professorhat:
marco123:Also, if a Virus were to be released for Mac OS X, an Anti-Virus program would do nothing. They don't protect against "Zero Day" attacks. Apple could probably get a patch out to fix the security hole the Virus was exploiting before the Virus was mapped and the signatures were released: Anti-Virus software only protects against known (read: old) Viruses.
Well, that's not necessarily true. If a virus exploited a vulnerability in the operating system, you would need Apple to produce the patch whatever AV solution you were running. It's the method in which the virus operated that would determine if the AV product picked it up or not - most AV solutions these days use engines which don't rely on the virus being known in order to detect and remove it - they in fact examine what a process is doing and, if it exhibits behaviours that make it look like a virus it will be flagged up. Some AV solutions are better than others at this, and sometimes you'll get AV products identifying false positives as was the case with Spotify a few months back. Of course some viruses can act in a way which mean the AV product doesn't pick it up, or can act to nullify the AV program - these are the ones you hear about since the ones which can't do one of these things tend not to spread.
Either way you look at it, running some form of AV protection is always going to be safer than running none at all.
marco123:Just run programs with the least privileges possible and be very careful what you allow root access to.
Absolutely this is excellent advice, but it's not the be all and end all of security and the prevention of remote access / control of your system / data. AV products play a very important role in this and, along with a decent firewall / spyware detection, these should all should form the backbone of securing your PC / Mac.
I'll have to take your word for it: it's been a long time since I've had to use Anti-Virus software, or even worry about Viruses/Spyware, because I switched to Ubuntu (Linux) in April 2007.
With Linux, (and BSD and Solaris) the permissions system and user competence are "the be all and end all" of security, as there are no Viruses in the wild for these platforms and the Open Source ecosystem makes it easier for fixes to be released and code to be tested/scrutinised for flaws. (And Repositories help a lot too.
)
I seem to remember that Threatfire was a decent "behavioural" anti malware solution?
Marco.
Edit: I also consider the "noscript" plugin for Firefox essential.