Why don't macs get Viruses?

Discussion of anything not related to audio or music production
sunaivod
Posts: 541
Joined: Tue Jan 13, 2009 11:01 am
Location: The Netherlands

Re: Why don't macs get Viruses?

Post by sunaivod » Thu Aug 12, 2010 10:52 am

Emissary wrote:you can get virus' and trojans but you pretty much have to say YES I WANT TO INSTALL THIS UNKNOWN PROGRAM PLEASE when the popup popsup,
"When the popup popsup"
This would be a great track title

ethios4
Posts: 5377
Joined: Tue Dec 02, 2003 6:28 am

Re: Why don't macs get Viruses?

Post by ethios4 » Thu Aug 12, 2010 5:24 pm

Charlie Miller on the vulnerability of Macs...

http://www.zdnet.com/blog/security/ques ... iller/2941

synnack
Posts: 2053
Joined: Fri Mar 02, 2007 10:55 pm
Location: Boston, MA
Contact:

Re: Why don't macs get Viruses?

Post by synnack » Sun Aug 15, 2010 2:09 pm

There are more incorrect statements in this thread than I can quote in one post. So I'll just stick to a few highlights.

(I work for a very large Antivirus software company and can give you empirical data to support the following statements)

1) Yes, virus (really it's malware, a virus is a very specific type of malware not often seen anymore) creators do not target Macs as often as Windows users to maximize their return due to the shear volume of Windows machines versus macs. This is changing slightly as Apple is showing pretty strong year-over-year growth in Mac sales, but statistically you are more likely to get a virus on Windows for this basic point. But note that OS X malware is on the rise since attackers are targeting vulnerabilities that exist across those platforms now (like in PDF readers) and Macs are gaining usage in corporate environments.

2) It is largely irrelevant that macs don't run .exe's. That is a reason a mac wouldn't get the same binary of a virus as a windows machine, but not a reason to say macs don't get infected at all. Mac viruses use mac formats. Also useful to note that most malware now does not come from a user running an exe. They come from malicious use of javascript and exploitation of browser plugin vulnerabilities to automatically drop and run things on your computer. No clicking of an exe required.

3) "If I only do x, y, z, then i will not get infected. Getting a virus is the users fault". This is a very common misconception based on outdated notions of how this all works. The primary attack vector for virus authors is the web (not email, so you don't open email attachments, so what) and currently NOT with Internet Explorer, but in FLASH and PDF readers and 3rd party plugins, which... btw are cross platform and have the same issues on Macs (in multiple browsers). If there is a vulnerability in Flash players, malcode can be written to compromise your system just by VISITING a web site, REGARDLESS of platform. It is no longer true that you have to actually click something or do some stupid behavior. This is an outdated idea.

4) It is no longer good enough to just "not go to bad web sites". There have been many cases of people getting infected by doing to cnn.com, espn.com and so on. There is a concept called "malvertisement" for example, where attackers compromise ad servers that serve the content to well-known sites and insert an iframe with the add that uses javascript to exploit some client-side vulnerability and drop malware on the machine. This means that you can get infected by just visiting a TRUSTED site and not even clicking anything if you have that client-side vulnerability on your machine.

5) Perhaps the best point on this, is that it makes no sense that people say "i have never had a virus". "I run a mac and I've never had a virus". "I run windows and avoid bad sites and don't open email attachments and I've never had a virus". To explain this point, imagine walking into a room of people and saying "Everyone who is NOT In this room, please raise your hand!". It's impossible to state you don't have something you don't know about. Most AV software only detects what is known. In addition, how malware behaves on your machine is vastly different than how it did even 5 years ago.

5 years ago you'd know it if you got infected. Your machine would get slow or behave in some weird funky way that would cause you to think you were infected. The behavior was overt. Sometimes even rendering your machine unbootable. Malware today is written 95% of the time to have NO NOTICABLE IMPACT AT ALL (i.e. covert). Now they want to infect your machine to silently siphen off personal information (bank login anyone?) that can be sold on an underground economy. Virus writing is better funded by organized crime globally than healthcare is in the US. If you had a virus, it is VERY likely you would have no idea. (regardless of platform)
MBP | Live 9 Suite | Max for Live | Push | MOTU Ultralite | iPad | Analog Modular Synths | Moog Voyager
aka "Tempus3r" | Music | Blog | Twitter | Soundcloud

Image

steko
Posts: 3391
Joined: Thu Jan 22, 2009 8:29 pm

Re: Why don't macs get Viruses?

Post by steko » Sun Aug 15, 2010 5:36 pm

http://www.adobe.com/support/security/b ... 10-16.html

Test: http://www.adobe.com/products/flash/about/

Download uninstaller : http://kb2.adobe.com/cps/141/tn_14157.html (mostly not needed, but sometimes helps)

Download installer: http://get.adobe.com/flashplayer/

- quit ALL apps

- run uninstaller

- run installer

- repair permissions (Applications/Utilities/Disk Utility) as Adobe always sets them wrong.
Rahad Jackson wrote:My Awesome Mix Tape #6

steko
Posts: 3391
Joined: Thu Jan 22, 2009 8:29 pm

Re: Why don't macs get Viruses?

Post by steko » Sun Aug 15, 2010 6:48 pm

fishmonkey wrote:the big difference is that nothing you download can get administrator privileges over your Mac without the system popping up a window asking you for an administrator's user name and password.
This!
tempus3r wrote: ... do not target Macs as often as Windows users ...
:lol: 1 : 100000000 eh?

http://rixstep.com/2/1/20100601,00.shtml

http://rixstep.com/2/1/20100601,01.shtml

http://rixstep.com/2/20100219,00.shtml

http://rixstep.com/2/20100214,00.shtml

http://rixstep.com/1/1/20100810,00.shtml

Windows IS the virus
Rahad Jackson wrote:My Awesome Mix Tape #6

djsynchro
Posts: 7471
Joined: Thu Jun 23, 2005 9:06 pm
Location: Amsterdam, Netherlands
Contact:

Re: Why don't macs get Viruses?

Post by djsynchro » Sun Aug 15, 2010 9:00 pm

tempus3r wrote: Mac viruses use mac formats.
It just works :D

Rave
Posts: 6152
Joined: Mon Oct 03, 2005 9:26 am

Re: Why don't macs get Viruses?

Post by Rave » Sun Aug 15, 2010 9:05 pm

What's bloated, slows your machine down, requires regular user intervention and to cap it off you have to pay for it?

That's right windows anti-virus software :lol:

outershpongolia
Posts: 2230
Joined: Wed Dec 31, 2008 8:40 am

Re: Why don't macs get Viruses?

Post by outershpongolia » Sun Aug 15, 2010 9:56 pm

Rave wrote:What's bloated, slows your machine down, requires regular user intervention and to cap it off you have to pay for it?

That's right windows anti-virus software :lol:
Dude those anti-virus companies are the ones making all the viruses..

plantaginate
Posts: 420
Joined: Fri Mar 19, 2010 2:08 am

Re: Why don't macs get Viruses?

Post by plantaginate » Mon Aug 16, 2010 12:35 am


steko
Posts: 3391
Joined: Thu Jan 22, 2009 8:29 pm

Re: Why don't macs get Viruses?

Post by steko » Mon Aug 16, 2010 12:45 am

Rahad Jackson wrote:My Awesome Mix Tape #6


steko
Posts: 3391
Joined: Thu Jan 22, 2009 8:29 pm

Re: Why don't macs get Viruses?

Post by steko » Mon Aug 16, 2010 1:26 am

Rahad Jackson wrote:My Awesome Mix Tape #6

plantaginate
Posts: 420
Joined: Fri Mar 19, 2010 2:08 am

Re: Why don't macs get Viruses?

Post by plantaginate » Mon Aug 16, 2010 1:44 am

:lol: :lol:
ok you win

steko
Posts: 3391
Joined: Thu Jan 22, 2009 8:29 pm

Re: Why don't macs get Viruses?

Post by steko » Mon Aug 16, 2010 1:47 am

Rahad Jackson wrote:My Awesome Mix Tape #6

Rave
Posts: 6152
Joined: Mon Oct 03, 2005 9:26 am

Re: Why don't macs get Viruses?

Post by Rave » Mon Aug 16, 2010 11:24 am

outershpongolia wrote:
Rave wrote:What's bloated, slows your machine down, requires regular user intervention and to cap it off you have to pay for it?

That's right windows anti-virus software :lol:
Dude those anti-virus companies are the ones making all the viruses..
Exactly :)

Post Reply