Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.

lowendlinux

macrumors 603
Sep 24, 2014
5,460
6,787
Germany
I'm talking about the phones if you haven't deduced yet.

That's nice being that the article wasn't about phone OS's. I do agree that the people have spoken and they by and large have chosen Android for whatever reason. Please go into a high end and profits rant now.
 

AFEPPL

macrumors 68030
Sep 30, 2014
2,644
1,571
England
iOS and OS X have been at the top of the list for a while.
No surprises. I regularly look at this sort of stuff and have posted similar reports before.
 

AFEPPL

macrumors 68030
Sep 30, 2014
2,644
1,571
England
That sentence makes zero sense...
What's the "rate of infection" for ANY consumer device? That data is not really known, so it has no meaning...

The findings are the finding, you can't dress them up or spin them. It's not data from another vendor bashing someone else. It's multiple independent sources reporting what is what - like it or not.
 
Last edited:
  • Like
Reactions: khha4113 and jamezr

throAU

macrumors G3
Feb 13, 2012
9,139
7,300
Perth, Western Australia
iOS and OS X have been at the top of the list for a while.
No surprises. I regularly look at this sort of stuff and have posted similar reports before.

It depends on how you count. I'll take the Apple vulnerability list over the Windows ecosystem vulnerability list any day of the week.

Windows vulnerabilities are regularly along the lines of

"A remote, unauthenticated attacker can take full control of your system"

vs. the Mac "vulnerability" typically (not always, there are exceptions, but they are rare) requiring user interaction in order to run.

They may both be vulnerabilities, but the windows threat level is generally far, far higher - so simply counting vulnerability numbers and claiming "mac has more, it is less secure" is complete bollocks.

I do enterprise security for a living...
[doublepost=1455722243][/doublepost]
Doesn't matter. Surface Phone is going to be part of that 90%.

A very, very small and insignificant part...
 

C DM

macrumors Sandy Bridge
Oct 17, 2011
51,392
19,461
That sentence make zero sense...
What's the "rate of infection" for ANY consumer device? That data is not really known, so it has no meaning...

The findings are the finding, you can't dress them up or spin them. It's not data from another vendor bashing someone else. It's multiple independent sources reporting what is what - like it or not.
Well, to be fair, the exploits themselves are certainly one statistic, but the rate at which they actually get exploited (in real life) is another statistic which is quite relevant and meaningful as well.
 
  • Like
Reactions: Zirel

AFEPPL

macrumors 68030
Sep 30, 2014
2,644
1,571
England
Well, to be fair, the exploits themselves are certainly one statistic, but the rate at which they actually get exploited (in real life) is another statistic which is quite relevant and meaningful as well.

My point was we don't know that statistic, so it's not something we can actually compare with any meaningful accuracy.
 

lowendlinux

macrumors 603
Sep 24, 2014
5,460
6,787
Germany
My point was we don't know that statistic, so it's not something we can actually compare with any meaningful accuracy.

Sure it is, but it's only part of the picture. I know know that the kernel I use has a bunch of exploits though I don't know which kernel but I can keep this news on the Arch and Linux forums so that they know I'm actually paying attention. The goal is zero exploits and until that number is zero there is something to work on.
 
Last edited:

AFEPPL

macrumors 68030
Sep 30, 2014
2,644
1,571
England
Some wacky logic in that thread around adding up the versions... most of the windows ones are IE related which is across all those platforms, so you cant count one bug 6 times, hence why the windows number is actually in real terms lower than OS X.
 

I7guy

macrumors Nehalem
Nov 30, 2013
35,142
25,216
Gotta be in it to win it
Well, to be fair, the exploits themselves are certainly one statistic, but the rate at which they actually get exploited (in real life) is another statistic which is quite relevant and meaningful as well.
That is exactly the point; and more so than the aggregate number on a platform. Heart bleed anyone? Zero day Windows?
 

AFEPPL

macrumors 68030
Sep 30, 2014
2,644
1,571
England
Unfortunately the reality is the reality,
iOS and OS X have huge issues with vulnerabilities, thats the statistic by the people that look at the software stack.....
 

Zirel

Suspended
Jul 24, 2015
2,196
3,008
Not sure if this was ever posted, but a very interesting read. It shows Windows and Android with less vulnerabilities than iOS and Mac OSX in 2015.

http://venturebeat.com/2015/12/31/s...lnerabilities-in-2015-mac-os-x-ios-and-flash/

Because Apple makes public every vulnerability found and fixed, while Microsoft doesn't.

Also, Android phones aren't Android alone, are Linux + Android + Google Apps, at least, and mostly have + OEM Apps + Carrier Apps. All summed, may be compared to an iOS installation.
[doublepost=1455820108][/doublepost]
Unfortunately the reality is the reality,
iOS and OS X have huge issues with vulnerabilities, thats the statistic by the people that look at the software stack.....

No, they don't. (see, I can also make vague and unfounded statements).
 

lowendlinux

macrumors 603
Sep 24, 2014
5,460
6,787
Germany
Because Apple makes public every vulnerability found and fixed, while Microsoft doesn't.

Also, Android phones aren't Android alone, are Linux + Android + Google Apps, at least, and mostly have + OEM Apps + Carrier Apps. All summed, may be compared to an iOS installation.
[doublepost=1455820108][/doublepost]

No, they don't. (see, I can also make vague and unfounded statements).
They make public every vulnerability they fix not all that are found.
 

AFEPPL

macrumors 68030
Sep 30, 2014
2,644
1,571
England
No, they don't. (see, I can also make vague and unfounded statements).

Let me guess, it's either a conspiracy against apple or click bait?
The facts are clear and independent, the iOS and OS X software stacks DO have more vulnerabilities - PERIOD.

Nothing vague and unfounded about it at all. The data is fully documented and publicly reported by multiple sources.
 

Zirel

Suspended
Jul 24, 2015
2,196
3,008
Let me guess, it's either a conspiracy against apple or click bait?
The facts are clear and independent, the iOS and OS X software stacks DO have more vulnerabilities - PERIOD.

Nothing vague and unfounded about it at all. The data is fully documented and publicly reported by multiple sources.

Whatever makes you happy.

Whenever someone gets their Windows files cryptolocked or their Android had a malicious app that took a photo, and now wants money for it, you are going to say that OS X and iOS are way worse.

Nobody credible in the security and privacy scene supports your view. Nobody!
 

AFEPPL

macrumors 68030
Sep 30, 2014
2,644
1,571
England
Apart from all the independent companies that make it their business..? So pretty much everyone then?
All the issues have a CVE number!! so you could double-check the claims say with http://www.cvedetails.com

And they give you a clear and accurate picture of where the data is obtained from...
"CVE vulnerability data are taken from National Vulnerability Database (NVD) xml feeds provided by National Institue of Standards and Technology." So you could also goto NIST directly if you wish..
 

chrfr

macrumors G5
Jul 11, 2009
13,703
7,267
Some wacky logic in that thread around adding up the versions... most of the windows ones are IE related which is across all those platforms, so you cant count one bug 6 times, hence why the windows number is actually in real terms lower than OS X.
Similarly, a significant number of the vulnerabilities reported for iOS and OS X are the same. A strong argument could be made that iOS and OS X should be counted together.
The reality, though, is that reporting patched vulnerabilities is pretty much irrelevant to anything. By this list, a severely exposed operating system with no patches whatsoever would appear more secure than anything else on the list.
 

I7guy

macrumors Nehalem
Nov 30, 2013
35,142
25,216
Gotta be in it to win it
Whatever makes you happy.

Whenever someone gets their Windows files cryptolocked or their Android had a malicious app that took a photo, and now wants money for it, you are going to say that OS X and iOS are way worse.

Nobody credible in the security and privacy scene supports your view. Nobody!
The metric by itself means nothing and has to be tempered with the severity and likelihood of infection. For example, how many ios devices were actually compromised by the various vulnerabilities against for example NIMDA or Code red.
 

Zirel

Suspended
Jul 24, 2015
2,196
3,008
Apart from all the independent companies that make it their business..? So pretty much everyone then?
All the issues have a CVE number!! so you could double-check the claims say with http://www.cvedetails.com

And they give you a clear and accurate picture of where the data is obtained from...
"CVE vulnerability data are taken from National Vulnerability Database (NVD) xml feeds provided by National Institue of Standards and Technology." So you could also goto NIST directly if you wish..

Yep, those who depende on scare tactics to sell their products will market this as much as they can.

Good assessment!
[doublepost=1455849674][/doublepost]
Similarly, a significant number of the vulnerabilities reported for iOS and OS X are the same. A strong argument could be made that iOS and OS X should be counted together.
The reality, though, is that reporting patched vulnerabilities is pretty much irrelevant to anything. By this list, a severely exposed operating system with no patches whatsoever would appear more secure than anything else on the list.

Exactly.

I would challenge anyone to point to me a vulnerability on that magic website were iOS 9.2.1 is affected, or OS X 10.11.3.
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.