Got a tip for us? Share it...

Researcher Set to Announce 20 Zero-Day Holes in Mac OS X


The H Security reports (via The Inquirer) that noted cybersecurity researcher Charlie Miller is set to announce the discovery of twenty new zero-day holes in Mac OS X that could offer hackers means of entry to compromise computers running the operating system. As zero-day holes, Apple is currently not aware of their existence, and thus has not yet had the opportunity to address them.

Using the controversial "security through obscurity" argument, Miller claims that Mac OS X users have typically been relatively free of malware threats due to a lack of hacker interest in the relatively small user base, not necessarily due to Mac OS X being more secure than other operating systems.

"Mac OS X is like living in a farmhouse in the country with no locks, and Windows is living in a house with bars on the windows in the bad part of town."

Miller is set to reveal his methods of finding the vulnerabilities, which include "fuzzing" systems by bombarding them with an overwhelming quantity of corrupted data, at the prominent CanSecWest conference next week in Vancouver. He is not, however, planning to disclose details of the security holes.

Top Rated Comments

(View all)

25 months ago
I remember seeing this in my RSS feeds this morning. Time for more security updates.
Rating: 0 Positives / 0 Negatives
25 months ago
I will agree that Windows is like living in the bad part of town.

If only everyone were as noble as these people.
Rating: 0 Positives / 0 Negatives
25 months ago
I hope not. My primary reason in switching with a mac was no viruses and easy to use interface.
Rating: 0 Positives / 0 Negatives
25 months ago
I'd lvoe to see an Apple apologist answer this.

Fact is, nobody gives a $%^& about a mac.
Rating: 0 Positives / 0 Negatives
25 months ago


Fact is, nobody gives a $%^& about a mac.

Long may that continue.
Rating: 0 Positives / 0 Negatives
25 months ago
don't really care why I'm safe, important thing that I'm safe :) and 20 holes is really small compared to millions of viruses.
Rating: 0 Positives / 0 Negatives
25 months ago

I'd lvoe to see an Apple apologist answer this.

Fact is, nobody gives a $%^& about a mac.


I dunno. Every time someone even says the word "virus" all the Mac fans jump out and say things like "Not for us! There are no viruses for the Mac!" (Myself included.) For the last 10 years, it's been the same smug, condescending battle cry. "No viruses! Not here! Not us!"

You don't think that the first guy to create an actual, self-replicating virus on OS X, the first guy to prove them all wrong, the first guy to stick it in everyone's face, wouldn't become as famous as Steve Jobs and Linus Torvalds themselves?

You don't think that somewhere out there is a hacker who wants to make a name for himself?

That's why I don't buy "security by obscurity".
Rating: 0 Positives / 0 Negatives
25 months ago
Still no known viruses...eat that.:)
Rating: 0 Positives / 0 Negatives
25 months ago
Hopefully the 0-days will get released after they're patched!

Maybe before the MBPs get updated.

(I'm just kidding. Pigs will fly before the MBPs get updated.)
Rating: 0 Positives / 0 Negatives
25 months ago

I'd lvoe to see an Apple apologist answer this.

Fact is, nobody gives a $%^& about a mac.


Answer what? There isn't a question.

I've never been under the illusion that OS X was perfect. Nor have I thought that the smaller market share or higher computer literacy among those that use OSX was a deterrent for hackers trying to make a buck.

However, The existence of those bonuses to OS X security does not mean that OS X is not build atop a more secure foundation.

Besides, as a consumer it's an easy choice: Windows has holes that are exploited on a monthly basis. OS X has no known Viruses or Worms in the wild. For all intents and purposes, it is currently in a state of perfection. When someone managed to bring hollywood to its knees, or 25% of college students across the US lose their senior projects, then we'll have a problem. But no one has managed that yet.
Rating: 0 Positives / 0 Negatives

[ Read All Comments ]