FAQ: Inside Microsoft's Client Protection

TalkBack 28 of 69:: Next »; « Previous

Thread View
Flat View

One more thing: This isn't really important but you asked so I figured I'd answer. Most Linux distros use EXT3 as their filesystem, but many others are available (Reiser, XFS, JFS, etc...). FAT support has always been there, but is never used for anything but compatibility with DOS and Windows.

In my post I specified inbound firewalls for the exact reason you brought up. Outbound firewalls can be effective but not when implemented in software on the same box they are protecting. Essentially, if a user can let a program access the internet, then a program can let a program access the internet. By the time the user has executed the virus or trojan, it already can do anything the user can and thats why a number of trojans automatically let themselves onto the net now for the top client side firewalls. Its not that hard to do and there are a few solutions that I believe are currently being worked on to the problem. Outbound software firewalls running on the same box that it is supposed to be protecting are also useless against root kits, which are becoming more and more common these days. So while they do serve a good purpose, I have yet to see a typical user implement it properly (there are ways to make it a lot better, but then the user usually has trouble OKing certain programs).

Most linux distros have no default services that start up and are *public facing* unless you've specified it. I say "Most" rather than "All" because eventhough I've ran more than a handful of distros of the years, I'm sure there are distros out there that do have services start up by default (hopefully in a secure way).

I've done a few XP installs for friends and unless things have recently changed, the default user is an admin and I had to go in and manually add a non-privileged user. Vista, as you said, is resolving this hopefully. The way most distros handle this is that if you need to run a program with higher permissions, a little dialogue will pop up asking for the password, I believe this is the route that Vista is taking.

Okay, I think thats all I wanted to comment on. One more thing though, you referenced Vista several times. Vista is already 2 years behind schedule and it has already had several core features removed. It won't be released until the end of next year and that might get pushed back. Also features may also be cut again. I only point this out because your arguing things about an OS that won't be released for another year at best, and those features may for some odd reason be removed. Arguing a non-existant OS against an existing OS isn't exactly fair I could also argue that within a year, Linux will then again be that much further along and beating Windows in other ways, but lets not get into speculation

Feel free to respond, and please correct anything that may be wrong.

Regards,
Steve

P.S. I know Linux isn't an entity It just tends to be more concise then naming a particular distro. Typically that'll start flame wars about which distro is best... and so I tend to try and remain neutral.; Posted by: sgk284 Posted on: 10/07/05 You are currently: a Guest | Members login | Terms of Use