Apple Software Security Inferior to Microsoft's, Says Iconic Hacker
Marc Maiffret — A security expert that build his career on identifying vulnerabilities in Microsoft software now says that the company has come a long way. Marc Maiffret, a former hacker turned legitimate security researcher …
Context & Ripple Effects
The claim lands at the end of a decade-long reversal. In January 2006 the BBC reported Mac users being warned they were 'too smug' about security, and by December 2007 the Financial Times noted Apple's rising popularity was starting to lure hackers to a platform long considered a sideshow target. What has changed by April 2010 is who is saying it: Marc Maiffret built his reputation finding vulnerabilities in Microsoft software, so his verdict that Microsoft 'has come a long way' while Apple trails carries weight precisely because it comes from Apple's rival's most famous critic.
The story also arrives amid a busy stretch for Microsoft's public image — its Visual Studio 2010 launch and Project Pink phone unveiling the same week — making an outside security endorsement of its engineering culture a timely reputational asset against a competitor whose marketing has leaned on the safe-Mac narrative.
First-order effects
- Apple's security posture becomes an explicit talking point in vendor comparisons, undercutting the low-attack-surface pitch that has differentiated the Mac in consumer marketing since the mid-2000s.
Second-order effects
- As Apple's installed base grows, independent researchers have a commercial incentive to shift bug-hunting toward macOS — the dynamic the FT flagged back in December 2007 — which would force Apple to build the kind of structured response-and-disclosure pipeline Microsoft spent the last decade constructing after its own security reckoning.
Third-order effects
- If the pattern holds, platform popularity rather than architecture becomes the primary driver of attacker attention, meaning every vendor that scales past niche status inherits the vulnerability-discovery pressure Microsoft normalized — and security reputations get judged on current process rather than historical record.
The trend: Attacker attention is migrating toward market share, pushing historically untargeted platforms like the Mac toward the enterprise-grade vulnerability-handling practices their rivals were forced to adopt years earlier.