Posted on 03/27/2010 11:48:17 AM PDT by for-q-clinton
Very interesting. Has Mac finally gotten enough of a userbase to make it worth attacking? If so, I can see a ton of Apple zealots eating a lot of crow. Well technically they should already be eating it.
Bottomline: All software is vulnerable and security by obscurity isn't security at all.
ping
Macbots in 3...2...1...
Nope. I had some other threads and they are staying miles away from these threads. They are either too busy eating crow or are too distraught to post/read as their savior Steve Jobs has let them down and lied to them.
It's the target, not the OS, that decides the “popularity” of the victims.
With Apple holding a relatively small base of users vs. Microsoft and those users with few exceptions mainly using it for personal, or in the area of business, creative use, they were a small target economically or otherwise.
Exactly. So I wonder if Windows is really a much more secure platform now? I know MS has put a lot of time and money into improving their platform and their patching process.
Can apple’s update cycle match that of Microsoft’s?
As far as secure, every OS goes through vulnerability cycles during it's life time, with the lowest most secure points being right before it goes End of Life of course.
Windows 7 does show MS first real effort at starting out secure. As it remains out on the market vulnerabilities will be exposed, it be less secure than competitors for a bit, get patched be more secure, etc. etc.
What’s a “apple”?
The company that makes iPhone, Mac OSX, iPad, etc...
I’m sure that this is a dumb question, but how does one know he has been hacked.
All my Macs seem to be working as usual.
This will be fun to see Swordmaker and the other Macbots or FR spins this one.
Swordmaker and ANtirepublicrat will be here but they will spin it. Wait for it...
No, Windows isn’t a “much more” secure platform now.
One of the problems with these sorts of “analysis” by bystanders to computer security is that they don’t ponder the question of “what would happen if Charlie Miller decided to go after Windows?”
Let’s back up a sec. Charlie Miller worked for the NSA for five years. That sort of experience gives him a big leg up on many DIY hackers in that the NSA has a large internal base of experience on cracking systems of all sorts. Let’s just say that it is obvious that Miller learned a trick or two in his time at Ft. Meade.
Why is Miller focusing on OS X? Because he analyzed the contest and took the path which offers him the highest probability of getting the $10K payoff. There aren’t that many hackers looking at the Mac as an attack target, but there are a bunch of hackers who have looked at Windows, and a few more than the Mac who go after Unix-variant systems because they’re used as servers and back ends. Fewest competitors means highest probability of winning the contest and taking home some cash.
As a student of info security issues (and a certification at the moment), I understand that hackers will target what feeds their need. That need might be money, fame (infamy), or any other impetus. Because that is the case, as the number of systems of a certain operating system/application increases, the risk increases.
There is NO such thing as a completely secure system unless it is powered off, smashed to pieces, and buried in the backyard.
So you are claiming Charlie Miller is the best hacker in the world and that he dwarfs all Windows hackers?
Get real. He’s a very good hacker but not the best. And he’s targeting OS X because Steve Jobs has been lying about their security and it’s footprint is now big enough worthy of a respsonse to protect its users. The NASA angle is stupid. I know many people that have worked for NASA, most are pretty smart, but not extremely smart. In most cases my IQ was higher than theirs (when that subject came up). So I’m not sure what working at NASA has to do with anything.
But you’re right there are a lot more script kiddies exploiting old vulnerabilities in windows than in OS X.
What? WHAT? Say it aint so, Steve, you little Liberal Prick.
No, I’m not. And thanks for erecting such a fabulous strawman.
I read Miller’s reasons (which he openly disclosed) about why he’s targeting OS X and Safari a couple years ago when he started. It was as I said: He’s looking for the highest probability of getting the payoff - this is a contest, after all, with a tidy cash prize.
WTF are you talking about “NASA?” I said “NSA” - not “NASA.”
If you are at a level where you conflate the NSA with NASA, then you know nothing about computer security.
I misread your NASA point, but I too know people in NSA and once again the same argument holds true there as well ;-)
Typically it’s a few extremely bright people and then a lot of smart people who take that and put the message out.
Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.