Are Mac users right to be smug about security?

Trojans, botnets and rootkits, backdoors, dialers and worms - none of these things mean a thing to your average Mac user. Of course they have heard of them - they’re things that happen to Windows users. And not in a good way. Over here in Mac Land, we do exactly what we want, when we want, where we want. We throw caution to the wind, we don’t use protection. We don’t need no protection. Malware is for other people.

And for many Mac users that’s the very reason why they own the computer they do. The Mac OS X operating system has been around since 2001 and there’s barely been a blip on the malware radar in all of that time. Sure there have been some proof of concept viruses, some high profile hacks and even the odd QuickTime bug or two. The fact that they're even newsworthy suggests they're the exception and not the rule.

The contrast between a Mac user's experience and the day-to-day malware misery Windows users are alleged to suffer from couldn’t be greater. Many Mac users are so convinced of their own security they don’t even bother with anti-virus software (‘waste of money’), or to turn on Mac OS X’s built-in firewall (it's switched off by default, alarmingly). There’s another reason: a sometimes justified suspicion of anything that sounds like Microsoft FUD.

Security through obscurity

FUD or Fear, Uncertainty and Doubt has been spread by Microsoft and its acolytes for years. The aim is to undermine confidence in those who even think about switching to platforms other than Windows. Only last year former Microsoft chairman Bill Gates said the only reason why there wasn’t any real malware on the Mac was because it wasn’t popular enough - the ‘security through obscurity’ theory. It’s FUD, of course, because the Mac is:

• Anything but obscure. Apple and its products have never had such a high profile - the iPod and iPhone, even the Mac itself have all made sure of that. Surely if hackers were going to target the Mac, they would have done so by now.
• The Mac’s market share may be small but it still accounts for millions of users - professional and consumer - worldwide.
• Hackers must surely relish the challenge of developing the first major piece of malware for the Mac - seven years on and still no real threats? Come on!
• Mac users will have you know that Mac OS X is built-on a Unix core and that Unix is inherently more secure than Windows. It’s why there are no viruses for Linux either. [Some Windows users will induce a feedback loop at this point, referring again to the ‘security through obscurity’ theory regarding Linux too.]

OK, so given that there are no viruses and the Mac is too ‘obscure’ to develop for, why do companies like Intego and Symantec continue to develop anti-virus and anti-malware products for the Mac. Could it be that: