Wednesday, June 22, 2011

Apple is fighting against Mac Defender

Apple regularly updates in the background, without having the user doing anything, the database of protection against Malwares, the biggest one being Mac Defender, and just as often, new versions that are not detected by the OS appear. Unfortunately the system is made in such a way that Apple can catch-up with the pirates, but never pass them, they are always one play ahead.
One of the reasons that it is so easy for pirates to make new undetected versions is due to the way of working of the system. Just like many anti-virus softwares, it keeps a virus signature database, and when a software is downloaded the signature is compared to the ones in the database. If there is a match, the user is warned.
Probably because there was not much time to implement the system, Apple didn't protect it very well. The signatures used to identify Trojan horses are stored in a simple plist file that is not even encrypted (/System/Library/CoreServices/CoreTypes.bundle/Contents/Resources/XProtect.plist).

.

It makes the "work" of the pirates a little too easy, as they can find out in just a few clicks what part of their code they have to change to make their malware invisible? again.

The only possible solution for Apple in the long run will be to educate Mac Users, but it is understandable that Apple doesn't want to start warning its customers about those risks after spending years advertising the Mac as being "virus free". For now, the solution of the protection provided will force the company to keep a team working on the detection of the new versions to update the database as fast as possible.

Source: http://feeds.hardmac.com/~r/hardmac/~3/1mi7sLbGrXo/apple-is-fighting-against-mac-defender

guitar keith urban versus nick cannon steve nash school hail

No comments:

Post a Comment

Note: Only a member of this blog may post a comment.