Hello,

We noticed you're browsing in private or incognito mode.

To continue reading this article, please exit incognito mode or log in.

Not an Insider? Subscribe now for unlimited access to online articles.

A View from Erica Naone

Style vs. Security for Macs

A Mac hacker (and self-confessed fanboy) says that Apple lags behind in security.

  • March 12, 2009

“I’m a total Apple fanboy,” said security consultant Dino Dai Zovi during his talk yesterday afternoon at the SOURCE Boston computer-security conference. “If Apple made clothes, I’d probably dress in them.”

But part of being an Apple fanboy for Dai Zovi means hacking Macs, and he says that OS X is often easier to hack than Vista or Linux.

Apple enthusiasts often extol the security of the Mac operating system, and they rarely run antivirus software. Dai Zovi agrees that Macs generally face less attack from malware authors, but he said that’s not due to the impenetrability of OS X. The Mac may be safer, but it’s not necessarily secure, he said, comparing the situation to leaving your front door unlocked because there aren’t many thieves in the neighborhood.

Today, about 10 percent of browsers run on OS X, so it’s just not profitable for malware authors to go after Macs, Dai Zovi said. However, the situation could change if Apple continues to gain market share.

In his talk, Dai Zovi demonstrated an OS X attack that allowed him to take control of the built-in camera on a MacBook. He also outlined several ways that attackers could exploit flaws in OS X. For example, he said that many exploits require attackers to locate data stored in a computer’s memory. Vista and Linux use randomization to make this hard to do, and, while OS X does randomize some data, other things are relatively easy for an attacker to find.

Dai Zovi said that Apple has a chance to improve security with its forthcoming Snow Leopard update to OS X. Without improved security, he worries that people may start worming in to Apple’s computers. “Writing exploits for Vista is hard work,” he said. “But writing exploits for Mac is fun.”

Couldn't make it to Cambridge? We've brought EmTech MIT to you!

Watch session videos

Uh oh–you've read all of your free articles for this month.

Insider Premium
$179.95/yr US PRICE

More from Intelligent Machines

Artificial intelligence and robots are transforming how we work and live.

Want more award-winning journalism? Subscribe and become an Insider.
  • Insider Plus {! insider.prices.plus !}* Best Value

    {! insider.display.menuOptionsLabel !}

    Everything included in Insider Basic, plus the digital magazine, extensive archive, ad-free web experience, and discounts to partner offerings and MIT Technology Review events.

    See details+

    What's Included

    Unlimited 24/7 access to MIT Technology Review’s website

    The Download: our daily newsletter of what's important in technology and innovation

    Bimonthly print magazine (6 issues per year)

    Bimonthly digital/PDF edition

    Access to the magazine PDF archive—thousands of articles going back to 1899 at your fingertips

    Special interest publications

    Discount to MIT Technology Review events

    Special discounts to select partner offerings

    Ad-free web experience

  • Insider Basic {! insider.prices.basic !}*

    {! insider.display.menuOptionsLabel !}

    Six issues of our award winning print magazine, unlimited online access plus The Download with the top tech stories delivered daily to your inbox.

    See details+

    What's Included

    Unlimited 24/7 access to MIT Technology Review’s website

    The Download: our daily newsletter of what's important in technology and innovation

    Bimonthly print magazine (6 issues per year)

  • Insider Online Only {! insider.prices.online !}*

    {! insider.display.menuOptionsLabel !}

    Unlimited online access including articles and video, plus The Download with the top tech stories delivered daily to your inbox.

    See details+

    What's Included

    Unlimited 24/7 access to MIT Technology Review’s website

    The Download: our daily newsletter of what's important in technology and innovation

/
You've read all of your free articles this month. This is your last free article this month. You've read of free articles this month. or  for unlimited online access.