munkery
May 2, 08:18 PM
Problems with Windows security in comparison to Mac OS X presented just in this thread:
1) Greater number of privilege escalation vulnerabilities:
Here is a list of privilege escalation (UAC bypass) vulnerabilities just related to Stuxnet (win32k.sys) in Windows in 2011:
http://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=win32k.sys+2011
Here is a list of all of the privilege escalation vulnerabilities in Mac OS X in 2011:
http://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=Mac+OS+X+privileges+2011
2) Earlier versions of NT based Windows (Windows XP and earlier) do not use discretionary access controls by default.
3) Permissions system does not include a user defined unique identifier (password) by default. More susceptible to user space exploitation leading to authentication stolen via spoofed prompt that appears unrelated to UAC because password not associated with authentication.
4) Windows sandbox mechanism relies on inherited permissions so that turning off UAC turns off the sandbox. This sandbox has been defeated in the wild (in the last two pwn2owns).
I do not know of any TrustedBSD MAC framework (BSD and Mac sandbox), AppArmor (openSUSE and Ubuntu), or SE Linux (Fedora) mandatory access control escapes? These sandbox mechanisms do not rely on inherited permissions.
5) The Windows registry is a single point of failure that can be leveraged by malware.
EDIT:
If malware doesn't need to use some method to achieve privilege escalation or actively phish users for their credit card number to be profitable enough to warrant their creation, then why did the specific example of malware that started this thread rely on these methods to be profitable?
Why did it not use the methods presented by KnightWRX? Why do you not see malware that only uses user level access to upload a user's data files to achieve some effect that is profitable? I can't recall any malware that uses this method.
Is it because most users do not have valuable info stored in insecure data files? I keep that type of info in encrypted secured notes in Keychain Access or in encrypted sparse bundle disk images.
Is it because it would require too much time to data mine the files for valuable info in relation to the amount of profit gained? How many GBs of data are on your system? Even the data I keep in encrypted sparse bundle disk images wouldn't be very useful for identity theft even if it was not encrypted.
Is it because given all the variables it is more cost effective to go after achieving system level access to keystroke log passwords protected by user space security mechanisms or simply to use basic phishing scams on unknowledgeable users? Makes sense to me but maybe I am wrong.
1) Greater number of privilege escalation vulnerabilities:
Here is a list of privilege escalation (UAC bypass) vulnerabilities just related to Stuxnet (win32k.sys) in Windows in 2011:
http://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=win32k.sys+2011
Here is a list of all of the privilege escalation vulnerabilities in Mac OS X in 2011:
http://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=Mac+OS+X+privileges+2011
2) Earlier versions of NT based Windows (Windows XP and earlier) do not use discretionary access controls by default.
3) Permissions system does not include a user defined unique identifier (password) by default. More susceptible to user space exploitation leading to authentication stolen via spoofed prompt that appears unrelated to UAC because password not associated with authentication.
4) Windows sandbox mechanism relies on inherited permissions so that turning off UAC turns off the sandbox. This sandbox has been defeated in the wild (in the last two pwn2owns).
I do not know of any TrustedBSD MAC framework (BSD and Mac sandbox), AppArmor (openSUSE and Ubuntu), or SE Linux (Fedora) mandatory access control escapes? These sandbox mechanisms do not rely on inherited permissions.
5) The Windows registry is a single point of failure that can be leveraged by malware.
EDIT:
If malware doesn't need to use some method to achieve privilege escalation or actively phish users for their credit card number to be profitable enough to warrant their creation, then why did the specific example of malware that started this thread rely on these methods to be profitable?
Why did it not use the methods presented by KnightWRX? Why do you not see malware that only uses user level access to upload a user's data files to achieve some effect that is profitable? I can't recall any malware that uses this method.
Is it because most users do not have valuable info stored in insecure data files? I keep that type of info in encrypted secured notes in Keychain Access or in encrypted sparse bundle disk images.
Is it because it would require too much time to data mine the files for valuable info in relation to the amount of profit gained? How many GBs of data are on your system? Even the data I keep in encrypted sparse bundle disk images wouldn't be very useful for identity theft even if it was not encrypted.
Is it because given all the variables it is more cost effective to go after achieving system level access to keystroke log passwords protected by user space security mechanisms or simply to use basic phishing scams on unknowledgeable users? Makes sense to me but maybe I am wrong.
Backtothemac
Oct 9, 12:22 PM
Ok,
Tell you what. I am setting up a Dual 867 for the Mall store with 256 MB Ram, and this thing is installing Windows under VPC faster than the PIII 733's that we have here. They are not SLOW! They may not have as fast a clock speed as a PC but who really gives a crap!
Macs have again taken the lead in my opinion with OS X and the Dual 1.25.
No one will ever change my mind. Call me a zealot, but that is what I think.
Tell you what. I am setting up a Dual 867 for the Mall store with 256 MB Ram, and this thing is installing Windows under VPC faster than the PIII 733's that we have here. They are not SLOW! They may not have as fast a clock speed as a PC but who really gives a crap!
Macs have again taken the lead in my opinion with OS X and the Dual 1.25.
No one will ever change my mind. Call me a zealot, but that is what I think.
TennisandMusic
Apr 21, 04:12 PM
If you don't mind, I would like to explain that.
I cannot vouch for all the people. I can vouch for most that I have seen.
I am a part of TI, SerDes which is designed in TI, UK [UK Design]. I have been to TI's headquarters [Dallas, Texas], a number of items, and everytime I go, I have seen people using iPhones and blackberries. TI still gives BB's to all the employees, but most have their personal iPhones. It was really hard to spot a guy using an android phone out of close to a thousand people I could spot on campus.
We run most of our software on SunOS 2.6 [Solaris]. We do some of our development work on Windows [which is a PAIN in the OS for no native support for PERL, Python, ClearCase, etc].
The reason I believe that's the case is because:
1. The most important: people have a life. They don't wish to tinker with the phones; whether its easy or hard, they just have no time. We buy smartphones to work for us and do everything on their own. We don't want to work for our 'smartphone' to make it usable. People just don't have time.
2. The quality of service Apple provides is hands down. The best customer service for any product that is theirs. It's great.
3. iPhone is probably the most usable phone at this time. Android is just on the other side. Widgets/Customization that's about it. Low quality apps/ No apps is the case there.
People want something that just works without much effort. These things are to simplify our lives and not complicate, so that we can concentrate on actual work.
Some people get this; some don't.
Yeah I pretty much agree on those points. I've had them all, had the iPhone 4, bought an android (Galaxy S) and a windows phone 7 (Samsung Focus) and am now back on the iPhone 4 with no regrets.
I cannot vouch for all the people. I can vouch for most that I have seen.
I am a part of TI, SerDes which is designed in TI, UK [UK Design]. I have been to TI's headquarters [Dallas, Texas], a number of items, and everytime I go, I have seen people using iPhones and blackberries. TI still gives BB's to all the employees, but most have their personal iPhones. It was really hard to spot a guy using an android phone out of close to a thousand people I could spot on campus.
We run most of our software on SunOS 2.6 [Solaris]. We do some of our development work on Windows [which is a PAIN in the OS for no native support for PERL, Python, ClearCase, etc].
The reason I believe that's the case is because:
1. The most important: people have a life. They don't wish to tinker with the phones; whether its easy or hard, they just have no time. We buy smartphones to work for us and do everything on their own. We don't want to work for our 'smartphone' to make it usable. People just don't have time.
2. The quality of service Apple provides is hands down. The best customer service for any product that is theirs. It's great.
3. iPhone is probably the most usable phone at this time. Android is just on the other side. Widgets/Customization that's about it. Low quality apps/ No apps is the case there.
People want something that just works without much effort. These things are to simplify our lives and not complicate, so that we can concentrate on actual work.
Some people get this; some don't.
Yeah I pretty much agree on those points. I've had them all, had the iPhone 4, bought an android (Galaxy S) and a windows phone 7 (Samsung Focus) and am now back on the iPhone 4 with no regrets.
balamw
Apr 6, 03:21 PM
Frankly I'm a little bummed, since I was quite tempted to get a Mac -- pretty soon, in fact. Now I'm really not so sure. I (personally) might be better off with Windows 7. Not sure.
Is your name Joe? :p
What are you bummed about. Specifically.
And why is this all or nothing? Any current Mac you buy would be a decent Windows 7 box, but your Windows 7 box won't be able to run OS X.
As I said before I'm not a "switcher" as many folks around here I use both OSes. My preference for most purposes is for OS X on a Mac, yet I understand that there are things I want to do that may be better done under Windows or even in Linux (though most of that I can actually do on OS X with a bit more effort or a quick trip to MacPorts).
alust2013's idea to pick up an older Mac to play with is a good one as nothing you do is particularly demanding. My 2006 iMac is still a very decent machine for most purposes.
B
Is your name Joe? :p
What are you bummed about. Specifically.
And why is this all or nothing? Any current Mac you buy would be a decent Windows 7 box, but your Windows 7 box won't be able to run OS X.
As I said before I'm not a "switcher" as many folks around here I use both OSes. My preference for most purposes is for OS X on a Mac, yet I understand that there are things I want to do that may be better done under Windows or even in Linux (though most of that I can actually do on OS X with a bit more effort or a quick trip to MacPorts).
alust2013's idea to pick up an older Mac to play with is a good one as nothing you do is particularly demanding. My 2006 iMac is still a very decent machine for most purposes.
B
Full of Win
Apr 20, 11:02 PM
Apple didn't want to release the iPhone 3G until the 3G network was well diverse around America, and the world. There are a lot of major countries internationally who don't even have LTE networks ready, so i think any expectations of an LTE should be from a 2012 iPhone.
They did not release it with the 1st generation model because the 3G chipset at the time took too much power. At least this was the reason given at the time.
They did not release it with the 1st generation model because the 3G chipset at the time took too much power. At least this was the reason given at the time.
Mord
Jul 12, 01:54 PM
I am very disappointed in you Hector , you of all people should know better then to post something like this. Do u not realise that the Intel deal ment apple dosen't have to do it's own R&D anymore when it came to chip sets.
APPLE IS USING INTEL STOCK PARTS incase you didn't know , so mixing the MacPro with Conroe/Woody would not cost a dime more. they will use a basic P965 chipset for Conroe and 5000X Chipset for Woody.
any and ever motherboard has been designed with the chips lay out and logic requested by the vendor, in this case apple, the fact that they don't develop their own electronics changes nothing, freescale/IBM made the chipsets before the switch nothing has changed, apple outsourced the design of the board to intel sure but they are paying intel to do so somehow, anyway, the cost of support and manufacture rockets up too.
more i'm disappointed in you, i haven't seen you post in a year or so and your still the same childish n00b who completely misses the point.
the mac pro will be a pro machine, apple has never done a consumer tower and likely never will.
woodcrest is just conroe with SMP, overclocking is exactly the same, as in non existent due to EFI. professionals do not overclock their macs.
go play with your toys.
APPLE IS USING INTEL STOCK PARTS incase you didn't know , so mixing the MacPro with Conroe/Woody would not cost a dime more. they will use a basic P965 chipset for Conroe and 5000X Chipset for Woody.
any and ever motherboard has been designed with the chips lay out and logic requested by the vendor, in this case apple, the fact that they don't develop their own electronics changes nothing, freescale/IBM made the chipsets before the switch nothing has changed, apple outsourced the design of the board to intel sure but they are paying intel to do so somehow, anyway, the cost of support and manufacture rockets up too.
more i'm disappointed in you, i haven't seen you post in a year or so and your still the same childish n00b who completely misses the point.
the mac pro will be a pro machine, apple has never done a consumer tower and likely never will.
woodcrest is just conroe with SMP, overclocking is exactly the same, as in non existent due to EFI. professionals do not overclock their macs.
go play with your toys.
rdowns
Apr 24, 12:13 PM
It's about power and control- nothing more.
And Fear.
and money.
And Fear.
and money.
Aduntu
Apr 23, 02:55 AM
sounds a little conflicting ... I write it off as jibberish ... I'll stick with science instead
The information isn't conflicting, and it's not intended to convince anyone of intelligent design. In it's simplest form, it's showing that the Hebrew word translated "day" is used to refer to varying periods of time, not necessarily 24-hour periods. As a side note, it's also a portion of an element in the bible that supports the same conclusion as science, which is that the earth isn't merely 7,000 years old. The theory of 4 billion years doesn't contradict the bible.
The information isn't conflicting, and it's not intended to convince anyone of intelligent design. In it's simplest form, it's showing that the Hebrew word translated "day" is used to refer to varying periods of time, not necessarily 24-hour periods. As a side note, it's also a portion of an element in the bible that supports the same conclusion as science, which is that the earth isn't merely 7,000 years old. The theory of 4 billion years doesn't contradict the bible.
Bill McEnaney
Mar 28, 03:22 AM
Then you don't accept us as we are. All of us are what we do. That's the measure of any human being. We can all say all kinds of things, but in the end, what we do is what matters.
Then I don't know what you mean by "accept."
Then I don't know what you mean by "accept."
maccompaq
Nov 10, 02:51 PM
I have the iphone 3gs, and at&t has never been able to get their act together with the iPhone but with the os upgrades service seems to keep getting worse.
Do you think problems will be resolved when / if verizon has access to the iphone (effectively lowering the burden on at&t, even thought they probably still wont be able to keep up)
It is the fault of AT&T, not the iPhone. Every call I make gets dropped. It makes no difference if I use my iPhone 4 or my LG phone.
Do you think problems will be resolved when / if verizon has access to the iphone (effectively lowering the burden on at&t, even thought they probably still wont be able to keep up)
It is the fault of AT&T, not the iPhone. Every call I make gets dropped. It makes no difference if I use my iPhone 4 or my LG phone.
deadkennedy
Apr 9, 09:25 AM
Let the games begin!
Clive At Five
Aug 29, 12:59 PM
Yeah, cause you just HAVE to hunt whales and eat whalemeat in Norway in order to survive, such a poor country with poor people. How dare Greenpeace oppose your ancient way of life?
Have you read what you just wrote? Who said anything about hunting whales? Eating whale meat? Or being poor?
No one.
Conclusion? You're bigoted.
There's no denying that Greenpeace is further towards "Extremist" than towards "Moderate." That's the jist of what he's saying, and he's right.
-Clive
Have you read what you just wrote? Who said anything about hunting whales? Eating whale meat? Or being poor?
No one.
Conclusion? You're bigoted.
There's no denying that Greenpeace is further towards "Extremist" than towards "Moderate." That's the jist of what he's saying, and he's right.
-Clive
anim8or
Apr 13, 12:46 AM
The BBC is also funded by money stolen from people as a punishment for owning a television. Let's not base conceptualizations of rational thought on their behavior.
Here's a thought...
The BBC is currently tightening it's budgets and making huge cuts to try and help keep the licence fee down. People will lose their jobs due to this fact so keep your greedy opinion to yourself.
The public demand HD television from the BBC but they certainly don't realise the cost implications.
So the licence fee us now fixed for the next 5 years thus causing cuts.
The public can't have it all!!!
And btw BBC staff get the sack immediately for failing to pay their own licence fee!
Back on point, I don't think the BBC have purchased that amount of adobe licences or hardware to go with... I would know.
Here's a thought...
The BBC is currently tightening it's budgets and making huge cuts to try and help keep the licence fee down. People will lose their jobs due to this fact so keep your greedy opinion to yourself.
The public demand HD television from the BBC but they certainly don't realise the cost implications.
So the licence fee us now fixed for the next 5 years thus causing cuts.
The public can't have it all!!!
And btw BBC staff get the sack immediately for failing to pay their own licence fee!
Back on point, I don't think the BBC have purchased that amount of adobe licences or hardware to go with... I would know.
Don't panic
Mar 15, 09:04 AM
I'm joking about Afghanistan. It's supposed to be an Isreal joke, but obviously you didn't get it. And I think it's funny! ;)
Regarding the relocation, I think that would be pretty cool. Why not? If it boiled down to it, I think what I said would be pretty practical and beneficial.
you think it would be 'pretty cool' to relocate 130 million people to some 'barren area' in a foreign land when there is absolutely no reasons for it?
and you think it would be "practical"????
Regarding the relocation, I think that would be pretty cool. Why not? If it boiled down to it, I think what I said would be pretty practical and beneficial.
you think it would be 'pretty cool' to relocate 130 million people to some 'barren area' in a foreign land when there is absolutely no reasons for it?
and you think it would be "practical"????
Mattie Num Nums
May 2, 09:26 AM
So make it unsafe, it's not a rocket science, cowboy.
You're awfully sensitive about this issue, chief.
You're awfully sensitive about this issue, chief.
Jumpin JW
Sep 2, 07:53 AM
"He never experienced dropped calls until we started dating and he was talking to me "
My daughter's phone does the same thing!
My daughter's phone does the same thing!
NebulaClash
Apr 29, 07:54 AM
A reasonable question, AppleScruff. Indeed, my sample group includes staff, faculty, and students from different disciplines (including business/commerce, and engineering) at a university who use their Macs for research, graduate work, or lecture preparation; a prominent cardiologist at a large hospital; a financial advisor; professional musicians; and many others.
I am myself using a Mac in a business school seamlessly among my PC-using peers. There is nothing that they can do that I cannot - and many things I can do that they would have a difficult time doing in Windows. In fact, my colleagues have been so impressed that one has already made the switch recently, and another is preparing to switch as well. Those days of "needing to run Windows" for work are behind us.
That's been my observation in the business world as well. With projects often being Web-based now, Windows is becoming irrelevant. On one project with about twenty developers, systems architects and analysts, close to half were running Macbook Pros (no Windows installed) and doing very well. It's just not an issue for many office folks. Obviously there are some roles that still require Windows, but not as many as it used to be. The tech folks in particular seem to take great delight in moving to Macs. Times have changed.
I am myself using a Mac in a business school seamlessly among my PC-using peers. There is nothing that they can do that I cannot - and many things I can do that they would have a difficult time doing in Windows. In fact, my colleagues have been so impressed that one has already made the switch recently, and another is preparing to switch as well. Those days of "needing to run Windows" for work are behind us.
That's been my observation in the business world as well. With projects often being Web-based now, Windows is becoming irrelevant. On one project with about twenty developers, systems architects and analysts, close to half were running Macbook Pros (no Windows installed) and doing very well. It's just not an issue for many office folks. Obviously there are some roles that still require Windows, but not as many as it used to be. The tech folks in particular seem to take great delight in moving to Macs. Times have changed.
aiqw9182
Apr 12, 10:21 PM
This is what iMovie after iMovie '06 should have been, if only because it has a PROPER FRICKIN' TIMELINE!
Was really hoping for $199, but $299 isn't bad. I might just upgrade from iMovie '06 (I'm not really a 'pro' editor, but I love my timelines!).
http://www.tuaw.com/2010/10/22/timeline-tweak-returns-imovie-11-to-old-school/
Was really hoping for $199, but $299 isn't bad. I might just upgrade from iMovie '06 (I'm not really a 'pro' editor, but I love my timelines!).
http://www.tuaw.com/2010/10/22/timeline-tweak-returns-imovie-11-to-old-school/
likemyorbs
Mar 27, 09:18 PM
You might want to learn a little about Courage, Fr. John Harvey's apostolate to people who feel same-sex attraction. His organization believes sexual orientation can change. But Courage doesn't try to change anyone's sexual orientation. Fr. Harvey and his colleagues try to help people who feel same-sex attraction live holy, chaste, celibate lives.
But why should they have to be celibate just because some religious nuts have a problem with them? His organization can do whatever they want, but the point of organizations is to try to improve life for the future. And making gay people celibate will not be the way of the future, i can promise you that. Actually, it's not even the way of the present, only unintelligent people would want to do that.
But why should they have to be celibate just because some religious nuts have a problem with them? His organization can do whatever they want, but the point of organizations is to try to improve life for the future. And making gay people celibate will not be the way of the future, i can promise you that. Actually, it's not even the way of the present, only unintelligent people would want to do that.
stcanard
Mar 18, 05:23 PM
The main purpose of iTMS is to sell iPods. iPods are the only players at this time that can play iTMS purchased music, due to the DRM. Tell me how the DRM has nothing to do with iTMS's business model.
Do you really think it's DRM lock-in that's fuelling those sales?
Because personally I think it's the integration and "it-just-works" aspects, combined with a superior product.
Do you really think it's DRM lock-in that's fuelling those sales?
Because personally I think it's the integration and "it-just-works" aspects, combined with a superior product.
citizenzen
Apr 26, 07:36 PM
Munchies aside, miracle cures of old are likely misdiagnosis.
It's quite possible they are "miraculous" recoveries. "Miraculous' as in exceedingly rare. Gabrielle Giffords survived a point-blank gunshot to the head. Is that the work of divine intervention? Or is it simply a matter that if you shot a number of people in the head, a very small fraction would survive? Likewise, among the millions of people with cancer, it shouldn't come as a surprise to find a small fraction that beat the odds to make a remarkable recovery. If Purell kills 99.99% of bacteria, does that make the .01% of survivors "miracles"?
It's quite possible they are "miraculous" recoveries. "Miraculous' as in exceedingly rare. Gabrielle Giffords survived a point-blank gunshot to the head. Is that the work of divine intervention? Or is it simply a matter that if you shot a number of people in the head, a very small fraction would survive? Likewise, among the millions of people with cancer, it shouldn't come as a surprise to find a small fraction that beat the odds to make a remarkable recovery. If Purell kills 99.99% of bacteria, does that make the .01% of survivors "miracles"?
Eraserhead
Mar 27, 11:59 AM
And why do people who believe that stuff spend so much time and effort concerning themselves with homosexuality?
Its probably down to them being in the closet themselves.
Its probably down to them being in the closet themselves.
aristobrat
Mar 18, 01:18 PM
The amount of data they used by tethering is the issue per the previous articles and statements by At&t in the last 2 years.
It is, however, this thread isn't based on articles and statements made by AT&T over the last two years.
This thread is specifically based on "AT&T Cracking Down on Unauthorized Tethering", not "AT&T limiting iPhone data consumption for iPhones on unlimited data plans".
Maybe I'm reading your point wrong.
But if you advertise unlimited as At&t does and did, it should be unlimited no matter what (Slimey) lawyer drafts a document meant to swindle people is signed.
a Con game is still a con game, if i sign and pay for unlimited, it should be unlimited not what ever At&t decides.
I'm just saying that in regards to the unlimited iPhone data plan, you're still getting unlimited iPhone data. Where's the con?
It is, however, this thread isn't based on articles and statements made by AT&T over the last two years.
This thread is specifically based on "AT&T Cracking Down on Unauthorized Tethering", not "AT&T limiting iPhone data consumption for iPhones on unlimited data plans".
Maybe I'm reading your point wrong.
But if you advertise unlimited as At&t does and did, it should be unlimited no matter what (Slimey) lawyer drafts a document meant to swindle people is signed.
a Con game is still a con game, if i sign and pay for unlimited, it should be unlimited not what ever At&t decides.
I'm just saying that in regards to the unlimited iPhone data plan, you're still getting unlimited iPhone data. Where's the con?
Evangelion
Jul 12, 02:22 AM
Oh really.
Ok, tell me what's out there that can substitute on a professional level Photoshop, After Effects and Illustrator.
I am sure you don't work on the business, so you have no clue.
A follow-up question: why the obsession with Photoshop, After Effects and Illustrator? There are other apps out there as well. Why does it seem that about 105% of Mac-users are Photoshop-users as well (I bet that PhotoShop-users are in fact in the minority)? Everything related to Apple, OS X and Macs seem to boil down to "but what about PhotoShop?". Well, what about it?
You are worried about the fact that Adobe's apps are not yet Universal? Fine, then don't buy a MacIntel. Problem solved.
Ok, tell me what's out there that can substitute on a professional level Photoshop, After Effects and Illustrator.
I am sure you don't work on the business, so you have no clue.
A follow-up question: why the obsession with Photoshop, After Effects and Illustrator? There are other apps out there as well. Why does it seem that about 105% of Mac-users are Photoshop-users as well (I bet that PhotoShop-users are in fact in the minority)? Everything related to Apple, OS X and Macs seem to boil down to "but what about PhotoShop?". Well, what about it?
You are worried about the fact that Adobe's apps are not yet Universal? Fine, then don't buy a MacIntel. Problem solved.