LA Computer Company: Specials on AppleCare, iMac's, Apple Batteries and Apple A/C Adapters. Also Great prices on Used Apple Computers. Call 1-800-941-7654 Click Here.
OWC: NewerTech NuPower Batteries for iBook and PowerBooks Designed+Built in USA to run longer, LAST LONGER TOO! Free Battery Recycling Return Label; Quality High-Capacity from $99.95
Just a week ago the Windows world was infected by the LoveLetter
worm - and that, labelled the first Open Source virus on
Slashdot, spawned four variants within the first day. The media was
hysterical, often forgetting that every operating systems
besides Windows was immune to the "Love Bug."
Anne Onymus has done some leg work and managed to interview one
of the Mac communities leading code crunchers.
5/11/2K: Macintosh über-hacker Jeeves Stob (yes,
it's a pseudonym - and, we think, a clever almost-palindrome) gets
frustrated every time there's a major virus.
Like a lot of Mac users, Stob never received a copy of the LoveLetter virus that was
launched one week ago - at least not from an unwitting Windows
user. He figures it must be because all his friends are too smart
to run unknown enclosures or they use Macs.
Most likely, it's both.
Stob had fun perusing the Visual Basic code used to
create the Love Bug after a hacker acquaintance forwarded him a
copy. He said the code was not at all difficult to follow,
explaining why it was so easy for others to modify the source code
and create their own variants of the LoveLetter worm. Of course,
the whole thing depends on the tight integration of
Microsoft Windows, Outlook, and Visual Basic.
In Stob's words, "It's hard to say whether that integration is a
good thing or a bad thing. It lets you do some very powerful
things, but it also makes you a ready target for malicious hackers.
In fact, it seems that Microsoft's email clients (and only on
Windows) are the only ones capable of carrying such a payload and
distributing it so widely. The ubiquity of Windows and Outlook
among the masses create a tempting target for the kind of people
who created Melissa and
LoveLetter."
As for the Mac, Stob says that's a whole 'nother story. Mac
users run many different versions of the OS and don't boot from a
hard drive called "C:" - this presents a lot more variables
for the potential Mac worm or virus maker. Mac users may or may not
have Java. They may have disabled AppleScript. A hacker cannot
depend on those kind of resources when creating a virus.
Maybe that's why there are only about five-dozen Mac
viruses, compared with over 20,000 in the Windows/DOS
world.
Mac viruses tend to be easily contained. People using Disinfectant (240K), a
freeware antivirus program discontinued nearly three years ago, can
easily clean up all viruses created before the AutoStart Worm and Word Macro
viruses. The AutoStart Worm can be disabled simply by turning
off Enable CD-ROM Auto Play in the QuickTime Settings control panel
- and several free programs can detect and eradicate it, should
your Mac become infected.
As for Word macro viruses, there have long been patches and
settings to take care of them, too. Avoiding Word would also do the
job, but with an estimated 94% of computer users across platforms
using Word, that may not be a practical solution.
The Mac just isn't an attractive platform for the virus
maker.
I asked Stob to speculate on how one might create something like
LoveLetter for the Macintosh. He replied that it wouldn't be
terribly difficult to create the worm itself using AppleScript or
even the popular VISE software installer. As is obvious from
LoveLetter, it wouldn't be hard to get the average user to run
the program - just devise a cover letter and create a fitting
file name and icon for the worm itself.
The program itself could cause no end of problems: renaming
files, moving resources to other folders, overwriting files, etc.
This would be no trouble at all for a good programmer.
The biggest problem is viral reproduction. Just how could
the program send itself to everyone in the user's address book when
Mac users choose from such a broad variety of email clients:
Eudora, Outlook Express, Claris Emailer, Pegasus, Netscape,
QuickMail, MailSmith, Green, SafeMail, SnapMail, and PowerMail
among them - not to mention Web-based email.
The simple fact is, to successfully launch a program like
LoveLetter on the Mac, the hacker would have to address at least
the three or four most popular mail clients. Even then, with Mac
users representing perhaps 10% of the worldwide installed base,
the worm would have a tough time delivering itself to enough
people who had Macs, would actually run the program, and would be
using one of the targeted email clients.
No matter how good a Mac worm, because the Macintosh is a
minority platform, it could never cause the kind of widespread
damage and hysteria of Melissa or LoveLetter. There might be a few
isolated cases, but the media would never even take notice
of it.
Stob notes that hackers want notoriety, which means
they have to target Windows, the dominant operating system,
and its most common applications. This explains Word and Excel
macro viruses, as well as email-borne viruses that are dependent on
Microsoft email clients.
They won't get their fifteen minutes of fame any other way.
Has Stob himself ever created a virus? Grinning, he explains he
has a collection of viruses for almost every operating
system - safely stored on CD-ROM. He's learned a lot of tricks
and written his own code for any number of operating systems (he's
given up on Windows, because there's no challenge there), but has
never released a virus into the wild. "They're a great learning
tool," he notes.
Stob's personal favorite isn't really malicious, but something
akin to the Belgian "pie in Gates' face" scenario. Years ago, when
it looked like the NeXT Computer might actually compete with the
Mac, Stob created a program that would completely overhaul the
visual interface and play a sound at startup.
With Stob's little NeXT virus, Steve Jobs' little black box
acted just like a Macintosh.
- Anne Onymus
Further Reading
Viruses
on the Mac, Stephen Beale, MacWeek, 5/7/00. "The first Mac
viruses, nVir and MacMag, appeared in 1987...."
Recent Rumor Mills
New Apple drive supports Blu-ray and HD DVD, 09.11.
Tired of being second-guessed and sometimes outmaneuvered by Microsoft, Apple has embraced both next gen DVD formats with its new SuperDrive Extreme.
California: Beyond 'no light bulbs for you', 02.01.
A Calfiornia assemblyman wants to make incandescent light bulbs illegal - but that's just the beginning. His next target: CRT monitors and TVs.
Sudden impact: Apple's great Asteroid hoax, 06.09.
Truth of the matter is, the Asteroid Project didn't exist to produce a viable product, but as a way to shut down rumor sites.
Mac of the Day: Power Mac 8200, Apr. 1996 - The minitower version of 7200 was never sold in America.
List of the Day: G4 List is for those using Power Mac G4s or G4 upgrades.
October 6 in LEM history: 98: USB is a good thing - Can Apple save Emailer? - 99: Kihei iMacs - 00: Advice about PDS Power Macs - 03: A replacement PowerBook battery - 04: AirPort Express - 05: The Apple Lisa story - 06: Don't ignore battery recall - Use any networked computer as an additional Mac display
Use Your FileMaker Pro Databases on Your iPhone, Adam Rosen, Adam's Apple, 10.06.
Although there's no version of FileMaker Pro for the iPhone, FMTouch will let you use your data and layouts on it.
Best eMac Deals, Low End Mac Deals, 10.06.
Used 700 MHz CD, $110; CD-RW, $130; Combo, $170; 800 CD, $170; 1 GHz Combo, $250; SuperDrive, $280; 1.25 Combo, $290; SD, $360; 1.42 Combo, $359.
Best MacBook Air Deals, Low End Mac Deals, 10.06.
Used 1.6 HD, $1,299; refurb, $1,499; new, $1,669 after rebate; 1.8, $1,919 a/r; 1.6 SSD, $2,294 a/r; used 1.8 SSD, $1,997; refurb, $2,299; new, $2,349 a/r.
Best iPod shuffle Deals, Low End Mac Deals, 10.06.
Refurb 3G/1 GB, $39; 2 GB, $59; new 1 GB (3G or 4G), $47; 2 GB (3G or 4G), $67. Prices include ground shipping.
Getting the Most from Your G3 Mac, Simon Royal, Mac Spectrum, 10.03.
Most G3 Macs can be upgraded so they can run Mac OS X 10.4 'Tiger' quite nicely. Here's how.
Best Power Mac G4 and AGP Video Card Deals, Low End Mac Deals, 10.03.
Used 450 MHz, $75; 500, $99; 733, $150; 800, $199; 1.25 GHz, C$349; 867 MHz dual, $225; 1 GHz, $349; 1.25, $499; 1.42, $600.
Best iBook G3 Deals, Low End Mac Deals, 10.03.
Used 300 MHz clamshell, $150; 366, $199; 500 CD, $149; 800, $190; 600 CD-RW, $240; 800 Combo, $300; 900, $399; 14" 600, $360; 900, $469.
Best Mac OS X 10.0-10.3 Deals, Low End Mac Deals, 10.03.
Mac OS X 10.0.3, $30; 10.1, $20; 10.2, $60; 10.3 CD, DVD, $100; CD, $119; 10.1 Server, unlimited users, $65; 10.3 Server, unlimited, $150.
The Best Browsers for Older Macs Running Tiger, Charles W. Moore, Miscellaneous Ramblings, 10.02.
A dial-up user's overview of browsers for Mac OS X 10.4 puts the emphasis on reliability, downloads, and speed.
Best MacBook Deals, Low End Mac Deals, 10.02.
Used 1.83 GHz, $649; 2.0 SD, $750; refurb 2.1 GHz, $899; 2.4, $1,099; black, $1,299; new 2.1, $1,019 after rebate; 2.4, $1,204 a/r; black, $1,394 a/r.
CodeWeavers Brings Google's Chrome Browser to Intel Macs, Alan Zisman, Zis Mac, 10.02.
Google's new Chrome browser uses separate processes for each tab and brings other changes to Windows users. Now Mac fans can try it as well.
Best iMac G5 Deals, Low End Mac Deals, 10.02.
Used 17" 1.6 GHz Combo, $450; 2.0 SuperDrive, $500; 1.9 iSight, $625; 20" 1.8 GHz, $550; 2.0, $600; 2.1 iSight, $650.
Best iPod touch Deals, Low End Mac Deals, 10.02.
Used 1G/8 GB, $160; refurb, $179; new, $198; used 16, $200; refurb, $219; new, $265; refurb 32, $319; new, $345; 2G/8 GB, $229; 16, $280; 32, $380.
Our advertising is handled by BackBeat Media. For detailed
price quotes and advertising information, please
contactat BackBeat Media (646-546-5194). This number
is for advertising only.
LINK POLICY: This site allows and
encourages links to any public page, so long as the linked page
does not appear within a frame that prevents bookmarking the linked
page.
Low End Mac is an independent publication and has
not been authorized, sponsored, or otherwise approved by Apple
Computer, Inc. Apple and the Apple Logo are trademarks of Apple
Computer, Inc. All other trademarks are the property of their
respective holders. If you still think this is serious business,
read About The Rumor Mill.
