MacDailyNews - Where Mac news comes first

MacDailyNews Poll

5 Day Most Commented

Opinion Archive

Current Headlines

Latest Joy of Tech

  • Latest Joy of Tech!

MacNN

AppleInsider

Macworld UK

TUAW

MacRumors

Yahoo! Finance AAPL

iTunes Top 10 Albums

Mac OS X Downloads

Wed, Oct 08, 2008 - 03:39 AM EDT  —  AAPL: 89.16 (-8.98, -9.15%)  |  NASDAQ: 1754.88 (-108.08, -5.8%)

Symantec details more security holes in Microsoft’s Windows Vista
Wednesday, July 26, 2006 - 01:45 PM EDT

"Security researchers at Symantec have published the second of three reports calling out potential security issues in Microsoft's next-generation Vista operating system, this time taking a shot at several of the product's user account control and privilege escalation features," Matt Hines reports for eWeek.

Hines reports, "According to the latest report, which follows a similar missive issued by Symantec in mid-July over flaws it believes to exist in the Vista's networking technologies, some of the very tools Microsoft is touting a security advancements in the OS may actually serve as loopholes."

"Another security issue highlighted by Cupertino, Calif.-based Symantec's report involves a new feature in Vista known as mandatory integrity control, which is also designed to help confine privilege escalation capabilities," Hines reports. "Despite the addition of the tools, the security company contends that attackers could still conceivably bypass the system to escalate their ability to attack computers."

"In the earlier report, Symantec researchers reported finding three different types of potential flaws in Vista's underlying software code, including the presence of stability issues that could cause the OS to crash when presented with attacks that utilize malformed files to deliver their payloads, some undocumented IP protocols with no known purpose in the product, and issues with some new protocols deep within the operating system's so-called network stack," Hines reports.

"Symantec has long made a large share of its revenue off of products used by businesses to secure Vista's Windows predecessors, and the companies remain what officials from both firms term as 'close partners,'" Hines reports. "However, in addition to making a significant effort to make its new OS more secure than its forbears, Microsoft has also charged headlong into the information security market, placing the companies as direct rivals in several sectors including Symantec's core desktop anti-virus niche."

Full article here.

MacDailyNews Take: By the end of 2005, there were 114,000 known viruses for PCs. In March 2006 alone, there were 850 new threats detected against Windows. Zero for Mac. While no computer connected to the Internet will ever be 100% immune from attack, Mac OS X has helped the Mac keep its clean bill of health with a superior UNIX foundation and security features that go above and beyond the norm for PCs. When you get a Mac, only your enthusiasm is contagious. - More info here.



Send us links! Email: webmaster@macdailynews.com

MacDailyNews and iPodDailyNews are Apple Store affiliates and if you buy something from the Apple Store within 24-hours after clicking any one of our Apple Store ads, we will receive an affiliate percentage from Apple. There is no extra cost to you. Canadians please use this link: Apple Store Canada. Thank you in advance for helping to support MacDailyNews and iPodDailyNews.

Apple Store Advertisements:
Buy a Mac for college and get a free iPod touch. Hurry! Expires 9/15.
iPod touch. The funnest iPod ever. Starting at $229. Free Shipping.
iPod nano. New design. New features. Starting at $149. Free shipping.
The all-in-one iMac. Now at speeds up to 3.06GHz. Free shipping. From $1199.
The more powerful Macbook Pro. Latest Intel Core 2 Duo, Multi-Touch trackpad, and more. From $1999.
MacBook. Now even Faster. Featuring Intel Core 2 Duo up to 2.4GHz. From $1099.
Visit the Apple Store today. Free ground shipping on all orders over $50.

MacDailyNews on Twitter

Related MacDailyNews articles:
Symantec: Microsoft’s ‘improvements’ to Vista could cause instability, new security flaws - July 18, 2006
Symantec researcher: At this time, there are no file-infecting viruses that can infect Mac OS X - July 13, 2006
Sophos: Apple Mac OS X’s security record unscathed; Windows Vista malware just a matter of time - July 07, 2006
Sophos Security: Dump Windows, Get a Mac - July 05, 2006
Symantec sues Microsoft to halt Windows Vista development - May 19, 2006
Security company Sophos: Apple Mac the best route for security for the masses - December 06, 2005
Computer columnist: anti-virus software purely optional for Apple Macs, not so for Windows - November 01, 2005
16-percent of computer users are unaffected by viruses, malware because they use Apple Macs - June 15, 2005

New invisible rootkit hits Windows including Vista - July 17, 2006
Microsoft demos Windows Vista on Apple MacBook Pro - July 01, 2006
What Microsoft has chopped from Windows Vista, and when - June 27, 2006
Windows Vista rips-off Mac OS X at great hardware cost (and Apple gains in the end) - June 13, 2006
CNET reporter: Apple Mac mini is my most ‘Vista Ready’ PC - May 24, 2006
Thurrott: Microsoft collapsing under its own weight, Gates has driven Windows Vista into the ground - April 20, 2006
Dude, you got a Dell? What are you, stupid? Only Apple Macs run both Mac OS X and Windows! - April 05, 2006
Why buy a Dell when Apple’s Intel-based computers will run both Mac OS X and Windows? - June 08, 2005
Windows users who try Apple's Mac OS X Tiger might not want to go back - June 07, 2005

  • Social Web
  • E-mail






Always -- Free ground shipping with orders over $50 at the Apple Store.

Reader Feedback: ( = registered)

Jul 26, 06 - 01:50 pm Comment from: Cubert

It appears that this new stinky cheese from Microsloth is in fact swiss.

Jul 26, 06 - 01:52 pm Comment from: AG Pennypacker

It's facinating that society, if you can call windows users such, put up with this. They would not tollerate it in any other aspect of their lives . . . . . or would they?

Jul 26, 06 - 01:54 pm Comment from: cptnkirk

Interestingly, there is also a new trojan attacking Mozilla/Firefox. The reports do not state whether it is all versions of Firefox or just the Windows version. My bets are on the latter!

MW: called: It's called VISTA because you can see through its holes, just like swiss cheese! LOL!

Jul 26, 06 - 01:57 pm Comment from: JEG

Surprise surprise. Windows users have a lot to look foward to.

Jul 26, 06 - 02:00 pm Comment from: January 24, 1984

The words Vista and Virus are very similar. Distressingly lose to an anagram.

Jul 26, 06 - 02:00 pm Comment from: c

This refers to an earlier Vista Beta...these issues have been resolved in the current beta build 5456.
Do remember that Vista is in Beta.

Jul 26, 06 - 02:08 pm Comment from: Thorin

"Do remember that Vista is in Beta."



No, it's actually in Alpha. When it

goes Beta, they box it up and ship

it. Gold Master is Service Pack 4.

LOL

Jul 26, 06 - 02:13 pm Comment from: macman

What happened to “security thru obscurity” myth? Wouldn’t this same myth currently apply to Vista? There can’t be as many instances of Vista Beta running as there are instances of OS X out there, yet there are already more viruses.

Jul 26, 06 - 02:20 pm Comment from: rasterbator

Symantec Helps Apple kick Micro$oft in the Head
News at 11

Jul 26, 06 - 02:21 pm Comment from: Microsoft Executive

There are reportedly 10,000 copies of Vista around. It got already some 10 or so virus around. When it will hit the same number of OS X installation it should be on par with the other Windows flavors and valiantly features some 20,000 virus and free malware available the day it is released.

Ahhhh, life is good when nothing one can count on changes.

Jul 26, 06 - 02:21 pm Comment from: Norm e.

Hey, I hear that Vista Beta 105,948,998.0.4 is really were we should judge the quality of Vista.

grin

Jul 26, 06 - 02:24 pm Comment from: Fact Checker

By the end of 2005, there were 114,000 known viruses for PCs

-------------
WRONG, there were 114,000 known </b>security threats</b> for PCs. There were two known security threats for OSX.

Just cause Apple says it, don't mean it's true.

Jul 26, 06 - 02:29 pm Comment from: oh please

"potential security issues" ???

If I had a dime for every "potential" (in other words NOT REAL) security threat in Windows I'd be richer than Bill Gates.

Windows security problems are all media hype and no beef. I have almost never had a virus on my PC, and when I buy Windows I will have totally zero ever again.

Seriously, a company as big as MS is NOT going to screw up like the media loves to say. Wait until the product isn't Beta, huh, Symantec? Oh but that wouldn't get you a headline and sell your needless software. If you know what the hell your doing you don't need to PAY for virus software people. I run 9 security programs on my PC and guess how many I paid for? Zero. Security cost == bull. My total cost of ownership (don't mac zombies like that terms?) is zip!

I guarantee you there will be no security holes in Vista once it's finished. Repeat: finished, not "beta" or "almost finished" or "eraly reviews"

Why else is Vista going to businesses before it goes to consumers? That's right--business know security a whole lot better than Mac zealots, and they TRUST Vista. It's a revolution in a box.

Jul 26, 06 - 02:32 pm Comment from: Wingsy

Don't overlook that Symantec is calling these "potential flaws". Although I have no doubt that we'll be seeing a lot of this once Vista arrives, until it does I wouldn't gloat too much over it. After all, we'd surely give Symantec a hard time if they were to announce "potential" security flaws in OSX.

Be patient. It'll come.

Jul 26, 06 - 02:36 pm Comment from: Martin

I don't understand, Microsoft "thinks" they are God, they are screwing all their business partners. But companies like Symantec keep telling them what they are doing wrong in Vista. Don't tell them anything let Vista die all by itself, and just maybe people will see the light and switch to Apple OS X.

Jul 26, 06 - 02:36 pm Comment from: oh please again

2 more reminders that chicken little is not about to fall -----

how the heck would symantec on the outside know more about windows security than, i dont know, the company that programmed it? symantec can't possibly know all the ins and outs that make vista tick, its just too big and complicated a product. furthermore any so-called flaw Symanec finds Microsoft found 2 years ago and it's already OK for reasons Symantec could never know.

second, guess where Symantec is located? right in Appletown, eg Cupertino. Symantec is taking kickbacks from Apple, if you think companies aren't that dishonest i've got news for you.

sad.

Jul 26, 06 - 02:44 pm Comment from: Someone Else

Wow!

To "oh please":

I really want your job. It's almost as easy as Enderle's. And even he has to pay for his PC. Your TOTAL cost of ownership is, as you said, zero. You must get a nice fat check from the MonkeyBoy every few days.

BTW, the big 3 automakers must all be in each other's pockets since they're all in Detroit. Not to mention all those competing companies right next door to each other in NYC, SFO, LAX, etc. You're as brilliant as the sludge in a sceptic tank. And you're as much a troll as any that ever slithered across these boards.

Just go away and spend that MonkeyBoy cash. And remember to wipe your slimy trail after you.

Jul 26, 06 - 02:46 pm Comment from: Bartsimpsonhead

...some undocumented IP protocols with no known purpose in the product, and issues with some new protocols deep within the operating system's so-called network stack

D'ya reckon these are to enable the CIA and FBI to spy into PC users' hard drives?

Big Brother working hand-in-hand with the Devil...

Jul 26, 06 - 03:08 pm Comment from: CheekyGit

Windows Vista = STINKY SWISS CHEESE!!!!!!

Jul 26, 06 - 03:14 pm Comment from: 9 security programs???

"If you know what the hell your doing you don't need to PAY for virus software people. I run 9 security programs on my PC and guess how many I paid for? Zero."

The eye-opening part of these statements isn't that you can get security programs for free...but rather that you run NINE security programs on your PC!

Nine?

As a serious question to oh please, why so many?? Do they take up a bunch of ram? Why 9??

Jul 26, 06 - 03:14 pm Comment from: Security Pro

Actually there were quite a few flaws in Mac OS X

One is still currently unfixed, the MetaData file exploit.

see:secunia.com/product/96/

Visit this site, search for "Mac OS X" under Vunerabilities menu for a list of over 200 Mac OS X vunerabilities. Yea that's not a typo.

Also mouse over the Apple logo in the Security Software sidebar.

By the way Dave Shroeders "hack my Mac webpage" was successful, someone suceeded and the "I wasn't authorized" was the cover up. Read the article on this site.

see:www.net-security.org/


Also anti-virus software is mostly ineffective, especially Symantec.

see:www.zdnet.com.au/blogs/securifythis/soa/Why_popular_antivirus_apps_do_not_work_/0,39033341,39264249,00.htm

Jul 26, 06 - 03:18 pm Comment from: Security Pro

And as proof, two security companies monitored a whole lot of ip addresses, in the many millions, and found out less than 1% are not spamming.

http://news.com.com/2100-7349_3-6098447.html?part=rss&tag=6098447&subj=news

Jul 26, 06 - 03:30 pm Comment from: Security Pro My Ass

From Secunia Vulnerability report:

"The Secunia database currently contains 0 Secunia advisories marked as "Unpatched", which affects Apple Macintosh OS X."

Jul 26, 06 - 03:32 pm Comment from: RC

"WRONG, there were 114,000 known security threats for PCs."

Whew...well that makes me feel a lot better...NOT!!!

Jul 26, 06 - 03:33 pm Comment from: Security Pro My Ass

...and from 2003 to 2006 Secunia has 71 Mac OS X vulnerabilities reported.

Again, 0 unpatched.

Jul 26, 06 - 03:35 pm Comment from: Zeke

"...guess where Symantec is located? right in Appletown, eg Cupertino. Symantec is taking kickbacks from Apple, if you think companies aren't that dishonest i've got news for you."

Yeah, and the eye on top of the pyramid on a dollar bill is a symbol of the Illuminati, who secretly control the whole world. Fascinated by symbolism and numerology, the globalist's favorite tactic is to leave blueprints to their plans "hidden in plain view." From this and messages delivered to the masses through the media and films to Time Warner's all-seeing eye, we are repeatedly reminded by the illuminati themselves that they are controlling us and are omnipresent. World leaders from Clinton to Prince William have been photographed proudly flashing the sign of the devil. Architecture around the globe is laid out to represent their occult icons or structured based on occult numerology (like the pyramid Mitter and had constructed at the Louvre, which is made of 666 pieces of gold glass). The New World Order's symbolism is everywhere and there are globalist fingerprints all over the September 11th attacks as well as the Madrid train bombing...and...and...They're polluting our precious bodily fluids!!!!!

Jul 26, 06 - 03:37 pm Comment from: Hmmm...

oh please again said "how the heck would symantec on the outside know more about windows security than, i don't know, the company that programmed it?"

If the companies knew all their own security holes there wouldn't be security holes, period. There wouldn't be patches or system crashes. You wouldn't need firewalls. Every system update would be for more features instead of for fixing flaws. Programmers are far from infallible, especially in large group projects. There are many companies dedicated to finding security holes that programmers don't see.

This applies to Apple, Microsoft and anyone who programs close to the machine levels.

How did your grammar teacher know more about your grammar and spelling than, i don't know, you who wrote it?

If you think Vista will be released bug free and invulnerable - go look at the history of Windows.

BTW, this isn't news. This is another neener-neener from Microsoft and Dell News (MDN) to Microsoft and it's getting old.

Jul 26, 06 - 03:40 pm Comment from: Stephen

Symantec is going to make a freakin' fortune off of Vista.....assuming of course Vista is ever released.

Jul 26, 06 - 03:51 pm Comment from: BrooklynNYC

I can't understand all of the hoopla surrounding this topic. You have to realize that if it were not for Microsoft's "holes" in its OS then Symantec and McAfee wouldn't exist. This is the one partnership that Microsoft keeps sacred. Microsoft has to close the gaps tight, yet lose enough so that the consumers don't start smelling the poop. Windows consumers are so used to having to need AV protection that it is second nature to them

Vista and any subsequent MS OSes will continue to rely on av software and that's the end of that. This topic is almost laughable because Microsoft and Symantec/McAfee are symbiant.

Jul 26, 06 - 04:03 pm Comment from: Oh Peas

oooo 9 free security programs that have to run to keep winBLOWS safe, geuss that just helps to make it all that much better than osx...

NOT

feel free to rant all you want about your precious winBLOWS, but if you do it here, be informed, and know what the fdsk you are talking about...

out

Jul 26, 06 - 04:24 pm Comment from: Security Pro

"The Secunia database currently contains 0 Secunia advisories marked as "Unpatched", which affects Apple Macintosh OS X."

visit the site again, this time scroll down.

The critical MetaData file exploit is only partially fixed

Jul 26, 06 - 05:01 pm Comment from: GmJm

Y'all can banter back and forth about theoretical vulnerabilities. Why do the Windows supporters put their OS where their mouth is.

Test #1 - Infection Speed Test

Get any size and style current computer with any version of Windows XP and get any Mac with Tiger (the most current version), start them up per the manufacturer's instructions, both with no additional anti-virus/spam software, and start cruising the same internet web sites. See who gets infected faster.


Test #2 - Infection Quantity Test

Keep both of these computers on and internet connected. Wait until they both have at least 1 incursion. Stop both computers and see how many the first one has. Will it be just 1-to-1 or more like 100-to-1? My guess it will be much larger than that. My Mac is about 4 years old and NOT ONE incursion has occurred, completely without any anti-virus/spy ware.

Actually, most Macs do NOT have any such protection. Apple corporate computers run with NO PROTECTION. This includes the demo computers at their stores.

...and our intelligent government decided that Windows was the way to go at the Dept. of Homeland Security. Fskin IDIOTS!!! Gates paid for someone's new D.C. house.

Jul 26, 06 - 05:33 pm Comment from: Undertaker

some of the very tools Microsoft is touting a security advancements in the OS may actually serve as loopholes.

Typical.

It's time MS puts a few BULLET holes in Vista, and deep-six the damn thing for good.

Better to leave the OS market to those who know WTF they're doing.

Jul 26, 06 - 05:54 pm Comment from: AL

Doesn't the DCMA and NDA apply to Symantec? They are reporting security flaws to the public. Haven't people been charged for reporting hidden secrets in programs? Windows is a program and has a draconic EULA.

Jul 26, 06 - 06:58 pm Comment from: imacDave

Windows in general: More back doors than a 100 room mansion.

1984 is alive and well in America.

Jul 26, 06 - 07:46 pm Comment from: Big Al

Symantec, hell, every anti-virus vendor lies about poor security to increase their software sales.

You can't believe what they say about Mac OS X when they call patched vulnerabilities exploits.

How can you believe what they say about Vista? Pre-release software is supposed to have bugs.

Jul 26, 06 - 08:44 pm Comment from: maczealot

Cubert:

Microsoft has combined Limburger with Swiss to create a new taste sensation with the same unique Redmond aroma.

Jul 26, 06 - 08:48 pm Comment from: Joe McConnell

To be fair, symantec sells anti-virus programs for Macs, which are only needed if someone is silly enough to click on an unknown link, just the same as windows computers. To my knowledge, no one here has admitted to to buying a symantec program for the mac, probably since that would indicate silliness.

So, symantec says there are potential weaknesses in Vista.................can that be any more than advanced marketing for their Vista software, needed or not?

Jul 26, 06 - 08:51 pm Comment from: Joe McConnell

been a while since I have been here, the magic word is barely visible.........using the latest Firefox. Could the genii resident work on that?

Jul 26, 06 - 09:06 pm Comment from: theNewMacDude

To Oh Please,

9 Security programs, huh. Do you think granny can get them set up on her home computer to be as safe as you think you are? I think not.

True story. Got a call from a grandma last night asking what can she do to save her files from her home computer that just got highjacked. I asked her if she had a backup of her docs, answer: no. I asked her if she had anti-virus software installed, answer: no, just anti-spyware. I told her that there's not much she could do and would probably need someone to come out and fix it for her at who know how much $$$$$.

I've been trying to get her to get a Mac but her DSL provider "Qwest" says that Macs are incompatible with MSN. (HaHaha) I tell her, I have Qwest and just use the internet connection. NO MSN NEEDED.

BTW, I know her from work, as I'm the IT support. Even though I could have helped somewhat, there was no way I was going to get my comfy little ass using my Mac at home to go mess with the crap that is Windows. So, every time I hear some stupid Windows apologist claim that they've never been infected, blah, blah, blah. I ask myself, can grandma and grandpa do the same. Answer....NOT! Windows truly sucks, but it pays my bills.

Jul 26, 06 - 10:32 pm Comment from: Dan Heinze

The end of the article says: "Microsoft has also charged headlong into the information security market, placing the companies as direct rivals in several sectors including Symantec's core desktop anti-virus niche."

Microsoft is now selling mal-ware removal software competing with Symantec. That's why Symantec doesn't mind publishing papers that make MS look bad.

Microsoft is now preparing a Zune to compete with their partners that were using their software (that isn't good enough for Zune) to try to compete with Apple iPods.

Microsoft screws all their partners and customers. Never do business with them.

Jul 26, 06 - 10:45 pm Comment from: humor me

I have almost never had a virus on my PC

I have NEVER had a virus on my Mac. Your point? "Almost" carries no merit.

Seriously, a company as big as MS is NOT going to screw up like the media loves to say.

Bigger is better and ALWAYS gets it right? Look at General Motors, AOL, Enron, etc.

I run 9 security programs on my PC and guess how many I paid for? Zero. Security cost == bull.

Time and hassle are also costs, so honestly what do you have invested in keeping nine security programs set up & working? FWIW my Mac is running ZERO third-party security patchware. No time or bother here in keeping things taped together.

I guarantee you there will be no security holes in Vista once it's finished.

"Once" is the operative word. What's Vista's current slip date again?

Anyway have fun babysitting your PC while waiting for the Holy Grail OS.
The rest of us have real things to do.

Jul 27, 06 - 02:27 am Comment from: Oh my...

I run 9 security programs on my PC

How can you stand using that crap then? nine, NINE!

And that STILL does not tell you anything?

Sheeesss dude, what do you need to open your eyes?

Amazingly you are not the only one Windows user just admitting that without vomiting, as if it was normal to go out, buy a computer and then turn into a terminal-illness practitioner just to keep alive the PC.

I have people who spend hours a week scanning, defragging, searching for malware on a regular basis and then "Oh, I ALMOST never get anything". Indeed, almost never get anything DONE with all those chores!

Jul 27, 06 - 04:48 am Comment from: maczealot

Oh my...:

A woman at work complained that she has to "spend $400 a year" to keep her PC clean of malware and the fact that her PC is unavailable for several days per year. She has spent more in 3 years to free her PC of malware than what she first spent to purchase her PC and all Microsoft software.

When I suggested that she consider a Mac she muttered, "I never thought of that.” I thought, “Lady, you are stupid-on-a-stick to put up with that nonsense.” Then I said, “Well, Macs can run both Windows and OS X, go to apple.com if you want to and check it out.” Her reply, ”I didn’t know that.”

Typical Windows user, “Man, these Microsoft shit sandwiches taste kinda funny and they’re expensive too, huh? But I hear that Microsoft Vista shit actually will taste better, great! Ya know, I've been wanting a new feces taste treat for so long.”

Jul 27, 06 - 05:55 am Comment from: Oh my...

Then I said, “Well, Macs can run both Windows and OS X, go to apple.com if you want to and check it out.” Her reply, ”I didn’t know that.”

True but never forget to stress the fact that the malware and virus that plague her PC will plague her Mac if she runs Windows on it. The problem is Windows not the hardware. She would have to spend the same $400 a year on a Mac with Windows on it UNLESS she runs Windows under virtualization with Parallels so to have Windows run in a sandbox.

Jul 27, 06 - 05:57 am Comment from: Microsoft Executive

I hear that Microsoft Vista shit actually will taste better

We can make people believe anything we like. We've done it for years.

Jul 27, 06 - 07:13 am Comment from: Emil

I'd take swiss cheese over Vista any day!
Atleast the cheese has some substance to it smile

Reader feedback page 1 of 1 pages:

Always -- Free ground shipping with orders over $50 at the Apple Store.

Add Your Feedback:

Register or Login

Name:

Email: (optional)

Emoticons | Allowed HTML Tags

Remember my personal information   Notify me of follow-up comments?

Please enter the "MDN Magic Word" you see in the image below: