Firefox and Mac security sanctuaries 'under attack' - Techist - Tech Forum

Go Back   Techist - Tech Forum > Computer Software > Microsoft Windows and Software
Click Here to Login
Closed Thread
 
Thread Tools Display Modes
 
Old 09-19-2005, 08:46 AM   #1 (permalink)
Techie Beyond Description
 
Osiris's Avatar
 
Join Date: Jan 2005
Location: Kentucky
Posts: 36,817
Send a message via ICQ to Osiris Send a message via AIM to Osiris Send a message via MSN to Osiris Send a message via Yahoo to Osiris
Default Firefox and Mac security sanctuaries 'under attack'

Symantec has attacked the perceived security advantages of Firefox and Apple Macs by drawing unfavourable comparisons with Microsoft's software and describing Mac fans as living in a "false paradise". According to the latest edition of Symantec's Internet Security Threat Report, 25 vulnerabilities were disclosed for Mozilla browsers and 13 for Microsoft Internet Explorer in the first half of 2005.

Graham Pinkney, head of threat intelligence EMEA at Symantec, said that switching from IE to Firefox as a way of minimising security risks was no longer valid advice. "Cross-site scripting attacks have been used to attack more vulnerabilities in Mozilla browsers over the last six months than IE," Pinkney told an IDC security conference last week ahead of the publication of Symantec's threat report today. John Cheney, chief executive of email filtering firm BlackSpider, replied that the release of Firefox had "helped Microsoft to raise its game" in terms of browser security.

As well as making comments that will doubtless irk Firefox fans, Symantec has renewed its assault of the perceived security advantages of Apple Macs. "Mac users may be operating under a false sense of security as a noteworthy number of vulnerabilities and attacks were detected against Apple Mac’s operating system, OS X," Symantec said, reflecting comments in the previous edition of its threat report that OS X was an emerging target for attack.

"While the number of vendor-confirmed vulnerabilities in OS X has remained relatively constant during the last two reporting periods [12 months], Symantec predicts this could change in the future. Symantec’s analysis on a rootkit (OSX/Weapox) reveals it is designed to take advantage of OS X. This particular trojan demonstrates that as OS X increases in popularity, so too will the scrutiny it receives from potential attackers."

Away from the desktop, Microsoft enterprise applications remain the top hacker target. For the fourth consecutive reporting period, the Microsoft SQL Server Resolution Service Stack Overflow Attack was the most common attack, accounting for 33 per cent of all attacks monitored by Symantec.

Malware authors go modular
Malicious code threats to privacy and confidentiality increased rapidly in the first six months of 2005 - up 48 per cent on the back half of 2004. Virus writers upped their production lines to release 10,866 new Windows virus and worm variants in the first six months of this year, Symantec reports.

For the second period in succession, NetSky-P was the most reported malicious code sample. Gaobot and Spybot - both linked to the creation of zombie networks of compromised Windows PCs - were the second and third most reported.

Malware that exposes confidential user information represented three-quarters (74 per cent) of the top 50 malicious code samples received by Symantec. Seven of the top 50 were linked to the creation of botnets. Websites that specialise in distributing source code and tools for malicious bots and botnets helped fuel the creation of multiple copies of Spybot with 6,361 new variants of the malware created in the first half of 2005, a 48 per cent increase over the 4,288 new variants documented in the second half of 2004.

Instead of releasing a wide range of functions in one program or file, virus writers are beginning to create modular code to avoid detection. Once installed, modular malware first tries to disable antivirus software and firewall protection and then trieas to download other pieces (or modules) of code from compromised computers across the internet.

A patch in time...
Symantec chronicled 1,862 new vulnerabilities during 1H2005 - an average of 10 new flaws a day – 73 per cent of which it categorises as easily exploitable. The time between the disclosure of a vulnerability and the release of an associated exploit was just six days. Half (59 per cent) of vulnerabilities were associated with web application technologies.

Along with computer viruses and vulnerabilities, spam remains a leading security concern. Spam accounted for 61 per cent of all email traffic in the first half of 2005, according to Symantec, with over half (51 per cent) of all junk mail received worldwide originated in the US.
__________________

__________________
Osiris is offline  
Old 09-19-2005, 08:47 AM   #2 (permalink)
Techie Beyond Description
 
Osiris's Avatar
 
Join Date: Jan 2005
Location: Kentucky
Posts: 36,817
Send a message via ICQ to Osiris Send a message via AIM to Osiris Send a message via MSN to Osiris Send a message via Yahoo to Osiris
Default

"false paradise"

That couldnt sum the two up better for FF and Mac
__________________

__________________
Osiris is offline  
Old 09-19-2005, 08:49 AM   #3 (permalink)
Techie Beyond Description
 
Osiris's Avatar
 
Join Date: Jan 2005
Location: Kentucky
Posts: 36,817
Send a message via ICQ to Osiris Send a message via AIM to Osiris Send a message via MSN to Osiris Send a message via Yahoo to Osiris
Default

Cross-site scripting attacks have been used to attack more vulnerabilities in Mozilla browsers over the last six months than IE"

So all you fearless FF users out there that think FF has taken over the world, what do you have to say about this or is this just jibbirish to you and dont mean nothing becasue FF is still safer...
__________________
Osiris is offline  
Old 09-19-2005, 08:51 AM   #4 (permalink)
Techie Beyond Description
 
Osiris's Avatar
 
Join Date: Jan 2005
Location: Kentucky
Posts: 36,817
Send a message via ICQ to Osiris Send a message via AIM to Osiris Send a message via MSN to Osiris Send a message via Yahoo to Osiris
Default

Away from the desktop, Microsoft enterprise applications remain the top hacker target.

This is why you see more patches, etc than FF, because its number one
__________________
Osiris is offline  
Old 09-19-2005, 11:41 AM   #5 (permalink)
Call me Mak or K
Mod Emeritus
 
KSoD's Avatar
 
Join Date: Sep 2004
Location: C:\
Posts: 35,647
Default

This should be a warning to all the Mac users. Be prepared for all the scrunity that you put us Windows users through for our OS you are going to most likely be getting attacked. That means you will have to start asking "Which is the best antivirus?" questions yourself soon.
__________________
I do not accept support questions via EMail, PM, IM or my G+ page!

Phone: LG Optimus G Pro
Running: Stock JB from LG with Nova Launcher

KSoD is offline  
Old 09-19-2005, 03:12 PM   #6 (permalink)
Chillin Techie
 
Join Date: Nov 2004
Location: USA
Posts: 11,861
Default

let see..

25 hole in FF


18,255,899 in IE since it's inception

25 holes promptly patched by FF developers

I.E. well they really didn't give a dam about the holes, until FF came out and stole millions of users. then they address IE problems

I'm sticking with firefox

MAC's well if I had one I would stick with it too. it's still safer than windows straight out the box.

windows will always be the unsafest OS system to use as they will always insist on tracking your activities and people will always exploit that.

what Symantec is basic saying is...

since we found a few holes in FF and MACS, that windows is safer. that what they are implying, even though they say different later.

they are looking at the situation with tunnel vision. they see what they only want to see
__________________
The Ultimate Hard Drive Utility PowerMax 4.23. (It now has the ability to clean a Boot Sector virus on the quick erase option.)
The best browser Netscape 8
Have you accidently delete something? Look here (trial. the better one) and here(free)
EricB is offline  
Old 09-19-2005, 03:25 PM   #7 (permalink)
Field Engineer
 
SHAWN's Avatar
 
Join Date: Nov 2004
Location: Long Island, NY
Posts: 4,697
Send a message via AIM to SHAWN
Default

More people use Windows and Internet explorer than Mac or Firefox so of course Microsoft is going to be targeted. Now that more people are using Mac and FF, hackers are going to start exploiting things from that software. It doesnt matter what you use, if more than enough people use a particular product, it will be hacked. end of story.
__________________
A+, Network + , HP Certified Tech and MCP

Specs: AMD Phenom II X6 1095T, Asus M477TD, 8GB GSkill Ripjaws DDR3 1600 7-8-7-24 1T, 128GB Crucial M4 SSD, ATi HD4650, W7, 27" HL272 Monitor
SHAWN is offline  
Old 09-19-2005, 03:50 PM   #8 (permalink)
True Techie
 
Join Date: Dec 2004
Posts: 111
Default

Shawn summed it up. And for people to say Symantec to attack FF and Mac sounds like a correct statment. Propaganda I tell ya.
duckey is offline  
Old 09-19-2005, 04:21 PM   #9 (permalink)
Chillin Techie
 
Join Date: Nov 2004
Location: USA
Posts: 11,861
Default

Quote:
Originally posted by SHAWN
More people use Windows and Internet explorer than Mac or Firefox so of course Microsoft is going to be targeted. Now that more people are using Mac and FF, hackers are going to start exploiting things from that software. It doesnt matter what you use, if more than enough people use a particular product, it will be hacked. end of story.
not really

Quote:
Originally posted by duckey
Shawn summed it up. And for people to say Symantec to attack FF and Mac sounds like a correct statment. Propaganda I tell ya.
no. you guys act like you thought that those products were unhackable.

Duh. Newsflash

Anything written with code can be hacked

you guy missed the point that these products are safer straight out of the box. you will need to configure them properly and add protection to them(Ii.e. Spyware,A/V, firewall, etc), just like you do any other software. MS will alway care more about tracking than security. they own the market so they don't care because people are going to buy the product anyway.

period.
now it's end of story
__________________
The Ultimate Hard Drive Utility PowerMax 4.23. (It now has the ability to clean a Boot Sector virus on the quick erase option.)
The best browser Netscape 8
Have you accidently delete something? Look here (trial. the better one) and here(free)
EricB is offline  
Old 09-19-2005, 04:32 PM   #10 (permalink)
True Techie
 
Join Date: Dec 2004
Posts: 111
Default

OMG VIROUSES? SPYWARE? FIREFOX ISNT SAFE OUT OF THE BOX!!!

im such a noob i totaly forgot about these and know i have all these errors.

ever thought people choose firefox for its features not security? anyone with half as much witts as you would know that looking at pr0n and play online poker will give you spyware out the wazoo.
__________________

duckey is offline  
Closed Thread

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off




Copyright 2002- Social Knowledge, LLC All Rights Reserved.

All times are GMT -5. The time now is 06:45 PM.


Powered by vBulletin® Version 3.8.8 Beta 1
Copyright ©2000 - 2017, vBulletin Solutions, Inc.