No OS is safe, expert warns

 

Linux and Mac not safer.

Preconceptions that some operating systems are safer than others are misguided, a security expert has claimed.

In reality all systems have their flaws which hackers will attempt to exploit and, despite some people’s belief Linux and Mac users are safer, all are vulnerable, said David Jacoby, a senior security researcher at Kaspersky.

“It doesn’t really matter what you use,” he told attendees at a Kaspersky press event in Munich.

“There is no such thing as a secure operating system.”

In particular, Jacoby looked at the security problems with Linux. One notable issue, he claimed, is that Linux is often left out of the patch cycle, while many hackers have been seen using vulnerabilities in Linux to carry out “drive-by download” attacks.

These attacks are initiated when a hacker compromises a server running on Linux and adds malicious code to websites hosted on that server. When a user visits the site a malicious file is downloaded onto their systems.

Companies need to have the total package to protect their systems, from the right technology and anti-virus to local hardening and stronger resource segmentation to prevent spreading infections, Jacoby said.

Furthermore, businesses should look to protect both servers and clients, he added.

“It’s about everything. Protection against malicious code, that is one thing, but that is not enough,” Jacoby added.

This article originally appeared at itpro.co.uk

Copyright © ITPro, Dennis Publishing


No OS is safe, expert warns
"@jp says "I suggest that operating systems will remain unsafe whilst other programs are permitted access." I suggest that operating systems will remain unsafe whilst there are users, software, ..."
By Ace
 
 
 
Comments: 9
johnpro2
Sep 24, 2010 8:03 AM
Criminals are not normally regarded as amongst the brightest members of society. Why do cyber crims seem to defy the norm ?

Jp
johnpro2
Sep 24, 2010 8:07 AM
I often boot linux from a non writable DVD. It has all the important apps to conduct routine business ..esp on line. It works perfectly with the HD disconnected.

Am I as safe as I think I am..?

Jp
Sams
Sep 24, 2010 9:12 AM
You need to make the distinction between safer in terms of vulnerabilities or safer in terms of real exploits in the wild. Even if you accepted the assertion that Linux and Macs are just as vulnerable as Windows (which I don't for the record), you still have to admit that he vast majority or real exploits for desktop systems are for Windows. I've never had a problem with exploits on any of my Linux desktops systems, and I don't know of anybody else that has.

I'm not sure if Kaspersky or this article are mixed up but it starts off talking about Macs and then goes on about linux server exploits as an example.
deteego
Sep 24, 2010 9:48 AM
Linux and Mac's are safer by design because of the way the OS's have been built up. Both have security systems (which people adhere to as a standard) where as the security approach that Windows uses assumes the user knows best about security

Models like ActiveX, where you have no idea about the software you are installing up until you actually install it (and similar examples in other areas) is what caused such a mess for security in Windows. It has gotten better in Vista/7, but in such a cumbersome ugly way

Not saying that Mac and Linux don't have security issues, its just that by design a lot harder then Windows
realitybites
Sep 24, 2010 10:14 AM
"No OS is safe, expert warns".. Expert of the bleeding obvious I say! Of course no OS is safe. You can't simplify security of OS's just like that. Security is a multi layered issue from the core kernel of the OS right down to the mindset/ability/knowledge of the person using it, whether it be desktop or server.

In short, (jedi hand gesture) no real news here, move along.

[edit] Gah.. Changed 'If course' to 'Of course'

Edited by realitybites: 24/9/2010 10:19:24 AM
cosmicharade
Sep 24, 2010 10:40 AM
Move along, nothing to see here people, move along..
johnpro2
Sep 25, 2010 8:55 AM
I suggest that operating systems will remain unsafe whilst other programs are permitted access.

The key is to lock down the operating system ...and in a crude way that can be achieved as mentioned in my previous post. In future years a solution will possibly be found.Educating home users in security is just not working. Malware is now way beyond just being an irritation, it is now a criminal issue.

Jp
deteego
Sep 25, 2010 11:32 AM
My theory in security is you have to keep the user (and environment) in mind. After all, if we were all just robots, there would be no point in security

Linux is safer then Windows because almost all software is installed from Official repositories, of which its almost impossible to put a virus into. If someone wants a program on Linux that does X, they search for it in the repository and download it, and if they can't find it in the repository they compile it from source. On the other hand, with Windows, you have to search the internet for such programs. Odds are, you will either find a program which does what you want (without all the malware/adware or even viruses) or you will find a program that does include such things.

This goes on many more levels, including the design of things such as ActiveX, which gives the users no indication that the control could be harmful until they actually install it (at which point its too late).
Ace
Sep 28, 2010 2:16 AM
@jp says "I suggest that operating systems will remain unsafe whilst other programs are permitted access."

I suggest that operating systems will remain unsafe whilst there are users, software, network connectivity. Like David Jacoby's comment, it's a nonsense and typically alarmist thing to say. Who would have thought an anti-virus/firewall vendor would say such a thing?

It's the acceptable level of insecurity people are concerned with, and that changes all the time.
Comments have been disabled for this article.
 
 
 
Top Stories
Australian miners send drones to work
In-depth: Unmanned aerial vehicles in the resources sector.
 
The New Zealand telco problem
Opinion: Could Telstra save Kiwi telcos?
 
IT price probe to 'name and shame' gougers
Industry ducking the issue, committee claims.
 
Sign up to receive iTnews email bulletins
   FOLLOW US...

Latest VideosSee all videos »

Latest Comments
Polls
Should the Government enact new legislation to protect copyright holders in the digital age?

   |   View results
Yes
  20%
 
No
  80%
TOTAL VOTES: 507

Vote