Pages: [1]   Go Down

Author Topic: Operating system security vulnerabilities  (Read 2678 times)

plugsnpixels

  • Sr. Member
  • ****
  • Online Online
  • Posts: 1034
    • http://www.plugsandpixels.com
Operating system security vulnerabilities
« on: December 03, 2017, 04:14:58 pm »

Here's an interesting site I discovered yesterday, listing past and current security vulnerabilities for various operating systems. You can do searches. Here's the list for macOS.

Search for Windows 10 and various flavors of Linux and see who comes out ahead!
« Last Edit: December 03, 2017, 04:21:44 pm by plugsnpixels »
Logged
Digital imaging blog, software discounts:
www.plugsandpixels.com/blog

digitaldog

  • Sr. Member
  • ****
  • Online Online
  • Posts: 20630
  • Andrew Rodney
    • http://www.digitaldog.net/
Re: Operating system security vulnerabilities
« Reply #1 on: December 03, 2017, 04:18:43 pm »

Your link doesn't work for one.
I don't need the link to know which OS has the MOST flavors of vulnerabilities.
Logged
http://www.digitaldog.net/
Author "Color Management for Photographers".

plugsnpixels

  • Sr. Member
  • ****
  • Online Online
  • Posts: 1034
    • http://www.plugsandpixels.com
Re: Operating system security vulnerabilities
« Reply #2 on: December 03, 2017, 04:22:55 pm »

Thanks Andrew, link fixed. I had to battle the URL as it appeared in the forum box for a bit to make it stick.
Logged
Digital imaging blog, software discounts:
www.plugsandpixels.com/blog

plugsnpixels

  • Sr. Member
  • ****
  • Online Online
  • Posts: 1034
    • http://www.plugsandpixels.com
Re: Operating system security vulnerabilities
« Reply #3 on: December 03, 2017, 05:06:06 pm »

PS: Andrew, I was surprised to see macOS leads the list of vulnerabilities, just a bit past Windows 10! Linux has basically none.

I'm mainly a Mac user but I also use Windows 10 and Deepen Linux on occasion.
Logged
Digital imaging blog, software discounts:
www.plugsandpixels.com/blog

digitaldog

  • Sr. Member
  • ****
  • Online Online
  • Posts: 20630
  • Andrew Rodney
    • http://www.digitaldog.net/
Re: Operating system security vulnerabilities
« Reply #4 on: December 03, 2017, 06:31:46 pm »

PS: Andrew, I was surprised to see macOS leads the list of vulnerabilities, just a bit past Windows 10! Linux has basically none.
Depending on how you define vulnerabilities yeah, I'm not the least bit concerned about the Mac (I've been running one since 1988). Don't ask me about my one Windows Laptop.
Logged
http://www.digitaldog.net/
Author "Color Management for Photographers".

rdonson

  • Sr. Member
  • ****
  • Offline Offline
  • Posts: 3263
Re: Operating system security vulnerabilities
« Reply #5 on: December 03, 2017, 06:56:44 pm »

I'm with Andrew. 

Most of the vulnerabilities listed for Mac are:
- "macOS before 10.13.1 is affected"
- vulnerability "via a crafted app"

The latter could translate to "if you're stupid enough to load an app on your machine that you shouldn't have"

I started with the initial Windows/286 in 1988 when it was a GUI tacked on to DOS.  In 2011 I finally gave up on  Windows and went all the way with Mac.  I don't regret a thing about the move.

Please don't take this to mean that I want to initiate yet another Mac vs Windows war.  I don't.  If Windows works for you that's fine.
Logged
Regards,
Ron

plugsnpixels

  • Sr. Member
  • ****
  • Online Online
  • Posts: 1034
    • http://www.plugsandpixels.com
Re: Operating system security vulnerabilities
« Reply #6 on: December 06, 2017, 10:25:18 pm »

Thanks all, I'm actually primarily a Mac user (I support 400 of them in higher ed IT) but was surprised at the lists of items on those pages for not only macOS but Windows. I also tinker with Linux and was also surprised at the supposed lack of vulnerabilities there.
Logged
Digital imaging blog, software discounts:
www.plugsandpixels.com/blog

BJL

  • Sr. Member
  • ****
  • Offline Offline
  • Posts: 6600
Re: Operating system security vulnerabilities
« Reply #7 on: December 06, 2017, 10:42:56 pm »

Here's an interesting site I discovered yesterday, listing past and current security vulnerabilities for various operating systems.
I would like a list that excludes vulnerabilities that rely on "user error", meaning downloading and running dodgy software from sources other than a curated app store—particularly if the attack also requires running that malware in an account with admin privileges.

Also, the paucity of Linux vulnerabilities sounds like a consequence of relatively low interest in attacking Linux, due to its far lower number of user who are both "unsavvy" and have admin privileges. (By the way, does the Linux vulnerabiilty list include the most commonly used version of Linux, namely Android?)
Logged

Dan Wells

  • Sr. Member
  • ****
  • Offline Offline
  • Posts: 1044
Re: Operating system security vulnerabilities
« Reply #8 on: December 07, 2017, 11:58:45 am »

There are also different kinds of vulnerabilities - Apple's recent problem with an open root account is only accessible if you have physical access to the machine, for example. It's extremely serious if exploited (if you get in as root, you can do literally anything), but in many environments, it's impossible to exploit. A Mac in a home-based photo studio isn't vulnerable at all, because nobody would be in there. On the other hand, it's a disastrous vulnerability in a university computer lab where hundreds of people have physical access.
The opposite extreme is represented by the recent spate of web pages that run cryptocurrency mining operations in the background. The consequences aren't all that severe - your computer uses a little extra electricity until you quit your browser, but it's a really easy vulnerability to exploit - any web ad can do it.
Logged

MattBurt

  • Sr. Member
  • ****
  • Offline Offline
  • Posts: 3912
  • Looking for that other shot
    • Matt Burt Photography
Re: Operating system security vulnerabilities
« Reply #9 on: December 07, 2017, 12:11:46 pm »

Most of the time regardless of OS your best defense is common sense. Or your worst enemy is a lack of it. :)
Logged
-MattB
Pages: [1]   Go Up