Macworld Forums: Editors' Notes Weblog: Don't leave the Windows open - Macworld Forums

Jump to content

  • (2 Pages)
  • +
  • 1
  • 2
  • You cannot start a new topic
  • You cannot reply to this topic

Editors' Notes Weblog: Don't leave the Windows open

#1 User is offline   Macworld.com Icon

  • Veteran
  • PipPipPip
  • Group: Members
  • Posts: 1,900
  • Joined: 06-February 04

Posted 27 February 2007 - 09:20 PM

Open Windows can lead to infestations, as Rob Griffiths discovers. [more]
0

#2 User is offline   hmurchison Icon

  • Member
  • PipPip
  • Group: Members
  • Posts: 525
  • Joined: 29-April 04

Posted 28 February 2007 - 01:15 AM

The fact that people actually think they "need" this crap is the biggest marketing bamboozle every perpetrated on consumers. I'm happily computing on Tiger in tranquility without the OS warning me that I'm unprotected every 5 seconds. Priceless.
0

#3 User is offline   hgwells Icon

  • Member
  • PipPip
  • Group: Members
  • Posts: 204
  • Joined: 31-August 04

Posted 28 February 2007 - 01:39 AM

Whether you're openly browsing or not, there are bad things out there constantly looking for (Windows) holes. Several applications exist to let you see when this goes on and what goes on. I have seen Windows intrusion attempts well over once a minute, or watched it slow to a crawl once every 4 or 5 minutes or more, depending. Solution? Don't run Windows.
Even without being connected to the Internet, even many disks, including some insrtallation disks, now come with their own built-in virii and insecurities at no extra charge. Really, even Mac aps or disks could have such infestations and we would never even know about it since we remain unaffected.
Of course, I'm likely wrong about everything I just said.
0

#4 User is offline   goron Icon

  • Member
  • PipPip
  • Group: Members
  • Posts: 44
  • Joined: 18-April 06

Posted 28 February 2007 - 02:36 AM

Remember that if you allow Parallels to expose your entire Mac drive (or home directory) to easy drag-n-drop between host and guest, your Windows malware could affect your Mac stuff too.
I see that Parallels' latest version now asks you if you want to do this instead of leaving you wide open by default but it's still not very clear.
0

#5 User is offline   uchuugaka Icon

  • Member
  • PipPip
  • Group: Members
  • Posts: 504
  • Joined: 12-April 05

Posted 28 February 2007 - 05:47 AM

best solution, if you have to install windows, don't let windows connect to the internet. Close all of its ports. Don't use it to browse the web at all.
You can still view and test web designs locally. (testing IE with web designs is the ONLY thing I can think of that you NEED windows for)
0

#6 User is offline   AFairhead Icon

  • Newbie
  • Pip
  • Group: Members
  • Posts: 5
  • Joined: 15-July 06

Posted 28 February 2007 - 06:37 AM

And even then, there's sites such as http://browsershots.org/
/forums/ubbthreads/images/graemlins/tongue.gif
0

#7 User is offline   whitedog Icon

  • Veteran
  • PipPipPip
  • Group: Members
  • Posts: 1,362
  • Joined: 09-August 04

Posted 28 February 2007 - 08:12 AM

It's worth noting that Windows at least notices some of these intrusions now, even if it doesn't prevent them. And it can do some cleanup on its own.
But, whatever you do, don't install Norton Anti-Virus for Windows. I recently set up a new 24" iMac for a client and installed Parallels Desktop and Windows XP Pro SP2. It ran splendidly - until I added Norton Anti-Virus. Then XP turned to sludge, running more like it does in Virtual PC on a PPC Mac. Yuck!
Since uninstalling Norton is dubious, at best, I used Parallels to uninstalled the XP virtual machine and re-installed Windows. Fortunately, Parallels' express install runs much faster than the XP install ever did in Virtual PC.
As an alternative to Norton, AVG Anti-Virus Professional Edition was recommended to me by a reliable source, but I haven't tried it yet.
The upshot is that, even on a Mac, Windows is still Windows, with all the aggravations it entails on any PC. As for avoiding connecting to the Internet, that is not a viable option for many people, who use Windows on the Mac to utilize applications not comparably available on the Mac, many of which require Internet access. As for testing web sites, you can't test or troubleshoot server side scripts and such locally.
Unfortunately, it has come to the point where many of us could benefit from some additional Windows research and advice from Macworld/MacCentral. Perhaps another e-book from TidBITS is called for. They've already covered installing Windows on a Mac. Now we need some support in using Windows safely. Sigh....
0

#8 User is offline   folklore Icon

  • Member
  • PipPip
  • Group: Members
  • Posts: 739
  • Joined: 09-August 05

Posted 28 February 2007 - 09:44 AM

Quote:

Remember that if you allow Parallels to expose your entire Mac drive (or home directory) to easy drag-n-drop between host and guest, your Windows malware could affect your Mac stuff too.
I see that Parallels' latest version now asks you if you want to do this instead of leaving you wide open by default but it's still not very clear.


Parallels allows drag/drop between host and guest? Is that one of the many features still in beta? I coulda sworn I had the latest stable (not beta) release, and I didn't think I could do that. I can set up a shared folder, but it's not like I can simply drag something from my Mac desktop directly to the Windows desktop like I could under VirtualPC.
In any event, I agree that Windows shouldn't be given write access to Mac files - there's just too many security issues. I mean, seriously, what would I do if some Windows malware destroyed the 5000 cat photos in my iPhoto library? /forums/ubbthreads/images/graemlins/grin.gif
0

#9 User is offline   bigh Icon

  • Member
  • PipPip
  • Group: Members
  • Posts: 384
  • Joined: 20-October 04

Posted 28 February 2007 - 10:21 AM

Anyone who uses a Windows machine regularly or maintains one for others knows the threats are real. Several studies have shown Windows to be compromised within minutes of simply connecting it to the internet - no other action is needed. There would be a much greater outcry about this if more users knew what was going on, but instead many home users just feel that Windows is "slow" or "broken."
Fortunately, effective solutions exist - I've been completely satisfied with Avast! antiviris software (they have a free version) and SpySweeper by Webroot (not free, but cheap and way better than free options I've tried, like AdAware and Spybot). Running Windows without these is simply not an option for me.
0

#10 User is online   schoonerman Icon

  • Member
  • PipPip
  • Group: Members
  • Posts: 294
  • Joined: 16-October 04

Posted 28 February 2007 - 10:41 AM

Quote:

Parallels allows drag/drop between host and guest? Is that one of the many features still in beta?


It was still in beta--actually "release candidate"--until yesterday (that is, Feb 27). Now it's in the latest real version.
--John
0

#11 User is offline   cweber Icon

  • Member
  • PipPip
  • Group: Members
  • Posts: 119
  • Joined: 10-November 06

Posted 28 February 2007 - 11:37 AM

The .hdd file in ~/Library/Parallels/<your Windows install>/ is the entire Windows C: drive. As such, simply back up that file on a regular basis, starting right after a successful install. Whenever your WinXP virtual machine becomes infected or otherwise unusable, trash the existing .hdd file and bring back a known good backup. Voila!
Of course, the usual security precautions still apply, but recovering from a nasty situation is dead easy thanks to virtualization.
0

#12 User is offline   PhotoMacUser Icon

  • Member
  • PipPip
  • Group: Members
  • Posts: 22
  • Joined: 26-February 07

Posted 28 February 2007 - 11:44 AM

Everything on your computer could be gone in a flash! Your hard drive could die, a power surge could fry your computer or perhaps a PC virus could erase your drive. If you have important files-like your iPhoto library, back them up regulary. If you use a laptop, it is even more important to back-up. Someone could STEAL your computer or you could drop it. I just found an external 500 gig drive for $149 after rebate!
There are trial versions of PC anti-virus software that will identify viruses, but not remove them. AVG has some freeware. http://free.grisoft.com/doc/1
0

#13 User is offline   folklore Icon

  • Member
  • PipPip
  • Group: Members
  • Posts: 739
  • Joined: 09-August 05

Posted 28 February 2007 - 01:17 PM

Quote:

Quote:

Parallels allows drag/drop between host and guest? Is that one of the many features still in beta?


It was still in beta--actually "release candidate"--until yesterday (that is, Feb 27). Now it's in the latest real version.
--John


Wow. Guess I have something to play with when I get home tonight. Thanks!
0

#14 User is offline   folklore Icon

  • Member
  • PipPip
  • Group: Members
  • Posts: 739
  • Joined: 09-August 05

Posted 28 February 2007 - 01:27 PM

Quote:

Everything on your computer could be gone in a flash! Your hard drive could die, a power surge could fry your computer or perhaps a PC virus could erase your drive. If you have important files-like your iPhoto library, back them up regulary. If you use a laptop, it is even more important to back-up. Someone could STEAL your computer or you could drop it. I just found an external 500 gig drive for $149 after rebate!



Yeah. I actually have a crazy redundant backup protocol that includes a PowerBook G4, two iMacs, external hard drives, optical media, and two different remote FTP servers for the really important files. At any given time, I have no less than 7 copies of the important files housed in 3 different physical locations (in case of fire, theft, etc) and 3 copies of the less important files. I use a combination of Chronosync , Fetch , and Apple's .Mac Backup to make all of that happen.

FWIW, I used to have email dating back to my FidoNet days, too, but that hard drive wasn't included in my backups when it died a timely death last year.
My wife says I have a "problem" with letting go. I just don't see it.
0

  • (2 Pages)
  • +
  • 1
  • 2
  • You cannot start a new topic
  • You cannot reply to this topic

2 User(s) are reading this topic
0 members, 2 guests, 0 anonymous users