One citation, describing flaws in the current implementations. http://web.archive.org/web/20080111062141/http://www.matasano.com/log/986/what-weve-since-learne

One citation, describing flaws in the current implementations. http://web.archive.org/web/20080111062141/http://www.matasano.com/log/986/what-weve-since-learned-about-leopard-security-features/ http://web.archive.org/web/20080111062141/http://www.matasan... Another (fairly poorly written) article about it: http://www.tomshardware.com/news/hack-windows-security-snow-leopard,8704.html http://www.tomshardware.com/news/hack-windows-security-snow-... I'm sure you can find more if you dig around. Also, non-executable stack has been supported OSX since it was shipped, but non-executable heap is new. I believe (I'm not sure) that non-executable stack is also disabled fairly often because of trampolines in GCC. Security in OSX isn't broken, of course, but the mitigation measures are strongest in Windows, out of the mainstream OSes these days.