From: Jaimie Vandenbergh on
On Fri, 23 Apr 2010 15:11:17 +0100, Chris Ridd <chrisridd(a)mac.com>
wrote:

>On 2010-04-23 15:01:02 +0100, Dorian Gray said:
>
>> In article <1jhczgk.kykzja1dr4xbcN%nospam(a)nospamottersonbg.couk>,
>> nospam(a)nospamottersonbg.couk (Duncan Kennedy) wrote:
>>
>>> I
>>> use Wirus Barrier on my Macs - OK I *know but I don't want to be the
>>> first to be screwed by the first Mac virus in the wild and that is
>>> coming one day soon.
>>
>> But your Wirus Barrier software (or any other "anti-virus" software on
>> the Mac) will not protect against the as-yet-hypothetical "first Mac
>> virus in the wild" when the latter first appears, because it will be
>> new, see?
>
>Well not necessarily, as they should be able to detect things that look
>*like* a virus, ie identify viruses they haven't seen before. To an
>extent anyway.

But they're all trained up on Windows viruses. It seems pretty
unlikely that a true Mac virus will be easily matched from that base -
new Windows viruses may well though.

Cheers - Jaimie
--
"You know how dumb the average person is? Well, by definition,
half of 'em are dumber than THAT." - J.R. "Bob" Dobbs
From: Jim on
On 2010-04-23, Chris Ridd <chrisridd(a)mac.com> wrote:
>
>> 2. Your anti-virus software might introduce security holes in your
>> system.
>
> True.

Or, as with McAfee earlier this week, it might inaccurately identify a key
and perfectly legit piece of your system as Naughty and nuke it, leading to
Endless Reboot Rage.

(it identified svchost.exe as malware. Fun for all concerned)

Jim
--
Twitter:@GreyAreaUK
"[The MP4-12C] will be fitted with all manner of pointlessly shiny
buttons that light up and a switch that says 'sport mode' that isn't
connected to anything." The Daily Mash.
From: Duncan Kennedy on
Dorian Gray <D.Gray(a)picture.invalid> wrote:

> In article <1jhczgk.kykzja1dr4xbcN%nospam(a)nospamottersonbg.couk>,
> nospam(a)nospamottersonbg.couk (Duncan Kennedy) wrote:
>
> > I
> > use Wirus Barrier on my Macs - OK I *know but I don't want to be the
> > first to be screwed by the first Mac virus in the wild and that is
> > coming one day soon.
>
> But your Wirus Barrier software (or any other "anti-virus" software on
> the Mac) will not protect against the as-yet-hypothetical "first Mac
> virus in the wild" when the latter first appears, because it will be
> new, see?

Not strictly true - virus writers usually circulate their work first for
a start and users will send in copies when the first one is hit.
Kaspersky and VirusBarrier update daily (hourly if you like with
Kaspersky) so there is a bery good chance you will be updated before you
are hit.

And there is a rather nice 2-way firewall.

--
duncank
From: Pd on
Jim <jim(a)magrathea.plus.com> wrote:

> On 2010-04-23, Chris Ridd <chrisridd(a)mac.com> wrote:
> >
> >> 2. Your anti-virus software might introduce security holes in your
> >> system.
> >
> > True.
>
> Or, as with McAfee earlier this week, it might inaccurately identify a key
> and perfectly legit piece of your system as Naughty and nuke it, leading to
> Endless Reboot Rage.
>
> (it identified svchost.exe as malware. Fun for all concerned)

Following Microsoft's logic, McAfee should have identified that there
was a "virus" on the system, and simply refused to run. Or even deleted
itself. After all, a virus-infected system is preferable to a
non-bootable system, apparently.

--
Pd
From: Jim on
On 2010-04-23, Pd <peterd.news(a)gmail.invalid> wrote:
> Jim <jim(a)magrathea.plus.com> wrote:
>
>> On 2010-04-23, Chris Ridd <chrisridd(a)mac.com> wrote:
>> >
>> >> 2. Your anti-virus software might introduce security holes in your
>> >> system.
>> >
>> > True.
>>
>> Or, as with McAfee earlier this week, it might inaccurately identify a key
>> and perfectly legit piece of your system as Naughty and nuke it, leading to
>> Endless Reboot Rage.
>>
>> (it identified svchost.exe as malware. Fun for all concerned)
>
> Following Microsoft's logic, McAfee should have identified that there
> was a "virus" on the system, and simply refused to run. Or even deleted
> itself. After all, a virus-infected system is preferable to a
> non-bootable system, apparently.
>

"But...but if they'd installed that update it would have forced the users to
completely reinstall their system!"

"Good."

Jim
--
Twitter:@GreyAreaUK
"[The MP4-12C] will be fitted with all manner of pointlessly shiny
buttons that light up and a switch that says 'sport mode' that isn't
connected to anything." The Daily Mash.