifts to software buyers

Bill Snyder is a contributing editor to InfoWorld.


TOPICS: Business/Economy; Computers/Internet
KEYWORDS: 2007review; hacker; mac
“Apple has better commercials, but the Mac is no harder to break into than a Windows PC,” says Gartner security analyst John Pescatore. What’s more, most IT shops can automatically patch large numbers of PCs at the same time, while Macs generally have to be patched one at a time, he said.

Perhaps this story was under-reported because the only true thing Pescatore said was about the better comercials...

1 posted on 12/29/2007 12:01:39 AM PST by Swordmaker
[ Post Reply | Private Reply | View Replies]

To: 1234; 50mm; 6SJ7; Abundy; Action-America; af_vet_rr; afnamvet; Alexander Rubin; Amadeo; ...
Infoworld makes a non-story the #3 under-reported story of 2007...PING!

Really, it's the #1 FUD Story of 2007.


SHHHH! I hunting Snipe...

If you want on or off the Mac Ping List, Freepmail me.

2 posted on 12/29/2007 12:07:46 AM PST by Swordmaker (We can fix this, but you're gonna need a butter knife, a roll of duct tape, and a car battery.)
[ Post Reply | Private Reply | To 1 | View Replies]

To: Swordmaker
“Apple has better commercials, but the Mac is no harder to break into than a Windows PC,” says Gartner security analyst John Pescatore. What’s more, most IT shops can automatically patch large numbers of PCs at the same time, while Macs generally have to be patched one at a time, he said.

Someone actually pays him a salary ?

3 posted on 12/29/2007 12:12:08 AM PST by Uri’el-2012 (you shall know that I, YHvH, your Savior, and your Redeemer, am the Elohim of Ya'aqob. Isaiah 60:16)
[ Post Reply | Private Reply | To 1 | View Replies]

To: Swordmaker

Howzabout these badass hackers hit before bragging.


4 posted on 12/29/2007 12:28:34 AM PST by dighton
[ Post Reply | Private Reply | To 1 | View Replies]

To: XeniaSt
Someone actually pays him a salary ?

Why did I waste all those years in college, studying, when I could have been partying... ignorance pays... who knew?

5 posted on 12/29/2007 12:32:10 AM PST by Swordmaker (We can fix this, but you're gonna need a butter knife, a roll of duct tape, and a car battery.)
[ Post Reply | Private Reply | To 3 | View Replies]

To: Swordmaker

I set out to count the errors in this piece, and soon ran out of fingers and toes. As easy to “break into” a Mac as a WinXP PC? There is only one way that can be true: if you trick the user into doing something stupid. And that’s a wetware problem, not an OS issue.


6 posted on 12/29/2007 1:02:26 AM PST by RightOnTheLeftCoast ([Fred Thompson/Clarence Thomas 2008!])
[ Post Reply | Private Reply | To 1 | View Replies]

To: Swordmaker
It all comes down to one REALITY:

Where are the Mac viruses? Where are the Mac worms? Where are the Mac trojans?

With 30 million UNPROTECTED Macs out there for years, how come nobody has built EVEN ONE LITTLE BOTNET with Macs?

If Macs were easily exploitable, the existing base would ALREADY be a rich and fertile field to cultivate.

This article is complete and utter crap.

7 posted on 12/29/2007 5:50:29 AM PST by dayglored (Listen, strange women lying in ponds distributing swords is no basis for a system of government!)
[ Post Reply | Private Reply | To 1 | View Replies]

To: dayglored

“This article is complete and utter crap.”

Gartner is crap.


8 posted on 12/29/2007 6:37:55 AM PST by Sunnyflorida (Drill in the Gulf of Mexico/Anwar, etc and we can join OPEC!!!)
[ Post Reply | Private Reply | To 7 | View Replies]

To: XeniaSt
Someone actually pays him a salary ?

Microsoft?

9 posted on 12/29/2007 7:02:14 AM PST by antiRepublicrat
[ Post Reply | Private Reply | To 3 | View Replies]

To: Swordmaker

I wonder if “Gartner security analyst John Pescatore” just touched his first Mac in 2007. ;’)


10 posted on 12/29/2007 12:09:24 PM PST by SunkenCiv (https://secure.freerepublic.com/donate/____________________Profile updated Sunday, December 23, 2007)
[ Post Reply | Private Reply | To 1 | View Replies]

Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.

Free Republic
Browse · Search
General/Chat
Topics · Post Article

FreeRepublic, LLC, PO BOX 9771, FRESNO, CA 93794
FreeRepublic.com is powered by software copyright 2000-2008 John Robinson