Anti-Spyware for OSX?

[wicky]

Originally Posted by sndwav

Correct me if I'm wrong... If I registered a program, and it sends out the registration information - I don't think it qualifies as spyware.

There is no correction to be made, I don't disagree. As I said...

it doesn't count as "actual" spyware

However, semantics aside, some people would consider any covertly transfered information as spying. Hence the need for applications such as Little Snitch.

The salient point here is the covert nature of the communication. Silent observation of any kind can be legitimately seen as spying (but not necessarily be described as spyware).

[MisterMe]

Originally Posted by wicky

....

However, semantics aside, some people would consider any covertly transfered information as spying. Hence the need for applications such as Little Snitch.

....

Words have definitions. Registration utilities and automatic update checkers do not fit the definition of spyware--neither in semantics nor in spirit. Real spyware is a real threat. By devoting resources to combatting imaginary threats, you reduce your defenses against real threats.

[wicky]

Yes, spyware has a specific meaning, which is why I agreed with your definition (several times now).

However, I was simply addressing a valid point raised earlier in the thread which is that some people are uncomfortable with the concept of their machines making any connections which are not immediately transparent.

Climb down from your soapbox mate... you're preaching to the converted.

[SatCure]

Did anyone mention that there is, to date, no "Spyware" for the Mac?
So, by definition, there is no "antispyware" for the Mac. That answers the original question.

And you can be certain that, should any Spy loophole become evident, Apple will be quick to issue a security update. Unlike Microsoft, Apple is not bogged down with thousands of malware problems already, so its reaction time is likely to be much better.

Should you wish to keep track of outgoing traffic, however, then software such as Little Snitch will cheerfully interrupt your work pattern and add to your paranoid worries.

[fryke]

"by definition"? That's wrong, sadly. Norton et al. will gladly sell you "internet security" suites for the Mac without there being a need for it. Not because they truly fear that you're at risk, but to live off of Windows' halo effect. Most computer users nowadays "know" that you "can't" run a computer securely without having given some software dealer at least 20 bucks for security software.

They'll go even further and cry "wolf!" whenever there's an (already fixed?) security gap in Apple's software with a proof-of-concept (i.e. not in the wild) virus/worm/whatever. Then, for three or four days, you'll see lots of happy PC journalists crying "Panic! Macs are unsafe, too!!!" until finally it becomes clear that there's no real danger because

a) there was no virus or worm or spyware in the wild in the first place
b) it couldn't have spread like Melissa did through Outlook etc.
c) the bug was quickly fixed by Apple.

About this "is it or is it not spyware" thing: It would only be honest of software makers to _tell_ you that the app is going to send personal information "home". Apple, for example, very clearly states that the registration information for Mac OS X will be sent to Apple, whereas many a little app simply starts "going wild" with outgoing connections that might make me feel quite uncomfortable. So if I download, say, a Tic Tac Toe clone and it tries to connect to the 'net without giving the user any internet functionality, I find this rather disturbing. It's not as if those connections would be "see-through", you know. So I like Little Snitch very much. This way, I can tell apps: "No, you *don't* need to connect to the internet." Satisfying.

[Sunnz]

Umm there is a firewall thing in Leopard that looks a lot like Snitch:


Anyone think it would conflict with Snitch?

[Lt Major Burns]

Originally Posted by MisterMe

Words have definitions. Registration utilities and automatic update checkers do not fit the definition of spyware--neither in semantics nor in spirit. Real spyware is a real threat. By devoting resources to combatting imaginary threats, you reduce your defenses against real threats.

my point is not whether or not there are threatening spyware threats out there, just that it's not impossible. if programs can legitimately phone home without my asking, whats to stop an illiegitimate app phoning home?

also, you can set up little snitch to remember which programs you trust (ie all the programs you use) so that really should only show it's face if something new is doing something you might not want

[MisterMe]

Originally Posted by Lt Major Burns

... if programs can legitimately phone home without my asking, whats to stop an illiegitimate app phoning home?

...

The design of the OS.