IMHO: It all comes down to average user education in self-maintaining
security and security practices, initial setup that involves creating
both an admin and user account, typical attack and vulnerability vectors
(less likely that it's anything really specific to only Mac OS X), the
easy ability to self-patch/sub-patch/micro-patch open source
components--such as OpenSSH and Samba--instead of waiting for Apple to
bundle them all together, as well as more active/proactive Mac OS X
security research.

All of the above and more have been spoken to before by myself and
others, so this isn't an original opinion. Thankfully a lot of these
issues could be mitigated or eliminated in managed enterprise
environments. Unfortunately, as I pointed out in a recent Security
Response blog, I think it's safe to say that MOST Mac OS X systems in
the enterprise are unmanaged or "rogue."

____________
Todd D. Woodward
Product Support Analyst
Security Response Researcher
Enterprise Macintosh Products

Symantec Corporation
www.symantec.com
Office: 541-335-7441

"Confidence in a Connected World"

[ reply ]