, SecurityFocus 2005-11-29
When the SANS Institute, a computer-security training organization, released its Top-20 vulnerabilities last week, the rankings continued an annual ritual aimed at highlighting the worst flaws for network administrators. This year, the list had something different, however: The group flagged the collective vulnerabilities in Apple Computer's Mac OS X operating system as a major threat.
Expand all |
Post comment
Mac OS X security under scrutiny
2005-11-29
Anonymous (1 replies)
Anonymous (1 replies)
Mac OS X security under scrutiny
2005-11-29
Anonymous (1 replies)
Anonymous (1 replies)
Re: Mac OS X security under scrutiny
2005-11-29
Anonymous (1 replies)
Anonymous (1 replies)
Mac OS X security under scrutiny
2005-11-29
Anonymous (1 replies)
Anonymous (1 replies)
Mac OS X security under scrutiny
2005-11-29
Anonymous (3 replies)
Anonymous (3 replies)
Re: Mac OS X security under scrutiny
2005-11-30
Matthew Murphy (1 replies)
Matthew Murphy (1 replies)
Re: Re: Mac OS X security under scrutiny
2005-12-01
Anonymous (1 replies)
Anonymous (1 replies)
Mac OS X security under scrutiny
2005-11-29
Anonymous (1 replies)
Anonymous (1 replies)
Mac OS X security under scrutiny
2005-11-30
Jeffsters (1 replies)
Jeffsters (1 replies)

Indeed, and I think this is the whole point of the warning (Conspiracy thoeries aside :-) )
As security professionals we need to be aware that just because an OS that has proven reliable and secure does not mean that it will always be so. Consequently basing your security stance on that premise is potentially going to hurt badly if/when seious a flaw does crop up.
The fact that the competing product is worse off doesn't mean that it's OK to goof off on good security practice and rely solely on the integrity of your OS, whatever flavour it may be.
As the reviewer pointed out, the fact that OS X is becoming more popular is a two edged sword; it is also coming under greater scrutiny so the chances of discovery of potential security flaws is exponentially higher. (Note: I am not saying that they are there, just if there are any, they will show up more quickly in future - and this trend looks set to continue).
So I would personally take this as an early warning based on cumulative trends to keep an eye open.
Your mileage may vary
[ reply ]
Link to this comment: http://www.securityfocus.com/comments/articles/11359/32799#32799