Windows Vista gets image flaw fix

TalkBack 23 of 35:

Next »

« Previous

• Thread View
• Flat View

You're fooling yourself

Ok, so you didn't like the particular link - try this one: http://www.itjungle.com/two/two110304-story03.html

An excerpt: "In his report, Petreley basically says that the problems with Windows security are not due to its ubiquity on the desktop and in the data center, but rather are due to the monolithic design of Windows and its nature as a desktop platform where one user and his applications are given full administrator privileges, whereas in a real multiuser system like Linux and Unix, each user has his own privileges and any hack attack is isolated to his own account on that Linux or Unix system. By design, argues Petreley, a vulnerability in any program running on Windows can be used to take down Windows because of the way Windows uses remote procedure calls to link programs to each other inside a single machine or across networks. This is a fundamental difference."

On Windows, the only way to secure against the flaws like the recent WMF variety is to patch the OS as each new vector is discovered. Fine. What do you do in the case of a 0-day exploit? That is the point I am trying to make - that you CAN NOT secure Windows. You can react to discoveries and patch - if that's what you call security, then fine.

-Mike

Posted by: Spikey_Mike   Posted on: 01/18/06 You are currently: a Guest | Members login | Terms of Use

Alert moderator to an offensive message

Subscribe to this discussion via Email or RSS

SponsoredWhite Papers, Webcasts, and Downloads

• The True Costs of Virtual Server Solutions VMware In an economic environment that is repeatedly heralding the message "do ... Download Now
• Why Isn't Server Virtualization Saving Us More? A Few Small Changes May Dramatically Increase Your Efficiency VMware Companies have rapidly adopted server virtualization over the past few ... Download Now
• Reducing Server Total Cost of Ownership with VMware Virtualization Software VMware VMware virtualization enables customers to reduce their server TCO and ... Download Now