Comments on: Vista More Secure Than Mac OS: Bollocks?

By: Jon

Jon — Thu, 03 May 2007 20:24:42 +0000

Don, my comment wasn’t squarely in the “security through obscurity” field, that is bogus, I am with you on that.

I really don’t care who says what and how, the point being that the test results and the environment the OS is subject to can be modified (like statistics) to express your personal goals or ambitions (consciously or subconsciously).

Anyways, this was fun, the sun is coming up so that is my Q to go to bed…

Jon

By: Don

Don — Thu, 03 May 2007 20:06:28 +0000

Jon, had you ever even HEARD of Zovi before he cracked a Mac (after he FAILED to do so on the original test and they made it easier)? Nobody had heard of him and now he is well know.

The same would be true of any hacker who actually got into Macs in the real world.

Your argument of “security through obscurity” has long been disproved and it also just doesn’t make any sense. The fact remains that there are tens of thousands of pieces of malware infecting Windows-based computers in the wild and there are NO pieces of malware infecting OS X in the wild (unless you count “clippy” as being malware).

By: Jon

Jon — Thu, 03 May 2007 18:36:45 +0000

I believe this is all relative, OSX never had the market penetration that XP/Vista had, hence not as big of a target for your everyday hacker. Saying one is better then the other (security wise) just doesn’t hold any water no matter what angle you take… based on this guys test, he found Vista better but another person with different criteria may find the opposite to be true. Either way… OSs are far more secure today then DOS/System 6 days – and for that, I am glad.

Jon

By: Anonymous

Anonymous — Thu, 03 May 2007 18:31:36 +0000

And how exactly did “security researcher Dino Dai Zovi” determine the “code quality” of both Vista and Mac OS X? Must be cool to not only have access to the source code for both platforms, but to also have the time and skill set to identify and analyze all of the security-related code.

What a load of bumf. I doubt very much that Mr. Zovi actually said that. From what little I could find out about him, he seems to know enough about computing and security to have not said a ridiculous blanket statement like that.

By: Dewayne Smith

Dewayne Smith — Wed, 02 May 2007 01:12:49 +0000

I actually like the new Microsoft operating system, it’s one of the three things they’ve done quite well recently; Xbox 360 and Zune included.

By: mathew

mathew — Tue, 01 May 2007 17:30:08 +0000

For those who don’t know what the SDL is all about:

Basically, Microsoft declared a bunch of standard C library calls were deprecated. Things like strcpy, sprintf, and so on. Thus new Microsoft code does the right thing and uses the safer alternatives.

http://msdn2.microsoft.com/en-us/library/bb288454.aspx

What the guy seems to be missing is that Apple effectively did exactly the same thing. For example, Cocoa applications don’t use strcpy or sprintf; in fact, they don’t use C strings at all. Instead they use NSString and its methods.

In addition, the fact that these deprecated functions are a bad thing isn’t exactly a secret. It has been common knowledge to any C programmer for years. There are tools to audit old code for the dangerous calls; open source tools, even.

So basically, the claim is: this stuff that Microsoft’s doing, that everyone else does too, will make Vista more secure than OS X.

I don’t buy it.

By: Quentin Cole

Quentin Cole — Tue, 01 May 2007 16:03:10 +0000

It sounds like he’s only talking about the NEW code in vista being more secure.

“It is obvious from observing affected components in security patches that Microsoft’s Security Development Lifecycle (SDL) has resulted in fewer vulnerabilities in newly-written code.”

so the newly written code is more secure
too bad it’s still using way too much of the old crappy bloated windows code

By: Alex

Alex — Tue, 01 May 2007 15:56:45 +0000

You know what would be fun? Betting Dino his brand new Macbook on the following:

He runs Vista the same way I run OS X for the next 60 days. Everyday use, no anti-virus, no anti-malware. We then measure combined losses for each of us in:

Productivity
Response
Replacement

And see who wins. And just to note, I’ll be hotdesking it, so I’m sure my exposure will be significant.