Re: help me understand how a Mac is virtually immune to viruses?



On Mon, 16 Jan 2006 16:13:55 GMT, Joe Bergeron
<jabergeron@xxxxxxxxxxxxxxxxx> wrote:

>Now you do. I am a user of multple single-user single account Macs.
>When you set up a new Mac, you set up a default admin account.
>Otherwise, every user would be required to have two accounts on his Mac
>just so he'd have one that would allow him to install software. Some
>people advise this very strategy, but I haven't seen the need.

Interesting. When I set up OS X, that wasn't the case. And outside my
own network, my only experience with OS X is on company networks, where
the users are most certainly not set up with admin rights.

Kind of an interesting change here: MS (and those involved with MS
software) are finally making some headway towards getting the average
user to operate without admin privileges, and Apple is going the other
way. That effort to "simplify" things could bite back; it is well known
that the more privileges a user has in his normal operating environment,
the more vulnerable he is. An OS X user with admin privileges enabled,
for example, is as vulnerable to typical email worms and trojans as a
Windows user (that is, worms targeting Macs; obviously not the bulk of
worms out there now that target Windows).

_________________________________________________

Chris L Peterson
Cloudbait Observatory
http://www.cloudbait.com
.



Relevant Pages

  • Re: Security Update 2006-002 Released
    ... I need to do admin tasks often too, and nearly all of them can be ... And you think malware is always going to pop up an authentication ... have always been that way throughout the 20 years I've been using Macs. ... The root account is disabled by default. ...
    (comp.sys.mac.system)
  • Re: Security Update 2006-002 Released
    ... I need to do admin tasks often too, and nearly all of them can be done from a non-admin account. ... A non-admin user simply gets prompted for an administrator's username and password when doing something that needs admin rights. ... For the record I use and support Macs all day long at work, and at home when I'm not using this OpenBSD laptop for email and web access I'm using my Mac primarily for Photoshop, Google Earth, digitizing vinyl, and iTunes. ... the hassles of working in a non-admin account outweigh the benefits. ...
    (comp.sys.mac.system)
  • Re: Is there any way to fix Software Update in Standard user accounts?
    ... Macs. ... It would still require you to type an admin username and password before ... installing the updates. ... separate admin account and take away admin privs from the main one. ...
    (comp.sys.mac.system)
  • Re: Changing account from admin to standard
    ... They buy their Macs, they create the initial (admin) ... account, and they never think about accounts again. ... time -- surely if there were any real-world danger in this, ...
    (comp.sys.mac.system)
  • Re: Incoming E-Mail - cant create contact in OU
    ... central admin pool different than the web app. ... that account a little (if the web app is compromised or something, ... So I started with giving the app pool account domain admins permissions then ...
    (microsoft.public.sharepoint.windowsservices)