Linked by Thom Holwerda on Fri 20th May 2011 20:37 UTC
Apple I have personally tried to pretty much let the whole MAC Defender trojan thing pass by, since we're not a security website. However, we have an interesting turn of events this week. An article over at Ars Technica quotes several anonymous Apple Store employees as saying that the infection rate of Macs brought into the Apple store has gone up considerably. More interestingly though, Apple's official policy states that Apple Store employees are not allowed to talk about infections to anyone - they're not even allowed to inform Mac owners if they find the infection without the customer's knowledge. Another interesting tidbit: Apple mandates the use of Norton Antivirus on company Macs, according to one Apple Store genius.
Thread beginning with comment 474030
To view parent comment, click here.
To read all comments associated with this story, please click here.
RE[2]: ???
by ecpeachy on Fri 20th May 2011 21:13 UTC in reply to "RE: ???"
ecpeachy
Member since:
2010-06-07

yea but that very policy is bad for their public image, besides, uneducated users are the root of this kind of malware spread in the first place.

Reply Parent Score: 1

RE[3]: ???
by Kroc on Fri 20th May 2011 21:25 in reply to "RE[2]: ???"
Kroc Member since:
2005-11-10

Right, so they should advise _everybody_ to run Norton just because some people download an install a shady app? We’re not talking about viruses here, we’re talking about user responsibility. No software can protect against users making poor judgements, and even when it tries they can often ignore it. I’ve seen people switch the AV off because it was preventing them from downloading something.

Apple’s policy here might be akin to sticking its head in the sand, but it’s still saner than stating that all Mac users should buy Norton.

Reply Parent Score: 1

RE[4]: ???
by Thom_Holwerda on Fri 20th May 2011 21:29 in reply to "RE[3]: ???"
Thom_Holwerda Member since:
2005-06-29

Who's talking about advising Norton?

Apple should be responsible. They should've released an official MAC Defender-removal tool within days of its arrival. They should've updated applications like Safari, the unzipper, Mail.app, and so on right away to recognise and block the trojan.

Reply Parent Score: 8

RE[4]: ???
by ecpeachy on Fri 20th May 2011 21:47 in reply to "RE[3]: ???"
ecpeachy Member since:
2010-06-07

Apple's official policy states that Apple Store employees are not allowed to talk about infections to anyone - they're not even allowed to inform Mac owners if they find the infection without the customer's knowledge


sorry I wasn't talking about the Norton part, although its good to mandate an AV solution on corporate computers.

Reply Parent Score: 2

RE[4]: ???
by JairJy on Sat 21st May 2011 02:56 in reply to "RE[3]: ???"
JairJy Member since:
2011-05-21

This is social resposability:
http://www.microsoft.com/security/pc-security/antivirus-rogue.aspx

Microsoft cares about user security more than any other company. Microsoft Security Center offers info about different kinds of malware and social enginering scams. Also, Microsoft gives an Antivirus for free.

Reply Parent Score: 2

RE[4]: ???
by Kivada on Sat 21st May 2011 07:24 in reply to "RE[3]: ???"
Kivada Member since:
2010-07-07

NortoN? You're kidding right? Just use the OS X port of ClamAV http://www.clamxav.com/ OSS to the rescue again...

Nah, you get whats coming to you if you blindly follow every advertisement and install random sketch files because the flashy thing says to.

Take it the same way as the "Nigerian", everyone has revived some variant of this, it's been floating around for DECADES, and yet every few months we hear yet another story of some moron that tossed their life's savings into the abyss.

Reply Parent Score: 2

RE[4]: ???
by wocowboy on Sat 21st May 2011 11:35 in reply to "RE[3]: ???"
wocowboy Member since:
2006-06-01

Exactly. I've been around Windows machines for ages and have seen dozens of scams like this where a real-looking window pops up that says you have a virus and would you like us to scan/clean for you? HELL NO! I realize not all users are educated enough to realize this UNSOLICITED offer is not legitimate, but the whole process does require you to enter your administrator password, and then later enter your credit card number, which one would think would look awfully suspicious, but I guess it doesn't to the "average" user. To me this is even stretching the definition of a virus, which to me is something that takes over your computer completely without your knowledge or authorization having simply gone to an evil web page or opened a legit-looking jpeg file from someone you know in an email from them.

I do think Apple should inform customers if something is found on their computer and cleaned up, such as this problem is, it is a very easily remedied problem, only taking 5 minutes to get rid of. Then the customer would be educated next time they see something like this pop up on their machine.

Reply Parent Score: 1

RE[4]: ???
by imaginant on Sat 21st May 2011 18:43 in reply to "RE[3]: ???"
imaginant Member since:
2010-02-26

I wonder if you are missing the point. If there is a real security threat, Mac Users should be informed, especially since it is their heedlessness (those that are affected, not all Mac users) which contributes to the problem. There is NO need to recommend that users use Norton. There IS a need to reinforce the notion that no unsolicited software should ever be allowed to install by typing in your password. By not admitting the problem, Apple ignores a great opportunity to use this as a teaching point in the One-on-one program, which many of the unsophisticated users purchase. The same goes for Genius appointments. Both of these programs provide exceptional value for Mac users. Why undermine them?

Reply Parent Score: 1

RE[4]: ???
by mrstep on Sat 21st May 2011 21:22 in reply to "RE[3]: ???"
mrstep Member since:
2009-07-18

They should educate users to either buy through the App Store or to NOT just type in their password and hit 'OK' when they're web surfing and happen to get a sudden prompt. But God no, don't push Norton or crap like that - not to mention, exploits routinely get past those until they have them in their profile, which means... yeah, you better just not blindly type in your password when the prompt shows up.

But then, somehow that escapes large numbers of computer users.

Maybe Lion will have a 'lock-down' by default to red-flag any software not signed / delivered through a secure channel. That's not to say it shouldn't allow it (I know I'm personally not interested in having a full-fledged machine that I can't even do my own development anymore!), just that many non-tech users would be safer if it had more warnings about the software being unsafe - or even making users go to Preferences to specifically authenticate and click on 'Allow Unsafe Programs'. Maybe people would thing a second time?

Reply Parent Score: 1