3 ms·
Security software is a band-aid on vulnerable software and users installing things they shouldn't. Part of the OSX security strategy is to minimize users insta
by superuser2 11y ago
Security software is a band-aid on vulnerable software and users installing things they shouldn't.
Part of the OSX security strategy is to minimize users installing things they shouldn't by making it difficult (enforced code signing, confirmations when opening an unsigned or new application). The other side is minimizing attack surface for exploits by staying up-to-date, not shipping crap like Java unless the user explicitly needs it, and (increasingly) sandboxing applications to user-approved subsets of the filesystem.
Bolt-on detection and resolution of malware infections is just not a part of the OSX security ecosystem like it is with Windows.
Little Snitch can help give you a picture of what's going on with regard to your network card, but at the end of the day malware can usually hide its traffic in an otherwise-trusted application to avoid that sort of detection.
- mey 11y agoI believe in defense in depth. There is always going to be an escape. Within the last month there has been several different privilege escalations possible in OSX. While I appreciate OSX having a strong security model, secondary solutions are desirable too me.
- AdieuToLogic 11y ago> I believe in defense in depth. ... While I appreciate OSX having a strong security model, secondary solutions are desirable too me. You might want to check out mtree(8) then. It's serves well as the FreeBSD/OS-X Tripwire[1] equivalent. 1 - http://www.tripwire.com http://www.tripwire.com