OS X Users: 10.4.5 is out

Quantos

Sock ? What Sock
Mar 6, 2005
7,619
5,825
Earth for now
✟33,990.00
Faith
Non-Denom
Marital Status
Married
Politics
US-Others
Upvote 0

rdale

Well-Known Member
Feb 5, 2004
1,381
53
65
Oregon
✟16,820.00
Faith
Christian
Marital Status
Married
Upvote 0

zoziw

a mari usque ad mare
Jun 28, 2003
2,128
106
51
✟11,169.00
Faith
Christian
Marital Status
Married
lol, talk about bad timing on my part. :)

For the record, it is a trojan that attempts to infect your Mac and then propagate itself through iChat. Fortunately, it is harmless and appears to be a proof-of-concept program but could certainly be developed into something nasty.

Andrew Welch has a thorough write up on this.

http://www.ambrosiasw.com/forums/index.php?showtopic=102379
 
Upvote 0
This site stays free and accessible to all because of donations from people like you.
Consider making a one-time or monthly donation. We appreciate your support!
- Dan Doughty and Team Christian Forums

zoziw

a mari usque ad mare
Jun 28, 2003
2,128
106
51
✟11,169.00
Faith
Christian
Marital Status
Married
I've done some reading on this and, imo, it is much less of a concern than that whole widget incident last year.

Basically, it tells you it is a screenshot of Leopard, but it isn't and the first clue that something is up is Safari (Apple's web browser) warning you that you are downloading an application.

The next warning is that it will prompt you for a password when it tries to run.

Finally, as long as you aren't running as an Admin it isn't going to do anything.

That is in addition to having to unzip the thing and double-clicking on the application to start it.

Finally, is needs Spotlight to propagate, which is only in Tiger and it isn't a universal binary and won't affect an Intel Mac.

This isn't much of a threat but it is a good reminder to us Mac users not to take Safari's and Tiger's warnings about what is being downloaded lightly.
 
Upvote 0

Overtime_man

Well-Known Member
Oct 25, 2004
821
26
48
Tokyo
✟16,114.00
Faith
Christian
Marital Status
Married
I found the Macworld article to be rather amusing:

...Welch is careful to point out that this should probably be considered a Trojan horse, rather than a virus, “because it doesn’t self-propagate externally.”
So-called Trojan horses are differentiated from viruses because they masquerade as a regular application or file and do not replicate themselves arbitrarily.
Anti-virus software maker Sophos takes issue with this description, claiming this is the “first ever virus for Mac OS X.”


Wow, what are the chances that an anti-virus software maker would want to claim it's a virus? :doh: I'm reminded of Symantec's dubious report on the state of Mac security, which was released a few months ago in an obvious attempt to stir up sales for their own anti-virus software products.

That said, it's only a matter of time before someone releases a real virus on OS X, especially if Macs keep gaining market share. But unlike Windows, OS X was built from the ground up with security in mind, so I'm not overly worried, and I'm certainly not going to throw down 10000 yen for an unnecessary anti-virus program. If you're stupid enough to ignore the warning that Safari gives you, and then go as far as to enter your master password to view a file which is supposed to be a jpg, you probably deserve to be infected!
 
Upvote 0

zoziw

a mari usque ad mare
Jun 28, 2003
2,128
106
51
✟11,169.00
Faith
Christian
Marital Status
Married
Overtime_man said:
I found the Macworld article to be rather amusing:




Wow, what are the chances that an anti-virus software maker would want to claim it's a virus? :doh: I'm reminded of Symantec's dubious report on the state of Mac security, which was released a few months ago in an obvious attempt to stir up sales for their own anti-virus software products.

That said, it's only a matter of time before someone releases a real virus on OS X, especially if Macs keep gaining market share. But unlike Windows, OS X was built from the ground up with security in mind, so I'm not overly worried, and I'm certainly not going to throw down 10000 yen for an unnecessary anti-virus program. If you're stupid enough to ignore the warning that Safari gives you, and then go as far as to enter your master password to view a file which is supposed to be a jpg, you probably deserve to be infected!

Yeah, after looking at this some more it really isn't much. Anyone could paste a .jpeg icon on a script and try to sucker people into downloading it and ignoring the warnings OS X has set up.

Oh well, I'm sure Windows fans and AV companies got a kick out of it. :)
 
Upvote 0

zoziw

a mari usque ad mare
Jun 28, 2003
2,128
106
51
✟11,169.00
Faith
Christian
Marital Status
Married
rdale04 said:
...never any joy when the bad guys do what they do
:sick:

In all fairness, I own a Windows desktop and laptop and neither one has ever had a virus. The only reason I have AV on them is because my ISP includes it for free.

I don't even get spyware or tracking cookies on them and I use IE.

Don't run as admin, get SP2, use a firewall, learn about IE's security zones and double check downloads and email attachments (turn off preview of course), and as far as I've experienced you can be secure on Windows.
 
Upvote 0
This site stays free and accessible to all because of donations from people like you.
Consider making a one-time or monthly donation. We appreciate your support!
- Dan Doughty and Team Christian Forums
This site stays free and accessible to all because of donations from people like you.
Consider making a one-time or monthly donation. We appreciate your support!
- Dan Doughty and Team Christian Forums