Linked by Thom Holwerda on Mon 8th May 2006 19:38 UTC
Windows "New security features in Windows Vista will largely eliminate the need to run separate antispyware or firewall software, according to a new analyst report. Due out early next year, the next major release of Microsoft's flagship operating system promises not only to increase security for consumers, it will also dramatically affect the $3.6 billion market for Windows security products, according to a Yankee Group report scheduled to be published Monday." That same report also claims that Vista's security measures will hurt in the enterprise sector, and it advises companies to stick with XP SP2 until 2008.
Order by: Score:
Reminders
by Al2001 on Mon 8th May 2006 20:04 UTC
Al2001
Member since:
2005-07-06

It would make more sense if they only implemented those reminders in the home versions it's somewhat insulting to have those on an enterprise level OS.

I guess a those people who blame windows for everything including there sink blocking have asked for it. Although windows is lacking in the security dept. most of the problems are down to lack of education IMV.

Reply Score: 3

RE: Reminders
by n4cer on Mon 8th May 2006 20:27 UTC in reply to "Reminders"
n4cer Member since:
2005-07-06

You can disable or change the behavior of UAC (and many other features) using group policy.

The report also suffers from analysis of UAC too early in the development process. It has improved a lot since the December build, and was both then and now in active development. An accurate evaluation can't really be made until the release candidate stage, which still gives corporations and end-users months to decide whether to move forward.

Reply Score: 1

RE: Reminders
by JustAnotherMacUser on Mon 8th May 2006 20:28 UTC in reply to "Reminders"
JustAnotherMacUser Member since:
2006-01-08

Although windows is lacking in the security dept. most of the problems are down to lack of education IMV.

A computer science degree?

Reply Score: 1

RE[2]: Reminders
by Al2001 on Mon 8th May 2006 20:34 UTC in reply to "RE: Reminders"
Al2001 Member since:
2005-07-06

I owned a ZX spectrum when they were new does that count for anything? ;)

Reply Score: 1

RE[3]: Reminders
by rockwell on Tue 9th May 2006 16:04 UTC in reply to "RE[2]: Reminders"
rockwell Member since:
2005-09-13

It doesn't count as much as my Commodore 64 :-p

Still one of the best computers ever, IMO.

Reply Score: 1

RE[4]: Reminders
by gdanko on Wed 10th May 2006 02:19 UTC in reply to "RE[3]: Reminders"
gdanko Member since:
2005-07-15

It was Chuck Peddle and Commodore, not the Steves and Apple, that brought affordable and usable computing to the masses. The Apple I was abysmal where the Pet kicked ass.

Reply Score: 1

RE: Reminders
by gdanko on Wed 10th May 2006 01:42 UTC in reply to "Reminders"
gdanko Member since:
2005-07-15

no way. have clippy come up and ask, "It appears your server is at risk. Would you like help securing your server?"

Reply Score: 1

Another antitrust lawsuit
by mlopes on Mon 8th May 2006 20:15 UTC
mlopes
Member since:
2005-07-18

And Microsoft bites the dust again, waiting for another antitrust lawsuit to be filled in.

Well, I know, the pleasing "security" out of the box without inviting the user to spend some extra bucks. But this is quite wrong. First off, there are competitors which will be quite harmed by this measure -- another monopolist move from Microsoft.

Second, their approach is making patches instead of correcting the holes and all the mess they made. After all, 6 years for preparing Vista should be enough to rethink and rebiuld the whole architecture in order to minor security problems.

So, they deserve another antitrust lawsuit.

Reply Score: 0

RE: Another antitrust lawsuit
by twenex on Mon 8th May 2006 20:35 UTC in reply to "Another antitrust lawsuit"
twenex Member since:
2006-04-21

Nevermind, Microsoft's strategy of trying to build earth-quake proof skyscrapers out of an endless series of wattle-and-daub bungalows will backfire in the end. And by the time it does, there will be real alternatives for 99% of the Windows users out there.

Reply Score: 2

v RE[2]: Another antitrust lawsuit
by AKuch on Mon 8th May 2006 20:56 UTC in reply to "Another antitrust lawsuit"
RE[3]: Another antitrust lawsuit
by endy on Mon 8th May 2006 22:46 UTC in reply to "RE[2]: Another antitrust lawsuit"
endy Member since:
2005-09-02

Because Linux (and BSD) had it in the first place, and did it well.

I can't even understand how an OS could have ever been released as "Internet ready" and NOT have a firewall like Windows did for so long. I mean, that's like selling cars with no locks!

I won't even start on the Windows virus and anti virus topic...

Reply Score: 1

RE[3]: Another antitrust lawsuit
by leech on Tue 9th May 2006 01:32 UTC in reply to "RE[2]: Another antitrust lawsuit"
leech Member since:
2006-01-10

Probably because there is no point in having other firewalls for Linux because it's open source and they can't compete based on price. I use Shorewall myself, but all that it does is simplify iptables.

You may as well ask why no one has sued OpenBSD for AuthPF.

Reply Score: 2

RenatoRam Member since:
2005-11-14

There are commercial firewall systems on linux other than the native one, actually.

You just don't see them on the desktop: CheckPoing Firewall-1 is such a firewall.

And don't forget that vendors can still produce nice and fancy configuration GUIs and suites of alerts/monitoring tools for the linux desktop, using the native iptables firewall as engine, and doing much less work.

Reply Score: 1

RE[3]: Another antitrust lawsuit
by gdanko on Wed 10th May 2006 01:45 UTC in reply to "RE[2]: Another antitrust lawsuit"
gdanko Member since:
2005-07-15

Apples to oranges, nimrod. ;)

Reply Score: 1

RE: Another antitrust lawsuit
by sappyvcv on Mon 8th May 2006 21:18 UTC in reply to "Another antitrust lawsuit"
sappyvcv Member since:
2005-07-06

Who says they are not trying to fix the holes?

Maybe they have finally realized that you can't make security perfect, so you should have a backup plan, just in case something goes wrong (as does on all operating systems). Something also to to reassure customers.

Reply Score: 0

The $3.6 Billion...
by JustAnotherMacUser on Mon 8th May 2006 20:22 UTC
JustAnotherMacUser
Member since:
2006-01-08

The $3.6 billion market for Windows security products...

...that shouldn't have existed in the first place.

Reply Score: 5

RE: The $3.6 Billion...
by LinuxRocks on Mon 8th May 2006 23:00 UTC in reply to "The $3.6 Billion..."
LinuxRocks Member since:
2005-11-11

This is quite a true statement.

You don't see a $3.6 billion dollar Linux or Mac security market because there is no need for one.

This is the whole reason that Windows is so damn vulnerable; there is a multi-billion dollar market that was created because of MS's inability to secure their code...

Or is it a purposefully created endeavour to fuel extra money going back to MS or some other bureaucratic agency? I mean how hard is it to really secure software; the open source community patched gaping holes in a matter of weeks while Windows takes months or years to finally get fixed...

No, I think there is more to Windows being insecure than meets the eye...

Reply Score: 2

RE[2]: The $3.6 Billion...
by nedvis on Tue 9th May 2006 02:58 UTC in reply to "RE: The $3.6 Billion..."
nedvis Member since:
2006-01-02

Microsoft created that $3,6 billion market by making Swiss cheese operating systems and it is now the time to destroy that shameless business.
Fortunately I've never shelled out single penny for anti-virus, anti-spyware and anti-whatever software but
other people did and I think there must be the way for them to reimburse expenses they had for using Microsoft (insecure) code.
After six years of using various Linux distributions it has become my OS of choice and only MS OS I'm still using is Windows 2000 just for compatibility reasons.
I don't think I will ever get back to MS crowd not even
with their "promissing" Vista OS.
I wasted too much time fixing-repairing-rebuilting my MS ran PC boxes so I think Microsoft made already irreparable dammages to its own renomee.

Reply Score: 5

RE[2]: The $3.6 Billion...
by rockwell on Tue 9th May 2006 16:05 UTC in reply to "RE: The $3.6 Billion..."
rockwell Member since:
2005-09-13

//You don't see a $3.6 billion dollar Linux or Mac security market because there is no need for one. //

Nor are there NEARLY as many Linux/OS X users ...

But you're right. For now.

Reply Score: 1

nutshell
by Thom_Holwerda on Mon 8th May 2006 20:36 UTC
Thom_Holwerda
Member since:
2005-06-29

Two problems caused the security problems at Microsoft:

1) Windows application programmers. They have refused systematically to make their applications aware of the difference between admin and normal user.

2) Microsoft. They refused to make the first user in XP a non-admin user, while also not enforcing the admin/user divide strongly enough to programmers.

That's the problem in nutshell. Let's hope Vista changes all that.

Reply Score: 5

RE: nutshell
by twenex on Mon 8th May 2006 21:38 UTC in reply to "nutshell"
twenex Member since:
2006-04-21

Reputedly, it does, but also turns Vista into even worse nagware than XP was already:

Consider - drag an icon to the Recycle Bin. "Are you sure you want to drag this file to the Recycle Bin?"

Translation: "Are you sure you want to be nagged yet again about doing something that, if it's a mistake, is *easily reversible*?"

Answer: "No! In fact I'm sure I f******* don't!"

The Amiga had a Trashcan you could pull things out of again, and it didn't ask stupid questions, iirc. I NEVER lost a file out of carelessness using it.

Reply Score: 4

RE: nutshell
by Larz on Tue 9th May 2006 08:21 UTC in reply to "nutshell"
Larz Member since:
2006-01-04

Windows application programmers. They have refused systematically to make their applications aware of the difference between admin and normal user.

I donīt disagree, but I have a couple of remarks.

Firstly, as a sad fact of life, many of the Windows application developers that systematically refused to make their applications aware of the users privileges, came from within Microsoft. Privilige management was never a part of their application development culture.

Secondly, the part of the security model that concerns userrights and permissions that a user require to perform his/her tasks is a mess. Often you end up requiring admin access to perform simple things.

The Windows security model offers terrific granular control of the users rights, but the nature of the registry, and the messy directory structure makes privilege management very very hard.

Reply Score: 1

It's always the same
by Ford Prefect on Mon 8th May 2006 21:27 UTC
Ford Prefect
Member since:
2006-01-16

This was also claimed about SP2. It was claimed about XP as well...


Lets FIRST see the product and THEN talk about security consequences.

Reply Score: 4

RE: It's always the same
by twenex on Mon 8th May 2006 21:39 UTC in reply to "It's always the same"
twenex Member since:
2006-04-21

Amen.

How's Marvin, btw?

Reply Score: 2

RE[2]: It's always the same
by Ford Prefect on Tue 9th May 2006 13:17 UTC in reply to "RE: It's always the same"
Ford Prefect Member since:
2006-01-16

He's complaining.

Reply Score: 2

It's like...
by Sphinx on Mon 8th May 2006 22:35 UTC
Sphinx
Member since:
2005-07-09

deja vu all over again.

Reply Score: 1

Microsoft neck deep in its own hole
by TechGeek on Tue 9th May 2006 00:58 UTC
TechGeek
Member since:
2006-01-14

Microsoft has really dug itself into quite a hole now. It owns such a large market share that its a monopoly. And due to their short sightedness or maybe their money first attitude, has caused the creation of several markets based almost wholey on their product. NOw they are in a catch 22. If they fix the problems to make their product better, they eliminate the need for that market. And since they are a monopoly, everything they do has legal consequences to it. This is proof of why a multi vendor market is needed. Like it or not, we need Linux and Mac OS X, and so does MS. While you cant really put free out of business, think about the sh**storm that would ensue if Apple went under. The feds would have no choice but to break up MS just to jump start the OS market. Why do you think MS invested in Apple? To help preserve them as a competitor.

Reply Score: 3

alcibiades Member since:
2005-10-12

...Like it or not, we need Linux and Mac OS X....

Well, we need Linux. OSX, whatever its merits, is just not competing in the same space as Windows.

Why? Because the only way you can get it is by buying Apple hardware. This means it is not an effective competitor. Its competing in a different segment altogether.

Please note: I am not saying (here) that this is good or bad. I am not saying that Apple should or shouldn't do anything different. This is a very restricted factual point about market segementation, not about company strategy. But, it is true. If Apple were to go away from the computer business tomorrow, it would make little difference to Windows' competitive situation.

Now if Linux were to vanish....

Reply Score: 3

v Umm nope
by Snooks on Tue 9th May 2006 04:40 UTC
RE
by Kroc on Tue 9th May 2006 06:41 UTC
Kroc
Member since:
2005-11-10

I'm supprised how nobody has mentioned how this could make things worse for end users.

With Anti-Spyware baked into Vista, it'll quickly become the number 1 targetted product by spyware makers, aiming to disable it first and then run rampant. Users will just get a false sense of security rather than protection that will last.

And what if Microsoft buys up a spyware vendor and then sends out updates to Windows Defender to now ignore their wares.

Reply Score: 3

Stuff
by HappyGod on Tue 9th May 2006 07:28 UTC
HappyGod
Member since:
2005-10-19

So,

1. Some people here are slamming Microsoft because they are including new anti-spyware measures.

2. Some people here are slamming Microsoft because they didn't introduce anti-spyware sooner.

3. Some people here are slamming Microsoft irrespective of spyware 'cause they feel Windows was programmed badly.

4. And the rest are just wasting our time talking up their alternate OS no matter what the topic.

Tough crowd.

Reply Score: 2

RE: Stuff
by endy on Tue 9th May 2006 12:55 UTC in reply to "Stuff"
endy Member since:
2005-09-02

Tough crowd.

Yep, and rightly so. Had MS done things properly from the start they wouldn't be in this mess.

Don't blame the people complaining, blame MS for giving people the reason to complain.

Reply Score: 2

RE[2]: Stuff
by rockwell on Tue 9th May 2006 16:09 UTC in reply to "RE: Stuff"
rockwell Member since:
2005-09-13

//Had MS done things properly from the start they wouldn't be in this mess//

Yah, a hell of a mess ... US $250 billion market cap ... $40 billion in cash reserves ... 90% desktop marketshare.

Horrible. Just horrible. They should pack it in, they're DONE.

<yawn>

Reply Score: 0

RE[3]: Stuff
by LinuxRocks on Tue 9th May 2006 18:50 UTC in reply to "RE[2]: Stuff"
LinuxRocks Member since:
2005-11-11

"Yah, a hell of a mess ... US $250 billion market cap ... $40 billion in cash reserves ... 90% desktop marketshare.

Horrible. Just horrible. They should pack it in, they're DONE.

<yawn>"

That's only because of their illegal market practices in the past. I have seen a somewhat slow, but noticeable market decline in Servers and some Desktops to Mac and Linux over the last few years. I think in the next 5 to 10 years, MS will only have 60% to 70% in either market (Maybe sooner judging by recent news of government's migrating to Linux and other countries doing the same.)

Enjoy it while you can, Windows users, your days are in fact numbered...

Reply Score: 2

RE[4]: Stuff
by rockwell on Tue 9th May 2006 18:53 UTC in reply to "RE[3]: Stuff"
rockwell Member since:
2005-09-13

//That's only because of their illegal market practices in the past.//

If you honestly believe that's the only reason, I've got some swampland in Florida for sale ... cheap!

Reply Score: 0

RE[4]: Stuff
by tomcat on Tue 9th May 2006 19:44 UTC in reply to "RE[3]: Stuff"
tomcat Member since:
2006-01-06
RE[5]: Stuff
by MysterMask on Wed 10th May 2006 08:56 UTC in reply to "RE[4]: Stuff"
MysterMask Member since:
2005-07-12

Keep spinning... the numbers tell a different story


I'm astonished that there are still people not getting the difference between market share and install base.
Those number only says that the MS raised it sales volume compared to others. It does not take into account
1) the number of OSes actually used (e. g. in our company, MS server hardware normally got "recycled" as SCO Unix server when the next iteration of MS bloatware was too demanding for the hardware).
2) The differences in price. E. g. if you buy a Linux distro for $100 or a licence for Win2003 for $1000 (numbers are for example only), then the market share of Windows is 10 times higher but the install base is equal.

So - keep spinning

Reply Score: 2

RE[3]: Stuff
by TechGeek on Tue 9th May 2006 20:33 UTC in reply to "RE[2]: Stuff"
TechGeek Member since:
2006-01-14

I am not gonna sit here and claim that MS is in a bad position financially. Just that their past actions are going to catch up to them. The number of lawsuits against MS is rising at a very steep rate. MS will never go out of business, but the horizon isnt as sunny as it used to be. Consider the fact that even Bill Gates said that the future of MS is web services and the fact that AJAX is plaform independent. There is increasingly better quality software available for free. People aren't going to keep paying the MS tax if they can avoid it. And MS hasnt exactly gone out of its way to persue brand loyalty. I think one of two outcomes will happen. MS will step too far out of line and end up like AT&T. Or, MS will become like Ford, just another player in the market.

Reply Score: 1

RE[2]: Stuff
by HappyGod on Wed 10th May 2006 02:35 UTC in reply to "RE: Stuff"
HappyGod Member since:
2005-10-19

Sure, and I agree that patching Windows to a toally secure point is a very difficult (some might say impossible) task.

All I'm saying is, the damage is done and we're stuck with it, so let's not blast them for trying to make it as secure as possible.

With regards to hindering competition, I think that security *should* be in built into an OS, and the market that evolved because Windows was missing a crucial component will just have to adapt or die out.

It's not the same as Netscape versus IE. Internet browsing is an optional extra - security isn't.

Reply Score: 1

RE[3]: Stuff
by lighans on Wed 10th May 2006 18:12 UTC in reply to "RE[2]: Stuff"
lighans Member since:
2006-01-14

Happygod:
It's not the same as Netscape versus IE. Internet browsing is an optional extra - security isn't.

Tricky. Internet is more used than for example Office-tools. In case of s'thing like MS Live of eyeOS, internet is essential for Office, video or music tasks.
It might/could be that the next generation of OSes are only ment for connecting to internet and external storages. Protection of your loved ones are truly dependent of firewalls and virusscanners.

Reply Score: 1

XP can hit those markets too.
by Lodz on Tue 9th May 2006 07:40 UTC
Lodz
Member since:
2006-05-09

Here's the thing. XP can hit those markets where it hurts if it's setup right.

1. Use restricted user for just about everything. (This worked fine in Win2k too)

2. Activate software restrictions so that scripts and applications can't run from any source that restricted users have write access to. By default, once it's active and set to deny all applications, restricted users can't run random crap unless the Administrator allows it by hash value, or the directory it's in allows it (which they shoulden't have write access to). Hell certificate code signing launch restrictions work great if you can do it. Generally the defaults on software restrictions simply work, though thought does need to be put in to how to allow .lnk files to operate. (Too bad software restrictions in Win2k are half-assed compared to XP/2003). Also, current Macromedia products need a hash value added to the allow rules for that Macrovision protection they are using. Always sticks it in a users temp folder.

3. Outbound firewall? Logging ain't great, but I've used IPsec, which comes with Windows 2000-2003, as an inbound/outbound firewall. I don't use it for inbound blocking anymore unless I need to actually setup subnet rules, but if I want to cut myself off from the outside world or cut the outside world off from me, IPsec does it. I have control of the rules, and nothing makes up it's mind for me here.

So with that, I don't really need any spywear software running or virus scanners, because none of them can infect me. There are a few ways to sneak past all the protection (perl and java are not secure compared to WSH in conjunction with software restrictions... at least, I have no idea if it's possible to make them force signing or anything like that). Either way, it starts requiring multiple holes to take advantage of.

I was never hit with anything "bad" on 2000, XP, or 2003. And I've always used IE as my main browser. Never had any weird files start showing up on my systems or nothing.

Lodz

Edited 2006-05-09 07:43

Reply Score: 2

Paying for Anti-Virus
by Darkelve on Tue 9th May 2006 07:47 UTC
Darkelve
Member since:
2006-02-06

"Fortunately I've never shelled out single penny for anti-virus, anti-spyware and anti-whatever software but
other people did and I think there must be the way for them to reimburse expenses they had for using Microsoft (insecure) code."

This is why I am impressed with the Antivirus vendors who actually offer a USEFUL (fully functional, non-expiring, with updates) version of their product for free (mostly for home use).

Sure it might be wrong that the business exists in the first place, but at least these companies offer home users a choice.

Reply Score: 1

v Panic
by siki_miki on Tue 9th May 2006 13:01 UTC
RE: Panic
by raver31 on Tue 9th May 2006 15:55 UTC in reply to "Panic"
raver31 Member since:
2005-07-06

This is the old "if you are paranoid, what do you do if they really are out to get you?", attiute, that some Windows users see.

Windows malware does not need you to click on "dodgy" website, or open a porno attachement, you will get infected just by connecting to the internet if you are not protected.

YOU, might be protected a bit, if you are using a router, however, not all malware is virus, your machine might be a zombie, continually sending out spamm to MY email address.

See, if YOU have an insecure system, everyone else here suffers for it. Sort it out man.

Reply Score: 1