News for hackers. Stuff that matters.
Re:macOS leaves users vulnerable, and unaware of their vulne... by TekMol on Tuesday September 13, 2022 @05:18AM (#32822114)

    he downloaded and ran my free utility XProCheck

    ....

    I also suggested that he looked at a third-party
    anti-malware product for a second opinion

   ...

   you’ll find third-party tools like my own SilentKnight,
   silnite and XProCheck a good start. And they’re
   completely free to use
So the user was afraid of malware on his machine because he received an email that looks malicious.

And the solution is to have him download binaries of the internet and execute them?

Re:macOS leaves users vulnerable, and unaware of their vulne... by tempodox on Tuesday September 13, 2022 @05:22AM (#32822132)
What practical alternative, within a lowly user's reach, would you suggest instead?
Re:macOS leaves users vulnerable, and unaware of their vulne... by TekMol on Tuesday September 13, 2022 @05:25AM (#32822155)
Not download binaries of the internet and execute them.

The mail program the user used was probably written by Apple, one of the biggest companies in the world. And Mail is probably one of the most hardened and scrutinized against attacks applications in the world.

If the user is afraid that Apple mail is faulty or malicious, then installing software from tiny companies is suicide out of fear of death.

Re:macOS leaves users vulnerable, and unaware of their vulne... by sofixa on Tuesday September 13, 2022 @10:12AM (#32824520)
Have you forgotten the silent remote code execution vulnerabilities in iMessage, also one of the most hardened and scrutinized applications made by one of the biggest and richest companies in the world.