Apple and OS security--communication is key

TalkBack 23 of 37:

Next »

« Previous

• Thread View
• Flat View

Sigh, Back

"This 'functionality' could be considered a security hazard. I wonder- can this feature be turned off? This functionality exists in Windows 2000/XP/2003 too, but it must be set up by an administrator."

Yup. Well, it is less that it can be turned off and more that you just don't use it. I have my Software Update set to check everyday. It can be set to Never. While I won't dispute that it does do some things at the Root level, I don't go there. And, the software that is updated through Software Update is only from Apple and I certainly trust them to know what they are doing with whatever files they need to get to.

If you choose not to use Software Update, you are provided links to the Apple page that has the update and can choose to do whatever; more research, check out message boards, download the update or not. Still, once you download the update and decide to install, it requires a password, as in user interaction.

"You must have misread my last post. The behavior you are describing it identical in Windows for non-administrative accounts."

Didn't misread. The difference is that you don't have to set up a non-administrative account in Mac OS X, it is the default. While Super Geek IT Guy knows to set up all the boxes at work as non-admin, Joe Blow doesn't and runs as root happy as a clam not knowing any better.

"I was arguing against the assumption that Windows lacks the ability to be secured."

I never said that Windows lacks the ability to be secured. I've been on boxes where you can't even change the freaking clock when it is 15 minutes off much less install or update any software. I've also been on boxes where I have had unfettered access to everything, could install or uninstall programs, go into the Registry, do whatever.

The underlying question is: Why does Windows run as root as the default?

Again, Joe Blow Dude You're Getting A Dell just wants to plug the thing and get it to work. He doesn't want to have to set up a non-administrative account. He doesn't even want to sit there and dealing with updating the machine. And he is the weak link in the virus propagating chain, not the locked down workstations at Acme Widgets.

Posted by: MonsterPuppy   Posted on: 06/04/04 You are currently: a Guest | Members login | Terms of Use

Alert moderator to an offensive message

Subscribe to this discussion via Email or RSS

SponsoredWhite Papers, Webcasts, and Downloads

• VMware Infrastructure: A Guide to Bottom-Line Benefits VMware Frustrated by the costs of maintain ever larger data centers?or building ... Download Now
• Five Steps to Determine When to Virtualize YourServers VMware Server virtualization isn't just for big companies. Entry-level ... Download Now
• The Impact of Virtualization Software on Operating Environments VMware Today's use of virtualization technology allows IT professionals to ... Download Now