Originally posted by Vulcan
What I am talking about is simple to understand:
- average Mac user + infected/spywared Mac = very little chance of detection (possibly no chance)
- average PC user + infected/spywared PC = very high chance of detection
Ask a Mac user what spyware there is for their Mac and they'll usually say "none". Which is completely wrong.
And BSD and its apps have loads of issues, look at the security patches flying out of Apple at the moment. Hell, I see thousands of security issues in my IDP/DI/IPS signature files for all sorts of BSD stuff. The only thing stopping a massive virus attack on OS X is relatively small number of OS X systems out there.
The major difference beteen UNIX/Linux/MacOSX/FreeBSD and MS Windows - they way they build:
UNIX was system for multytasking-multiuser support
from the begginig. Security is
build in to these systems. Thus if you running these systems if even you get some kind of "virus" the damage it can do, and the probability it will be able to do something is very low.
MS Windows was grown from MS Dos - system without any kinds of security control, then Win 3.11 (same) then 95/98 and only then there was a merge with WinNT and Windows2000/XP was given.
Windows NT was secure but....
Who does work in WinXP with user permission? - No one - thus any virus/spyware has same permissions and can do anything. More then that you can't work normally with "user permissions mode".
In UNIX system you encuraged to work as user and it is problematic to work as "root" user - some programs just will not work. So you use "root" account for
adminitstration onlyAll is simple - UNIX has natural security control in it, when Windows adopted it, not in really natural way.