Don't wait here.

OSX is 'nix in its core, i.e. built as _server_ OS from the gorund up. I do not need to write a stupid virii code for the server OS, I need to look for an error in security configuration, in order to exploit perfectly healthy machine. If I want to stole and use a car, I want it in perfect condition. On top of it, if I can drive that stolen car in such a way that neither its owner, nor cops will know of it, what can be better?

How many OSX users enabled logging and actually are reading the logs?

It was a user on my place that once found bunch of Windows executable files on her machine (some 20GB). After my investigation, I found that her machine was used for at least a year as warez trading space. Native Apple firewal was on, BTW. No rootkit, no exploits, just a user that opened her machine world-wide, and had no idea. Sexy, ah?

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/319/31720#31720