Re: I recall the 90's
"Flashback, Mac Defender, and other OSX-targeting malware."
Your so funny and predictable @Andy Prough. There you have mentioned the only TWO out in the wild pieces of Malware that have affected Macs with any appreciable volume, even going so far as to mention the figures for the widest spread infection (which by the way was patched by Apple, so no need for 3rd party AV). But we both know why your list stopped with those two, don't we. Because finally you have done some checking before commenting and you couldn't find any more, could you.
But having realised that, rather than comment on how remarkable that is, you couldn't help but continue your usual line in BS by adding "and other OSX targeting malware." Additionally of course as the 600,000 infected machines is the widest spread of malware attack out of the two, thanks for illustrating why my point as to why it is I have never to have met, in the flesh, any Mac owner who has suffered a malware problem. Given the Mac user-base is over 66 million, I might still meet that 1 in 100 user who found his/her system patched by Apple and restored to full health anyway.
"People who set up Linux and BSD servers and networks for a living have a pretty good idea of what's required to secure a system like OSX."
Sounds very sage with a bit of "take it from me" mixed in. But really have I been transported back to the 1990's when systems would come delivered with open ports running insecure services and no firewall? So I've just purchased my new Mac, do tell me, what additional action I now need to take to secure it ?
BTW, if you have a security sensitive business, I agree it is important to switch on disk encryption. Apple as a matter of policy have decided there is no point in even pretending unencrypted systems are protected from miscreants who have even limited physical access to the machine. Also if you are integrating a Mac with your business network you should be sure you know what you are doing with network services.
I also fully understand, if a skilled hacker has reason to target you and wants to gain access to your machine, they will be able to gain access and the only way to secure a machine from a concerted attack is to lock it in a room with no network connectivity. Every user, Mac users included, should be aware of the basic don'ts needed to keep a system safe from generalised attacks and if you have reason to think you might be more than just a target for generalised attack (e.g. you do business where you deal with or know of people who could be be motivate to target you in particular), then you need to take special security measures and implement strict procedures. But none of that changes the simple fact that for the general population, with regard to malware and security, the experience of owning a Mac is nothing like the experience of owning a PC.