<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: OSX Malware not taking off yet</title>
	<atom:link href="http://blogs.mcafee.com/mcafee-labs/2007/03/20/osx-malware-not-taking-off-yet/feed" rel="self" type="application/rss+xml" />
	<link>http://blogs.mcafee.com/mcafee-labs/osx-malware-not-taking-off-yet</link>
	<description></description>
	<lastBuildDate>Tue, 29 Nov 2011 07:51:20 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.1</generator>
	<item>
		<title>By: Lucas</title>
		<link>http://blogs.mcafee.com/mcafee-labs/osx-malware-not-taking-off-yet/comment-page-1#comment-8192</link>
		<dc:creator>Lucas</dc:creator>
		<pubDate>Thu, 17 Jul 2008 15:51:07 +0000</pubDate>
		<guid isPermaLink="false">http://www.labs.com/research/blog/?p=224#comment-8192</guid>
		<description>It&#039;s not just the popularity or lack of granular permissions of Windows that makes it a good target, it&#039;s also that the sprawling interfaces into the OS expose a huge amount of surface area for attackers.  For example, HTML+Time support in IE is a paper thin layer over COM interfaces to WMP.  And there&#039;s the general issue of Microsoft&#039;s rock-bottom quality standards letting a lot of bugs get out into the wild.</description>
		<content:encoded><![CDATA[<p>It&#8217;s not just the popularity or lack of granular permissions of Windows that makes it a good target, it&#8217;s also that the sprawling interfaces into the OS expose a huge amount of surface area for attackers.  For example, HTML+Time support in IE is a paper thin layer over COM interfaces to WMP.  And there&#8217;s the general issue of Microsoft&#8217;s rock-bottom quality standards letting a lot of bugs get out into the wild.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: mdrisser</title>
		<link>http://blogs.mcafee.com/mcafee-labs/osx-malware-not-taking-off-yet/comment-page-1#comment-8189</link>
		<dc:creator>mdrisser</dc:creator>
		<pubDate>Mon, 26 Mar 2007 15:53:14 +0000</pubDate>
		<guid isPermaLink="false">http://www.labs.com/research/blog/?p=224#comment-8189</guid>
		<description>It is interesting to note that while you hinted at it, you never actually came out and said it. One of the biggest, if not the biggest obstacles to malware on *nix and OS X is one of permissions.

You speak of packages coming with code that can recompile with gcc and go on to state that they usually fail. This begs the question of &quot;Why?&#039;. The answer is in permissions. If your permissions are set properly, and if you haven&#039;t gone in and mucked about with them, then the default permissions are usually adequate, then the package probably can&#039;t compile or install, because the user does not have permission to write to that particular directory.

This is just one small, brief and not very in depth example.

While I appreciate the fact that you are probably constrained by time, space etc. A follow up with the actual reasons why these malware packages for *nix (And yes, OS X belongs in that category, because it is based on the BSD Kernel) fail and/or are of such a low number, would be in order.</description>
		<content:encoded><![CDATA[<p>It is interesting to note that while you hinted at it, you never actually came out and said it. One of the biggest, if not the biggest obstacles to malware on *nix and OS X is one of permissions.</p>
<p>You speak of packages coming with code that can recompile with gcc and go on to state that they usually fail. This begs the question of &#8220;Why?&#8217;. The answer is in permissions. If your permissions are set properly, and if you haven&#8217;t gone in and mucked about with them, then the default permissions are usually adequate, then the package probably can&#8217;t compile or install, because the user does not have permission to write to that particular directory.</p>
<p>This is just one small, brief and not very in depth example.</p>
<p>While I appreciate the fact that you are probably constrained by time, space etc. A follow up with the actual reasons why these malware packages for *nix (And yes, OS X belongs in that category, because it is based on the BSD Kernel) fail and/or are of such a low number, would be in order.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Richard Cornelius</title>
		<link>http://blogs.mcafee.com/mcafee-labs/osx-malware-not-taking-off-yet/comment-page-1#comment-8187</link>
		<dc:creator>Richard Cornelius</dc:creator>
		<pubDate>Sat, 24 Mar 2007 18:00:02 +0000</pubDate>
		<guid isPermaLink="false">http://www.labs.com/research/blog/?p=224#comment-8187</guid>
		<description>I appreciate the one un-noticed fact of the mac world verses the pc world.  It didn&#039;t hit me until I read this articleâ€¦â€¦when you do not have to worry about some malicious virus lurking in the background just waiting for you open your computer, then and only then can you just &quot;jump in&quot; and begin your task on the computer.

I never gave this a second thought.  I have been using a Macintosh since 1985 and not once have I worried about, &quot;is there a virus going to hit me today?&quot;  Not once!  And I believe because of this my production on my Mac has definitely shot up.

When you can just boot up your computer and get to work on your project without the worry of a virus attacking you, it certainly says something about the OS coding of the Mac!  Now this isn&#039;t to say anything negative about the PC world.  I just say that it&#039;s too bad that people have to be so very concerned about ANOTHER patch; ANOTHER this, or ANOTHER that!

I feel that those who grow tired of attacking the PC computers will someday begin to try to foil the mac world.  However, we need to understand that in the mean time Apple continues to stay ahead of these people with their security updates.  And, by the time the attack begins, it&#039;s going to that much harder to get into the OS of any of the Mac&#039;s.

Richard Cornelius</description>
		<content:encoded><![CDATA[<p>I appreciate the one un-noticed fact of the mac world verses the pc world.  It didn&#8217;t hit me until I read this articleâ€¦â€¦when you do not have to worry about some malicious virus lurking in the background just waiting for you open your computer, then and only then can you just &#8220;jump in&#8221; and begin your task on the computer.</p>
<p>I never gave this a second thought.  I have been using a Macintosh since 1985 and not once have I worried about, &#8220;is there a virus going to hit me today?&#8221;  Not once!  And I believe because of this my production on my Mac has definitely shot up.</p>
<p>When you can just boot up your computer and get to work on your project without the worry of a virus attacking you, it certainly says something about the OS coding of the Mac!  Now this isn&#8217;t to say anything negative about the PC world.  I just say that it&#8217;s too bad that people have to be so very concerned about ANOTHER patch; ANOTHER this, or ANOTHER that!</p>
<p>I feel that those who grow tired of attacking the PC computers will someday begin to try to foil the mac world.  However, we need to understand that in the mean time Apple continues to stay ahead of these people with their security updates.  And, by the time the attack begins, it&#8217;s going to that much harder to get into the OS of any of the Mac&#8217;s.</p>
<p>Richard Cornelius</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Robert Pritchett</title>
		<link>http://blogs.mcafee.com/mcafee-labs/osx-malware-not-taking-off-yet/comment-page-1#comment-8183</link>
		<dc:creator>Robert Pritchett</dc:creator>
		<pubDate>Thu, 22 Mar 2007 01:31:00 +0000</pubDate>
		<guid isPermaLink="false">http://www.labs.com/research/blog/?p=224#comment-8183</guid>
		<description>Please list the &quot;7 known malware apps&quot; that affect Mac OS X - and which versions of Mac OS X are affected - and which Security Updates correct those Vulnerabilities or Exploits.

I know of at least 2 rootkits for Mac OS X - but they require access to root  and a person needs to be physically at the machine to install. And there is one commercial app (Spector)  for monitoring a machine - with permission.

So what are these others mentioned?</description>
		<content:encoded><![CDATA[<p>Please list the &#8220;7 known malware apps&#8221; that affect Mac OS X &#8211; and which versions of Mac OS X are affected &#8211; and which Security Updates correct those Vulnerabilities or Exploits.</p>
<p>I know of at least 2 rootkits for Mac OS X &#8211; but they require access to root  and a person needs to be physically at the machine to install. And there is one commercial app (Spector)  for monitoring a machine &#8211; with permission.</p>
<p>So what are these others mentioned?</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Phillip</title>
		<link>http://blogs.mcafee.com/mcafee-labs/osx-malware-not-taking-off-yet/comment-page-1#comment-8179</link>
		<dc:creator>Phillip</dc:creator>
		<pubDate>Wed, 21 Mar 2007 18:44:22 +0000</pubDate>
		<guid isPermaLink="false">http://www.labs.com/research/blog/?p=224#comment-8179</guid>
		<description>First, thanks for the article. I&#039;ve been trying to find statistics on how malware affects different operating systems. The numbers you referred to are just the type of information I&#039;m looking for. Could you point me to your sources, as it would be greatly helpful to me.

Thanks!</description>
		<content:encoded><![CDATA[<p>First, thanks for the article. I&#8217;ve been trying to find statistics on how malware affects different operating systems. The numbers you referred to are just the type of information I&#8217;m looking for. Could you point me to your sources, as it would be greatly helpful to me.</p>
<p>Thanks!</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Ricky</title>
		<link>http://blogs.mcafee.com/mcafee-labs/osx-malware-not-taking-off-yet/comment-page-1#comment-8178</link>
		<dc:creator>Ricky</dc:creator>
		<pubDate>Wed, 21 Mar 2007 15:08:20 +0000</pubDate>
		<guid isPermaLink="false">http://www.labs.com/research/blog/?p=224#comment-8178</guid>
		<description>You are being misquoted and/or misrepresented by VNUNET.COM which says of you, &quot;The Mac OS X system is not inherently more secure than other operating systems, according to the researcher.&quot;

I can find no such assertion in your article.

The misrepresentation can be found here:

http://www.vnunet.com/vnunet/news/2186013/dearth-mac-malware-continues</description>
		<content:encoded><![CDATA[<p>You are being misquoted and/or misrepresented by VNUNET.COM which says of you, &#8220;The Mac OS X system is not inherently more secure than other operating systems, according to the researcher.&#8221;</p>
<p>I can find no such assertion in your article.</p>
<p>The misrepresentation can be found here:</p>
<p>http://www.vnunet.com/vnunet/news/2186013/dearth-mac-malware-continues</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Robert</title>
		<link>http://blogs.mcafee.com/mcafee-labs/osx-malware-not-taking-off-yet/comment-page-1#comment-8177</link>
		<dc:creator>Robert</dc:creator>
		<pubDate>Wed, 21 Mar 2007 15:05:34 +0000</pubDate>
		<guid isPermaLink="false">http://www.labs.com/research/blog/?p=224#comment-8177</guid>
		<description>Respect is the reason I believe. Those who use macs love them, not hate them. The New OS X is more elegant than ever before and as a long time mac user I would NEVER do anything to hurt the platform.

I also use Windows XP SP2 side by side and loathe everything about it. It is designed not for use but to manipulate it. The whole OS gets in the way before programs, irritates the dickens out of me, hours researching how to do some simple add on or driver, etc. It is insane. Plus at colleges or wearever the kids are taught to maipulate in order to understand them. My son, raised on MACS, became a network specialist and learned and showed my how to do so many BAD things. He even hacked the treachers computer that even the teacher could not figure out, got in trouble, but got his degree. People who use macs simply appreciate them, and since using macs since 1989 I have never came across anyone who ever wanted to hurt the platform, learn about yes, but not harm.</description>
		<content:encoded><![CDATA[<p>Respect is the reason I believe. Those who use macs love them, not hate them. The New OS X is more elegant than ever before and as a long time mac user I would NEVER do anything to hurt the platform.</p>
<p>I also use Windows XP SP2 side by side and loathe everything about it. It is designed not for use but to manipulate it. The whole OS gets in the way before programs, irritates the dickens out of me, hours researching how to do some simple add on or driver, etc. It is insane. Plus at colleges or wearever the kids are taught to maipulate in order to understand them. My son, raised on MACS, became a network specialist and learned and showed my how to do so many BAD things. He even hacked the treachers computer that even the teacher could not figure out, got in trouble, but got his degree. People who use macs simply appreciate them, and since using macs since 1989 I have never came across anyone who ever wanted to hurt the platform, learn about yes, but not harm.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Craig Hughes</title>
		<link>http://blogs.mcafee.com/mcafee-labs/osx-malware-not-taking-off-yet/comment-page-1#comment-8176</link>
		<dc:creator>Craig Hughes</dc:creator>
		<pubDate>Tue, 20 Mar 2007 17:08:43 +0000</pubDate>
		<guid isPermaLink="false">http://www.labs.com/research/blog/?p=224#comment-8176</guid>
		<description>What is the basis for your assertion that source code availability &quot;can make it easier for malware authors to write malicious code/exploits&quot; -- is there any research or data anywhere which suggests this to be true?  It is a reasonable hypothesis, but so is the contrapositive.  Absent any research one way or the other, it&#039;s rhetorically irresponsible to make a statement like that.</description>
		<content:encoded><![CDATA[<p>What is the basis for your assertion that source code availability &#8220;can make it easier for malware authors to write malicious code/exploits&#8221; &#8212; is there any research or data anywhere which suggests this to be true?  It is a reasonable hypothesis, but so is the contrapositive.  Absent any research one way or the other, it&#8217;s rhetorically irresponsible to make a statement like that.</p>
]]></content:encoded>
	</item>
</channel>
</rss>

