Linked by Amjith Ramanujam on Fri 8th Aug 2008 13:14 UTC
Windows This week at the Black Hat Security Conference two security researchers will discuss their findings which could completely bring Windows Vista to its knees. According to Dino Dai Zovi, a popular security researcher, "the genius of this is that it's completely reusable. They have attacks that let them load chosen content to a chosen location with chosen permissions. That's completely game over."
Permalink for comment 326225
To read all comments associated with this story, please click here.
RE[2]: Bottom Line
by fretinator on Fri 8th Aug 2008 14:57 UTC in reply to "RE: Bottom Line"
fretinator
Member since:
2005-07-06

Windows has a more fine grained permission system than the *nixes but no one uses them.


For those who believe Windows to be a multi-user system at the core, log into you Windows box twice as the same user - i.e., run two simultaneous sessions as the same user. Are you there yet? Even different users being logged in at the same time is done with "fast-user switching". The multi-user OS is an illusion. It is a hobby OS meant to keep track of your CD's and home checkbook. The current web-connected computer was not envisioned when it was created. Meanwhile, Unix was serving 1000's of simultaneous user sessions on a single box. Security was paramount from early on. I agree that Microsoft has done a pretty good job of bolting on fine-grained permissions, etc. with the NT kernel. But no matter how you spin it, processes in the Windows world "long to be free" and by nature tend to take over the computer. Only a massive harness-and-strap framework like we see in the Vista OS can try to prevent these processes from running wild. But just like "life" in the first Jurassic Park movie, they always find a way.

Now lets quit arguing, grab a nice BSD kernel, toss a few bucks at the kernel devs, close it all up for profit, and get to crackin' on that shiny new Winders!

Reply Parent Bookmark Score: 13