Skip to main content

Which is more secure?

Which computer is more secure? "Mac!" says the dedicated Macintosh user. Or is it computers with the new Windows OS? Or are they both equally likely to have security problems?

There is a lot of debate in the security industry regarding which platform is more secure.

Many people assume that the Mac is so secure - perhaps because they have heard of people that have experienced security failures under Windows. Others say that the the Mac is just as insecure as Windows, if not more so.

The LanceJ Security Test

I propose the following simple test that can be used to measure which platform is more secure from the vantage point of the public.
  1. Buy a quantity of new, stock Windows 7 and Macintosh computers from a retailer. For example, buy 5 new Mac Minis and 5 new Windows 7 HP desktops from BestBuy.
  2. Distribute each of the sealed, boxed computers to a regular, randomly selected family. Give each of those families identical, stock internet access via, say, Comcast. Tell the families to set up the computers and use them in their homes.
  3. Collect the computers after a set amount of time - perhaps 6 months.
  4. Count the number of machines that have been compromised.
The platform with the fewer detected compromises was generally less likely to be a security problem to its user during the course of the study.

Limitations

Clearly such a study wouldn't measure all aspects of security. For example:
  1. It doesn't count compromises that are not or cannot be detected.
  2. It doesn't count potential OS vulnerabilities, phishing attack vulnerabilities, etc.
  3. It doesn't measure security compromises of the future.
Perhaps a security researcher could devise a way to accurately count these other data.

Other Approaches

Another simple approach to measuring "platform security" could be pursued by the general purpose "computer repair shop". As new customers come in, measure the number of computers requiring repair due to security failures. However, it seems that a research project based on "repair shop" data would be complicated. Should the age of the computers be considered? And how does one consider the flawed machines with non-security related failures?

Next Steps?

I'd be surprise if there haven't been security researchers that have performed this exact kind of test. After all, researchers spend the bulk of their time doing research and publishing. If you are pursuing such a research study, or if know of a recent study that performed a similar test, please post a link in the comments section.
Labels:

Popular posts from this blog

Fixing a SodaStream Jet, part 1: Disassembly Guide

I've had my SodaStream Jet for years, and once in a while something has gone wrong. Disassembly is the first step to repair.  Start with this article to see how to disassemble the SodaStream, and then once you have that down, scroll through my other articles to see how I repaired specfic SodaStream problems. SodaStream Jet Disassembly Guide Tools Required Flat head screwdriver Phillips head screwdriver 1. Remove the Carbonator.  Duh. 2. Remove the black panel lever The front big black tilt lever needs to be removed first. Removing this panel is tricky, but it isn't impossible. Looking up at the bottom of the black panel, there are two tabs, one on the left and one on the right. These tabs fully secure the panel in place. The trick is to use a flat-head screwdriver under the plastic to gently lever the tabs out of the way.  Note in the pictures how I approach these tabs with my screwdriver.  I usually release the left side first, and then I release ...
Read more

Picking a Cable Modem for Xfinity

There are a lot of cable modems on the market, and many are compatible with Xfinity service. However, that doesn't mean that every modem is perfect. My basic requirements are: Currently certified by my ISP.  Buying a cable modem that isn't currently certified is simply unlikely to work. Capable of supporting needed service speeds.  Buying a cable modem which cannot deliver the service needed is going to be an immediate bottlebeck.  Buying a cable modem which is far more capable that the service speed is likely a waste of money, No built-in WiFi capability or Telephone line capability.  A personally-owned WiFi router is likely a better choice than an all-in-one unit that will need to be positioned exactly where the cable is within the house.  Don't over-buy.  Cable modems do not last forever.  Manufacturers abandon support, and cable modems aren't infinitely durable due to things like lightning strikes and being powered on for years at a time. So what ...
Read more

Old Apple gear that keeps on ticking

I've been dealing with Apple computer gear for a long time, as have my friends and family. Here is a list of the old gear that me and/or my friends have in active service.   Note that this gear is in real service, and isn't treated as museum pieces or as part of a retro-computing hobby. 2008: Apple Airport Express, draft-N, first generation 2009: Apple MacBook, late 2009 (utility use only) 2010: Apple iPod nano, 6th generation 2013: Apple Airport Extreme AC 2015: Apple TV HD (4th generation) The big winner here is the Airport Express, which is modern enough to do its job, and it just keeps on going.  The device that my friend runs has been in operation for more than 125000 hours.  It received its most recent firmware update on 28 August 2018, 10+ years after its initial release. In terms of security: it has no open, unpatched CVE vulnerability reports.  Many generations of other routers have come and go while this one keeps going.
Read more

Transitioning to Comcast Now!

I've transitioned to Comcast NOW, a lower speed, lower cost alternative.  The kids have grown up and moved out.  I'm spending much more of my time traveling.  I don't need the high speeds at home like I used to. This transition promises to save me $240 dollars a year versus my old "discounted" plan. Xfinity to Comcast Now transitioning process I went to the Xfinity store and told them I was cancelling two weeks out.  This isn't weird - people move all the time, so they do have a process for cancelling at a future ("move-out") date. Later the same day, I was able to go to the Comcast website and order the NOW modem for the new service. Note that Comcast didn't let me do this until I had a future cancel order in place.  Three days later, the modem arrived via FedEx. The cancel date came and went - Xfinity seems to have a grace period, so the old modem wasn't unceremoniously yanked out of service at midnight.  This made the transition smooth.  ...
Read more

Fixing a SodaStream Jet, Repair #2 - Broken Fill Button

My Soda Stream Jet's fill button broke, which means I can not longer carbonate water by pressing the pushbutton. This caused all sorts of grief in my household. Here is how I managed to repair my Jet to give it another 10 years of life (hopefully). First, a look at the button The fill button on the top of the SodaStream is actually a simple lever. Pressing down on the button moves a pin that does the actual work of pressing open the Carbonator's valve. Unfortunately, the axis point is fairly thin and can see a lot of stress. That's where my Soda Stream button cracked. [ I think the usage tip here is "don't over-press the button like a gorilla, it doesn't do anything but put high stress on the button."] Cracked levering point of the button The Pesky Lever Retaining Pin The Fix It was pretty easy for me to replace the button: Take off the back of the Soda Stream and remove the carbonator. Push out the the button lever's steel retaining pin. This takes qu...
Read more

Sodastream Carbonator Leakage, Usage, and Weight

SodaStream 60L "Carbonator" CO2 cylinders have a specific weight when empty, plus about 410 or so grams for the CO2 they should have when they're "full".  A little while ago I went to buy a replacement Carbonator from my local hardware store. The dealer pulled a new Carbonator out of the box and sensed it was lighter than usual.  He put the "light" Carbonator in the "empty" pile and sold me a different one.  At that moment I concluded that it would be smart of me to weigh both new and empty SodaStream carbonators.  Here are the results. Weighing a SodaStream Carbonator - for both Science and Consumer Protection.       The dealer told me that sometimes the carbonators leak after they leave the SodaStream filling facility.  That means there could be an opportunity for customers like me to get ripped off! The SodaStream cylinders I buy claim to have a net product weight of 410 grams - and that means that a full Soda Stream Carbonator shou...
Read more

Other Posts

Show more