Java flaw could lead to Windows, Linux attacks

TalkBack 37 of 91:: Next »; « Previous

Thread View
Flat View

RE: Good glad we could agree: Okay unto the breach yet once again...

You are not an admin and therefore cannot be a reliable source as to what Windows can and cannot do. - I am pretty sure you do not have to be an Admin to know what a system can or can't do. I think the time I have spent fixing and breaking Windows lends some credence in that I have experienced many of the issues brought forth.

I am not a MacOSX admin and therefore you do not see me going around saying that MacOSX sucks just because I don't know how to configure it to do the things I want it to do. - RTFM, I did and still do for Windows as well as Linux. Next...

Now, let's examine your "proof":
Monolithic monstrosity: The security ramifications of this is greatly overblown. There have been some decisions that Microsoft have made in this area that I do not agree with but all by itself, it isn't enough to convince me to abandon ship. - Really? Then explain the impact of blaster, klez, melissa, love bug, shatter, IFrame... these are application level attacks that are capable of system level compromise. In a modular and properly designed system the chance of system level access is greatly reduced, not 100% mitigated, but reduced to a very low level of probability of infection / compromise.

Warnings against administrator: This is a default issue, not a design issue and has now been covered several times. FUD! - If this a default then that would imply that it was designed that way, which would make it a design issue.

Many applications can't be run as non-administrator: You have yet to show even one. MS Office runs just fine as a non-administrator. FUD! - Yes MS Office runs, but not all functions are available. It will run but crippled. Some of the FTP software used within my company will not run as a restricted user or as a power user but must have Admin access. Many features such as Activex or even certain library calls required Admin level access within MS Office's own VBA language. We have a large number of Office applications that use VBA to enhance function, try to run them as a user and they fail.
Nortel VPN connectivity software requires Admin access to function.
Point Publisher needs Admin access to function.
ISIS Documents needs Admin access to function.
Just to name some of the apps I have to use that need Admin access.

Ability to arbitrarily run code: Not using IE fixes 99.9% of these bugs. Firefox is great, you should look into it. - Uh, did you miss the part about me not using Windows at home? I use Linux so IE is kinda not a problem. I have been using Firefox for about a year and a half now along with Konqueror and Opera. Until recently Outlook and Outlook Express would also arbitrarily execute code. And I am sure if I did a little bit I can find other resources on a Winbox that will so the same thing.

Shipping with security tools: Every single time Microsoft bundles anything into Windows, you Linux shills complain about monopoly behaviour. So which is it, should Microsoft bundle applications like firewalls or not? Regardless, they do, and in SP2, it is on by default. FUD! - Ah and here is where the Windows folks get so darn confused! We don't care if it ships with the system, what we complain about is the ability or inability to add or remove as we see fit during the install phase. There is a fine line here. SuSE ships with a ton of tools and utilities and yet I can choose to install or NOT to install them as I see fit. When Microsoft includes something, you are not given a choice. This is what we Linux folks are complaining about. You need to shut your yap long enough to hear what is being said. I have no problem with tools and utilities being shipped with a product so long as I have a choice of whether to install them or not or to use something totally different. Take my firewall with SuSE for instance. It's a pretty decent firewall... I don't like the level of protection it provides, so during the install phase I use it for core protection, but afterwards I remove it and install my own custom written firewall rules and I am happy! Can I do that with Windows? Can I remove their firewall completely without breaking something and replace it with my own custom firewall?

Have a nice day, girl? - Sorry to disappoint you but I am very much a man. Nice try at attempting to get my goat though!; Posted by: Linux User 147560 Posted on: 11/24/04 You are currently: a Guest | Members login | Terms of Use