5 ms·
Use Linux :) there is no other option
by thewhitetulip 9y ago
Use Linux :) there is no other option
- aplummer 9y agoI think a Mac would work too, but that relies on trusting individuals.
- MertsA 9y agoHow would switching to macOS provide any protection against an APT? Against Malware in general yeah sure but against the NSA or FSB in a targeted attack I don't see how that benefits you at all. If the NSA can put the screws on Microsoft then Apple should be no different. Apple refusing the FBI is one thing but faced with a gag order and an NSL their only recourse is to appeal to a secret court that basically always sides with the government. Also as of late it seems like macOS has been nothing but security incident after security incident like the recent bug where encrypted disks had a password hint of the decryption password or when somebody found out that the system preferences app was basically using an undocumented API that had no authorization at all and gave root access. Or that keychain vulnerability that gave complete access to the entire keychain to anything running in a web browser! I think an APT would have a field day if their targets started using macOS.
- luch 9y agoEveryone who think they are safe using macOS should see this presentation : https://www.youtube.com/watch?v=q7VZtCUphgg https://www.youtube.com/watch?v=q7VZtCUphgg Patrick Wardle has reversed the C2 com protocol and found it had "advanced" capabilities (remote exec, key and mouse sniffing, screenshot, etc.). The malware was found on several thousands Macs too (mostly in the US).
- mafsedan 9y agoApple pays people to "astroturf" that they're immune from Viruses and backdoors. IMHO, that makes them much worse than Microsoft.
- srcmap 9y agoAny suggestion a good tools (good source one) on mac that can scan and detect this kind of malware?
- luch 9y agothe guy in the video has created a bunch of "osx sysinternals" tools for this exact purpose : https://objective-see.com/products.html https://objective-see.com/products.html.
- tim333 9y agoWell, nothing's totally secure. You can but reduce the odds of having problems and Macs seem to be hit less. For example in the N Korea hack on Sony the Macs survived https://9to5mac.com/2014/12/18/sony-hack/ https://9to5mac.com/2014/12/18/sony-hack/ >“Some people had to send faxes. They were dragging old printers out of storage to cut checks,” she said. “It was crazy.” ... "People using Macs were fine,” she said. She said most work is done on iPads and iPhones. Perfect is the enemy of good and all that.
- MertsA 9y ago>Macs seem to be hit less. Yes but my point is that this is completely irrelevant to an APT. When an attacker moves from opportunistic to targeted having an OS with a lower adoption rate isn't going to matter. They aren't going after the most amount of victims possible, they're going after you specifically.
- thewhitetulip 9y agoMac? No!! Apple controls every aspect of your life on a Mac. Linux and especially custom built ISO is your only option for privacy. Plus if you assemble the RAM and processor by yourself, you never know how much viruses are there in our bootloader!
- partycoder 9y agoMany open source projects are infiltrated. You may use Linux but if you run on x86 you are already owned.
- 0xfeba 9y agoLike what?
- deleted 9y ago[deleted]
- SEJeff 9y agoNot via Linux, but via the IME that Intel puts on every CPU with full access to all memory and the network cards.
- partycoder 9y agoOne source of entropy in Linux is the RDRND instruction. If you control or predict its output you can do a lot of harm.
- SEJeff 9y agoIt really depends on a lot of the software as well. Linux doesn't inherently trust just the CPU instructions for entropy. In fact, it recently borrowed a new feature from OpenBSD and added it called getrandom(): https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c6e9d6f38894798696f23c8084ca7edbf16ee895 https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/lin...
- peterwwillis 9y agoLinux is secure in the sense that nobody can use it.