Got to love over confident Mac users.. talk about security holes in Macs...
posted 12:49pm EST Fri Jan 21 2005 - submitted by J. Eric Smith
NEWS
Apple Computer benefitted greatly from basing its OS X operating system on one of the most stable, secure operating systems availabe: BSD. However, copying large chunks of someone else's kernel means any deficiencies are copied right along with the advantages. Apple is just now finding this out after a security firm's audit of SD BSD turned up four kernel-level exploits, exploits also present in the latest iterations of OS X.
The flaws were discovered by security firm ImmunitySec during a regular audit of the BSD source code. The flaws were first discovered in June of 2004, but in an odd move ImmunitySec did not inform Apple of the flaws. Instead, the company chose to notify a private list of customers about the flaws, and just decided to publish the flaws publicly this past Monday.
The public unveiling caught Apple by surprise, as it hadn't heard of them prior. The flaws include a bug in OS X's file search function, several buffer overflows in kernel code, and a "logic bug" in the AT command used for scheduling system processes. Most of the flaws are remotely executable, but depend upon systems having multiple users. Since most Macs are rarely used as servers or multiuser machines, reasons ImmunitySec, the threat is somewhat small.
What viruses can affect Mac users?
=======================================
Not all variants are listed here. It was originally intended to
reference all the major variants at least by name eventually, but
since the information is of academic interest at best to most users
(and available elsewhere anyway), it's no longer considered a
priority. The main problem affecting Mac users nowadays is the
spread of macro viruses, and I can't possibly find time to
catalogue them individually, so they are only considered generally.
Native Mac viruses are rather rarely seen nowadays, and most people
don't need to know about them in detail -- in fact, what they need
most is to know that their favoured antivirus software will deal
with them. Note that neither of the co-maintainers are primarily in
the business of hands-on virus analysis, and cannot accept
responsibility for descriptive errors based on third-party
information. [DH]
The following varieties are listed below:
7.1 Mac-specific system and file infectors
7.2 HyperCard Infectors
7.3 Mac Trojans
7.4 Macro viruses, trojans, variants
7.5 Other Operating Systems, emulation on a Mac
7.6 AutoStart 9805 Worms
7.7 Esperanto 4733
http://www.icsa.net/html/communities/antivirus/macintosh/archives/macvirus/reference/macintosh-faq.txtI can go on and on about Macs vulerabilities over the years and problems with macs including the inability to get software for them (at least current brand new just off the design shelf softwae) and the current lower than standard video graphics (unless running a PC video card)...
I'll stick with my PC where active development of safety protocals are being made where Mac's main company stopped in 1995 and has been relying on 3rd party companies for continued fixes.