Mac OSX Upgrade can turn Firewall OFF

Message boards : Number crunching : Mac OSX Upgrade can turn Firewall OFF
Message board moderation

To post messages, you must log in.

AuthorMessage
W-K 666 Project Donor
Volunteer tester

Send message
Joined: 18 May 99
Posts: 19048
Credit: 40,757,560
RAC: 67
United Kingdom
Message 670546 - Posted: 1 Nov 2007, 12:01:45 UTC

According to a story on the BBC upgrading to the latest version of the OS can turn the Firewall OFF if it had previously been ON. There is also no warning.

Leopard upgrade hits Mac firewall.

I'm not a mac user but thought you should be informed.

Andy
ID: 670546 · Report as offensive
Profile ML1
Volunteer moderator
Volunteer tester

Send message
Joined: 25 Nov 01
Posts: 20258
Credit: 7,508,002
RAC: 20
United Kingdom
Message 670559 - Posted: 1 Nov 2007, 12:41:10 UTC - in response to Message 670546.  
Last modified: 1 Nov 2007, 12:43:06 UTC

According to a story on the BBC upgrading to the latest version of the OS can turn the Firewall OFF if it had previously been ON. There is also no warning.

Leopard upgrade hits Mac firewall.

I'm not a mac user but thought you should be informed.

Interesting bit of media scaremongering and all the more interesting for the very "Windows-esq" view taken of what is "needed"...

This quote in there sums it up nicely:

"However, in practice they just don't seem to become real-world problems," he added. "The old wisdom still stands: if you want to avoid viruses and worms, get a Mac."


Now for the really hard part to follow:

No OS actually needs or even should need a 'firewall' for reliance on security.

Just as with a Mac, you can safely run a Linux or a unix or a BSD system without any firewall whatsoever.

Note also that if you are not running any 'internet services', there is nothing for the internet to attack in the first place!


So, in short, if you are running Windows, then yes a firewall is pretty much essential to try to plug the worst of the various 'holes in the OS'.

No other OSes require a firewall as far as I know.


Still a fun article. It will test the Mac Marketing Machine to twist that one as another ADVANTAGE for using a Mac.

Regards,
Martin

See new freedom: Mageia Linux
Take a look for yourself: Linux Format
The Future is what We all make IT (GPLv3)
ID: 670559 · Report as offensive
Profile SATAN
Avatar

Send message
Joined: 27 Aug 06
Posts: 835
Credit: 2,129,006
RAC: 0
United Kingdom
Message 672594 - Posted: 5 Nov 2007, 16:18:51 UTC

Well common sense qould tell you that things would be reset if your installing a new OS. Only a muppet wouldn't check.

There making such a fuss out of this its rediculous!
ID: 672594 · Report as offensive
NewtonianRefractor
Volunteer tester
Avatar

Send message
Joined: 19 Sep 04
Posts: 495
Credit: 225,412
RAC: 0
United States
Message 672651 - Posted: 5 Nov 2007, 18:10:34 UTC

Why would they reset the firewall to off? Any sane person would have it programmed in to be on by default, yes? This reminds me of microsoft: leaving random stuff on or off by default. This just sucks...
ID: 672651 · Report as offensive
Profile Gecko
Volunteer tester
Avatar

Send message
Joined: 17 Nov 99
Posts: 454
Credit: 6,946,910
RAC: 47
United States
Message 672657 - Posted: 5 Nov 2007, 18:27:42 UTC - in response to Message 672594.  

Well common sense qould tell you that things would be reset if your installing a new OS. Only a muppet wouldn't check.

There making such a fuss out of this its rediculous!


I had the same impression when I read the article.

When updating an OS, I ALWAYS double check my config. settings and user preference settings, STARTING w/ log-in, Security/Firewall and wireless ( re: Airport for non-Appleheads).

To assume that everything remains perfect and unaffected in ANY OS install/upgrade is naive at best, and borderline negligent behavior if an experienced user.

Have yet to come across a major OS upgrade that didn't scramble an egg.....somewhere.

Agreed: A little common-sense would have been better applied in these articles, instead of "shock" IMO.


ID: 672657 · Report as offensive
Profile ML1
Volunteer moderator
Volunteer tester

Send message
Joined: 25 Nov 01
Posts: 20258
Credit: 7,508,002
RAC: 20
United Kingdom
Message 672802 - Posted: 6 Nov 2007, 0:28:18 UTC - in response to Message 672651.  

Why would they reset the firewall to off? Any sane person would have it programmed in to be on by default, yes? This reminds me of microsoft: leaving random stuff on or off by default. This just sucks...

Simple: On a *nix system that is a client-only system, a firewall is completely superfluous (not needed, additional 'fluff' that is a hindrence). There are no 'open ports' there for anything on the internet to try to attack in the first place. A little like trying to shout at someone whom is completely deaf.

Agreed that on a Windows system, a firewall is considered to be pretty much essential. That is NOT the case for a Mac or for Linux.

Note also that there are no live viruses for Macs or for Linux...

So perhaps not so 'suckie' as you might first believe.

Regards,
Martin

See new freedom: Mageia Linux
Take a look for yourself: Linux Format
The Future is what We all make IT (GPLv3)
ID: 672802 · Report as offensive
Profile zoom3+1=4
Volunteer tester
Avatar

Send message
Joined: 30 Nov 03
Posts: 65736
Credit: 55,293,173
RAC: 49
United States
Message 673208 - Posted: 6 Nov 2007, 23:35:39 UTC - in response to Message 672802.  
Last modified: 6 Nov 2007, 23:37:08 UTC

Why would they reset the firewall to off? Any sane person would have it programmed in to be on by default, yes? This reminds me of microsoft: leaving random stuff on or off by default. This just sucks...

Simple: On a *nix system that is a client-only system, a firewall is completely superfluous (not needed, additional 'fluff' that is a hindrance). There are no 'open ports' there for anything on the internet to try to attack in the first place. A little like trying to shout at someone whom is completely deaf.

Agreed that on a Windows system, a firewall is considered to be pretty much essential. That is NOT the case for a Mac or for Linux.

Note also that there are no live viruses for Macs or for Linux...

So perhaps not so 'suckie' as you might first believe.

Regards,
Martin

Well I guess what the HardOCP reported on Wednesday October 31, 2007 is fiction then:

Mac OS Malware Targets Porn Surfers So who says the MAC has no malware? The MAC just wasn't a big enough target until recently, Of course with growth in the user base comes attention from the Malware makers It seems. The MAC is growing and others are watching and from what I've read, They see the MAC as a vulnerable target or conquest. Remember Martin If the Windows OS were a lot smaller and some Other OS were Dominant then some Other OS would be the Target. So count Yourself lucky, As no OS is ever going to be Perfect as It hasn't been made/invented yet and there will always be flaws and/or parts to be improved upon to get one closer to that goal.


No flames or disrespect was meant of course, It's just an observation on My part.
The T1 Trust, PRR T1 Class 4-4-4-4 #5550, 1 of America's First HST's
ID: 673208 · Report as offensive
Fred W
Volunteer tester

Send message
Joined: 13 Jun 99
Posts: 2524
Credit: 11,954,210
RAC: 0
United Kingdom
Message 673214 - Posted: 6 Nov 2007, 23:46:02 UTC - in response to Message 673208.  


Well I guess what the HardOCP reported on Wednesday October 31, 2007 is fiction then:

Mac OS Malware Targets Porn Surfers So who says the MAC has no malware? The MAC just wasn't a big enough target until recently, Of course with growth in the user base comes attention from the Malware makers It seems. The MAC is growing and others are watching and from what I've read, They see the MAC as a vulnerable target or conquest. Remember Martin If the Windows OS were a lot smaller and some Other OS were Dominant then some Other OS would be the Target. So count Yourself lucky, As no OS is ever going to be Perfect as It hasn't been made/invented yet and there will always be flaws and/or parts to be improved upon to get one closer to that goal.


No flames or disrespect was meant of course, It's just an observation on My part.


There's a world of difference between malware and viruses. A perfect firewall (were there such a thing) could not protect you if you deliberately download an app. By definition a virus spreads without you having to do anything to help it - other than forgetting to protect yourself either by having a firewall or running a nix-based system.

F.
ID: 673214 · Report as offensive
Profile zoom3+1=4
Volunteer tester
Avatar

Send message
Joined: 30 Nov 03
Posts: 65736
Credit: 55,293,173
RAC: 49
United States
Message 673224 - Posted: 7 Nov 2007, 0:06:56 UTC - in response to Message 673214.  
Last modified: 7 Nov 2007, 0:08:13 UTC


Well I guess what the HardOCP reported on Wednesday October 31, 2007 is fiction then:

Mac OS Malware Targets Porn Surfers So who says the MAC has no malware? The MAC just wasn't a big enough target until recently, Of course with growth in the user base comes attention from the Malware makers It seems. The MAC is growing and others are watching and from what I've read, They see the MAC as a vulnerable target or conquest. Remember Martin If the Windows OS were a lot smaller and some Other OS were Dominant then some Other OS would be the Target. So count Yourself lucky, As no OS is ever going to be Perfect as It hasn't been made/invented yet and there will always be flaws and/or parts to be improved upon to get one closer to that goal.


No flames or disrespect was meant of course, It's just an observation on My part.


There's a world of difference between malware and viruses. A perfect firewall (were there such a thing) could not protect you if you deliberately download an app. By definition a virus spreads without you having to do anything to help it - other than forgetting to protect yourself either by having a firewall or running a nix-based system.

F.

Malware includes viruses, Trojan horses, worms, etc. The wikipedia and others agree on this, I'll even throw in the Google search I made too.

http://en.wikipedia.org/wiki/Malware
http://searchsecurity.techtarget.com/sDefinition/0,,sid14_gci762187,00.html
http://www.google.com/search?q=malware+definition&ie=utf-8
The T1 Trust, PRR T1 Class 4-4-4-4 #5550, 1 of America's First HST's
ID: 673224 · Report as offensive
Fred W
Volunteer tester

Send message
Joined: 13 Jun 99
Posts: 2524
Credit: 11,954,210
RAC: 0
United Kingdom
Message 673228 - Posted: 7 Nov 2007, 0:16:02 UTC - in response to Message 673224.  



There's a world of difference between malware and viruses. A perfect firewall (were there such a thing) could not protect you if you deliberately download an app. By definition a virus spreads without you having to do anything to help it - other than forgetting to protect yourself either by having a firewall or running a nix-based system.

F.

Malware includes viruses, Trojan horses, worms, etc. The wikipedia and others agree on this, I'll even throw in the Google search I made too.

http://en.wikipedia.org/wiki/Malware
http://searchsecurity.techtarget.com/sDefinition/0,,sid14_gci762187,00.html
http://www.google.com/search?q=malware+definition&ie=utf-8


OK! Point taken...

However, you were the one who introduced malware to the discussion. My point stands that the examples you were quoting had no relevance in a debate about firewalls and Martin's post referred only to viruses.

Please understand, this is not a personal attack - just trying to clarify the issue.

F.
ID: 673228 · Report as offensive
Profile zoom3+1=4
Volunteer tester
Avatar

Send message
Joined: 30 Nov 03
Posts: 65736
Credit: 55,293,173
RAC: 49
United States
Message 673238 - Posted: 7 Nov 2007, 0:30:43 UTC - in response to Message 673228.  



There's a world of difference between malware and viruses. A perfect firewall (were there such a thing) could not protect you if you deliberately download an app. By definition a virus spreads without you having to do anything to help it - other than forgetting to protect yourself either by having a firewall or running a nix-based system.

F.

Malware includes viruses, Trojan horses, worms, etc. The wikipedia and others agree on this, I'll even throw in the Google search I made too.

http://en.wikipedia.org/wiki/Malware
http://searchsecurity.techtarget.com/sDefinition/0,,sid14_gci762187,00.html
http://www.google.com/search?q=malware+definition&ie=utf-8


OK! Point taken...

However, you were the one who introduced malware to the discussion. My point stands that the examples you were quoting had no relevance in a debate about firewalls and Martin's post referred only to viruses.

Please understand, this is not a personal attack - just trying to clarify the issue.

F.

I didn't think It was a personal attack, I was just trying to correct ML1 as He said that there are no viruses on the MAC and so I pointed out what has been pointed out by others and so It does have relevance, I could go Google that too If You'd like(relevance). And I am quite well acquainted with different OSes across different brands of computers both open and closed OSes(dabbled with a friends TI-99-4A once, talk about a computer that could have used some better cooling), But then I've been using different computers since the late 70's when computers were just starting to be used in the home and It's been a long 28 years so far, I even contemplated buying and building a homebrew Heathkit S100 bus computer back then too, But went towards something that was easier to do back then as My soldering skill is not so good.
The T1 Trust, PRR T1 Class 4-4-4-4 #5550, 1 of America's First HST's
ID: 673238 · Report as offensive
Profile Keith Jones

Send message
Joined: 25 Oct 00
Posts: 17
Credit: 5,266,279
RAC: 0
United Kingdom
Message 673242 - Posted: 7 Nov 2007, 0:40:03 UTC - in response to Message 673238.  



There's a world of difference between malware and viruses. A perfect firewall (were there such a thing) could not protect you if you deliberately download an app. By definition a virus spreads without you having to do anything to help it - other than forgetting to protect yourself either by having a firewall or running a nix-based system.

F.

Malware includes viruses, Trojan horses, worms, etc. The wikipedia and others agree on this, I'll even throw in the Google search I made too.

http://en.wikipedia.org/wiki/Malware
http://searchsecurity.techtarget.com/sDefinition/0,,sid14_gci762187,00.html
http://www.google.com/search?q=malware+definition&ie=utf-8


OK! Point taken...

However, you were the one who introduced malware to the discussion. My point stands that the examples you were quoting had no relevance in a debate about firewalls and Martin's post referred only to viruses.

Please understand, this is not a personal attack - just trying to clarify the issue.

F.

I didn't think It was a personal attack, I was just trying to correct ML1 as He said that there are no viruses on the MAC and so I pointed out what has been pointed out by others and so It does have relevance, I could go Google that too If You'd like(relevance). And I am quite well acquainted with different OSes across different brands of computers both open and closed OSes(dabbled with a friends TI-99-4A once, talk about a computer that could have used some better cooling), But then I've been using different computers since the late 70's when computers were just starting to be used in the home and It's been a long 28 years so far, I even contemplated buying and building a homebrew Heathkit S100 bus computer back then too, But went towards something that was easier to do back then as My soldering skill is not so good.


Hiya,

I'm not trying to stir but even *nix has viruses too :-)

We're all in the same boat, just some are 'leakier' than others.

If you're a Windows user like me, you should read that as "Get me a bucket to bail this baby out!" :-)

Have a nice one,

Keith
ID: 673242 · Report as offensive
Profile peanut
Avatar

Send message
Joined: 1 Feb 07
Posts: 372
Credit: 1,951,576
RAC: 0
United States
Message 673244 - Posted: 7 Nov 2007, 0:49:33 UTC

I'm a Apple Mac user who uses Apache to host a personal website on my home PC. I INTENTIONALLY have disabled ALL my firewalls. I have seen attacks that are targeted at Windows boxes in my web server logs. So far, knock on wood, I have not had any noticeable problems with not having a firewall enabled on a Mac for around 2 years now. I have implicit protection in that I do not have a static IP. If a hacker finds my IP it will likely change in a day or so and they will have to find me again. My site is not business related so there is no real reason to attack me anyway.
ID: 673244 · Report as offensive
Profile ohiomike
Avatar

Send message
Joined: 14 Mar 04
Posts: 357
Credit: 650,069
RAC: 0
United States
Message 673327 - Posted: 7 Nov 2007, 3:28:37 UTC - in response to Message 673244.  


<snip>
My site is not business related so there is no real reason to attack me anyway.

Alas- I believe the majority of the attacks are attempts to create "zombies", it doesn't matter who or what.
PS- I agree about Linux & Mac however, mine are pretty much locked down as to what ports will answer (unlike Windows which by default allows remote access, etc).


Boinc Button Abuser In Training >My Shrubbers<
ID: 673327 · Report as offensive
Profile ML1
Volunteer moderator
Volunteer tester

Send message
Joined: 25 Nov 01
Posts: 20258
Credit: 7,508,002
RAC: 20
United Kingdom
Message 673470 - Posted: 7 Nov 2007, 12:45:37 UTC - in response to Message 673238.  
Last modified: 7 Nov 2007, 12:48:33 UTC

... I didn't think It was a personal attack, I was just trying to correct ML1 as He said that there are no viruses on the MAC and so I pointed out ...

Trying to head off some sort of holy crusade of presumably the besieged M-Softies... (OK, sort of :-) )

(NB: Please read all my words typed rather than every few words...)

I have never said that there have never been any form of virus for whatever OSes, including *nix (and Linux).

HOWEVER: Note that the only (one or just two) famous 'attacks' on *nix systems were long ago, completely new and never before seen at that time, and the propagation was that of a worm (not viral).

*nix and the affected applications were very quickly fixed so those attacks could not be repeated.

And indeed, 30 or so years later and there are still no live viruses active on *nix systems, including Linux and Macs.

As with any OS, you can have exploits against applications. Even there, *nix tends to limit the damage.

Meanwhile to my knowledge, the later series of Microsoft OSes remain vulnerable to various actively in the wild viruses and worms and trojans. The present 'fix' is to install and activate firewall and anti-virus software, and hope that those 'add-ons' catch everything.

I would also argue that Windows is a soft target for malware, and gives the easiest returns for any abuse.

*nix gets attacked constantly, and there is very high kudos for anyone whom manages to breach the security. However, any problems found get fixed very quickly. Also, there is ferocious peer review for Open Source and Linux that tends to avoid problems before they are created.


Regardless: It's all down to what works best for you.

Then again, there's a Windows related "non"-problem that I'm involved with that I know will now take two people the best part of today to fix (or rather, work-around). So why Windows even though I consider other OSes to be 'better'? For this example it's likely mainly a combination of dinosaur inertia and simple blatent lock-in. Oh yes, the non-problem for today can be considered one or both of poor design or a side effect of lock-in, depending on view...

I just see it as rather strange how I can show people how Linux, Macs, other OSes, work effectively and with peace of mind, and yet in some there is a sort of blind desperation to see "Only Microsoft". Is their Marketing so totally pervasive?

There does seem to be a growing 'sensitivity' about viruses... On that count I can sympathise that Microsoft have got a near impossible task to try to morph their systems and their user expectations to something that is not so inherently vulnerable to abuse.


Please correct where I am wrong. (Always happy to learn.)

Regards,
Martin

See new freedom: Mageia Linux
Take a look for yourself: Linux Format
The Future is what We all make IT (GPLv3)
ID: 673470 · Report as offensive

Message boards : Number crunching : Mac OSX Upgrade can turn Firewall OFF


 
©2024 University of California
 
SETI@home and Astropulse are funded by grants from the National Science Foundation, NASA, and donations from SETI@home volunteers. AstroPulse is funded in part by the NSF through grant AST-0307956.