Antivirus makers catch up to WMF bug

TalkBack 9 of 14:

Next »

« Previous

• Thread View
• Flat View

Word up

Running with limited privileges can sometimes be impossible. Microsoft takes a lot of crap for their poor decisions, but they're only half the problem. The software app vendors share equal resposibility for the state of Windows security, in that they build their applications requiring poor security practices be in place (vulnerable services running, broad rights given, etc.). And this isn't just small, obscure companies. I had a dust up with IBM about their WebSphere product several years ago. SANS wanted us to take the fight public but we couldn't afford the publicity or time. NIST has claimed for years that they were in the process of creating a certification program for applications that would allow vendors to place a badge on their products to denote they passed a security compliance test - basically that the vendors product doesn't rely on something stupid like admin privileges or services that might not be desirable in an Internet-exposed environment. However, I've yet to see any evidence that the effort is getting anywhere.

Posted by: ejhonda   Posted on: 01/06/06 You are currently: a Guest | Members login | Terms of Use

Alert moderator to an offensive message

Subscribe to this discussion via Email or RSS

SponsoredWhite Papers, Webcasts, and Downloads

• Why Isn't Server Virtualization Saving Us More? A Few Small Changes May Dramatically Increase Your Efficiency VMware Companies have rapidly adopted server virtualization over the past few ... Download Now
• Key Strategies for Federal Agencies - Safe and Cost Effective Migration for Legacy Hardware GovConnection The federal government has mandated that federal agencies reduce energy ... Download Now
• The True Costs of Virtual Server Solutions VMware In an economic environment that is repeatedly heralding the message "do ... Download Now