Why malware for Macs is on its way
Oh, the rationalizations people come up with to explain away what they don't want to hear. — Last week, when I wrote Coming soon to a Mac near you: serious malware, I expected to get an earful from Mac partisans telling me how wrong I was. They didn't disappoint.
Context & Ripple Effects
Ed Bott's warning lands in a long-running argument about platform security: back in August 2006, InfoWorld asked whether Windows is inherently more vulnerable than OS X, framing the 'market share vs. architecture' debate that has never fully resolved. Apple itself hedged years ago — Snow Leopard shipped with hidden malware protection quietly checking downloaded files, an acknowledgment that the platform was no longer beneath attackers' notice.
What Bott adds in May 2011 is a behavioral critique: the prediction of serious Mac malware is treated here as unconfirmed, and his real target is the community response — Mac partisans who dismiss such warnings rather than engage them.
First-order effects
- Apple's quiet built-in defenses, like the file-checking layer buried in Snow Leopard since 2009, become the load-bearing protection for users who assume none is needed.
- Security writers like Bott face immediate pushback from a user base whose identity is partly built on immunity claims, making accurate threat communication harder.
Second-order effects
- If Mac attacks materialize, antivirus vendors gain an untapped consumer market on OS X, where third-party security software has historically been an afterthought.
- Apple faces pressure to make its malware defenses visible and actively maintained rather than hidden, or risk the same patch-cadence criticism leveled at Microsoft.
Third-order effects
- Growing Mac installed base erodes any security-through-minority-status effect, pushing both platforms toward parity in threat model — and toward treating platform invulnerability claims as marketing, not engineering.
The trend: As Mac market share grows, the industry's assumption that malware follows popularity alone is being tested against architecture-based arguments, with Apple's own hidden defenses quietly conceding the point.