Fast351 wrote:1911fan wrote:or the more simple solution, get a Mac and never ever worry about it
The biggest reason Macs are not attacked as often is because there are fewer virii written for Macs. The reason for that is the relatively limited number of Macs as compared to Windows PCs.
Trust me, security by obscurity is not a good security model.
Anything with a processor and writeable storage is vulnerable to attack, ANYTHING.
Now I will grant that Macs and Unix flavors of many sorts are more secure than Windows by design, but that doesn't mean there isn't an avenue for attack.
(BTW, I like Macs, I'm a fan of Macs, they're well designed and built machines).
There have been a multitude of viruses for UNIX and other business class systems, such as the Morris Worm. Part of the reason there are no current viruses for Mac OS X is because of it's security. Virus's are generally reliant on the user's access rights. SInce most WIndows users always log in as Administrator, or a user with Administrator rights, a virus will also have those rights and be able to do whatever it wants. If you are logged in as a restricted user, the the amount of damage a virus can do is limited, such as rewriting the boot record. Mac OS X uses a restricted user account by default. You have to make a bit of an effort to log in as an administrator, and even more to become Root or super user. Because of the security design of OS X whenever a virus tries to do anything it pops up messages on the screen asking for the administrator password. Unless you are in the process of installing something, this is generally a bad sign. There are proof of concept viruses out there for the Mac. Yes they work, but no, they are not terribly effective because of the user rights issues.
Yes, security through obscurity is a horrible security model, but Apple does not rely on that model by any means.
It's not because Macs are rare (they're not, and are in fact gaining ground again), but because of the security model Apple put in place because of the BSD subsystem that makes attacking them difficult, not impossible, difficult. A virus today is usually not written to wipe a hard drive, that was 80's and 90's. Today, they would rather zombie your system, or install a trojan to pull ads to your system and play vengence games (best buy wouldn't accept my return of a three year old computer game, that version 2 just came out for, and the CD is scratched. I'm going to DDOS their website to get even!) or to make some money.
Other things to look for in these virus chain letters: CNN will not be the company to issue a virus alert. Microsoft is hands off when it comes to a virus. They say nothing, but occaisionally release a patch. McAffee, Symantec, TrendMicro, Kapersky, these are the names to look for. if anything else is listed that is nominally a news organization or not in the anti-virus business as making statements about it, it's probably a hoax.
Also, having sector 0 over written is not the end of your drive. a little command called fdisk \mbr will fix most Master Boot Record problems. If it doesn't, you can usually plug the drive into another computer and pull the information off. If all else fails, there is software that will do a scan of the drive and make the attempt to rebuild the partition tables. Hardly the most destructive virus ever.