Linked by Thom Holwerda on Fri 18th May 2007 22:17 UTC
Windows Some of the changes in the upcoming release of Windows Server 2008 are a response to features and performance advantages that have made Linux an attractive option to Microsoft customers. One of these is the fact that Linux has less of a surface area, which led customers to believe that Linux is inherently more secure, Bill Laing, the general manager for Microsoft's Windows Server division, told eWEEK. "Having less surface area does reduce the servicing and the amount of code you have running and exposed, so we have done a lot of work in 2008 to make the system more modular. There are more than 30 components not installed by default, which is a huge change," Laing said. "We also have server core, which doesn't have the GUI, so I would say that is a response to the options people had with Linux that they didn't have with Windows."
Thread beginning with comment 241610
To view parent comment, click here.
To read all comments associated with this story, please click here.
renhoek
Member since:
2007-04-29

first of all, most video drivers are third party and running really deep in the kernel, therefore prone to problems. all extra running services and files provide an extra angle of attack. running no services at all will be extremely safe (and useless ;) ), running all services will be very unsafe. so it's up to the system maintainer to enable the minimal set of services required to do the job, that's just common sense.

in the real world i had little trouble with windows servers (stability wise), but i feel safer when a program is not installed. that way i'm 100% sure it can't crash and it can't be used to crack my server.

Reply Parent Bookmark Score: 5

jelway Member since:
2006-05-14

I'm sorry, but aside from that stupid JPEG/Windows GDI issue - what other exploits are related to the gui?

Reply Parent Bookmark Score: 3

renhoek Member since:
2007-04-29

http://www.microsoft.com/technet/security/advisory/archive.mspx

not all gui/server related, but i rather not worry about stuff which should not be on the machine in the first place.

Reply Parent Bookmark Score: 3

glarepate Member since:
2006-01-04

...what other exploits are related to the gui?


The cursor of death (from 2002/3 or somesuch] which is experiencing a revival lately. In all versions from '95 on up.

Reply Parent Bookmark Score: 1

phoenix Member since:
2005-07-11

most video drivers are third party and running really deep in the kernel

All the Windows Server boxes I've had the (dis)pleasure to see in action have used the generic SVGA driver from MS at 800x600, or at most 1024x768.

Can't think of a good reason (although there probably is one out there) to need a larger screen on a server, or a better drive than a plain 2D one.

Reply Parent Bookmark Score: 3