Why Microsoft still can’t get Windows’ security right

“Four years ago, Bill Gates dispatched a companywide e-mail promising that security and privacy would be Microsoft’s top priorities. Gates urged that new design approaches must ‘dramatically reduce’ the number of security-related issues as well as make fixes easier to administer. ‘Eventually,’ he added, ‘our software should be so fundamentally secure that customers never even worry about it,'” Adam L. Penenberg writes for Slate.com. “Microsoft customers haven’t stopped worrying. A year later, Windows was hit with several nasty worms, including Slammer, Sobig, and Blaster. The viruses caused major traffic bottlenecks throughout the world, which cost tens of billions of dollars to clean up. Vulnerabilities deemed “critical” have forced the company to release an almost unending stream of patches and fixes to the Windows operating system, Microsoft Office, and Internet Explorer. Just last week, another problem reared its head—a security hole that could allow Windows users to become infected with adware, spyware, or viruses by simply viewing an e-mail, instant message, or Web page.”

“While the company claims that Vista will be more secure against hack attacks, the computer security professionals I talked to are skeptical. ‘We hear this each and every time Microsoft comes out with a new operating system,’ says Brian Martin, an independent computer security consultant. ‘It is still built on the same legacy code, it is still written without adhering to secure coding practices, it is still thrown to the masses without adequate security testing.’ Richard Forno, a principal consultant for KRvW Associates and a former senior security analyst for the House of Representatives, believes that Microsoft is a threat to national security,” Penenberg writes.

“Microsoft’s security problems are only going to get worse. The company designs its products to work together, creating a Microsoft monoculture. Because there are so many shared paths from Internet Explorer, Outlook, and Windows Media Player into the operating system, if you exploit one, you exploit them all. Vista promises to continue this consolidation by making the operating system the glue that connects users to their PCs, televisions, PDAs, and portable music and video players,” Penenberg writes. “What can you do to protect yourself? Besides avoiding Microsoft products, one way would be to use substitutes whenever possible. If you run Windows or the upcoming Vista, use a different e-mail program, browser, and/or media player than the ones that come in the box. Stay up to date on patches and anti-virus software. And the next time Bill G. promises to make software that is so fundamentally secure that customers never have to worry about it, ask him what decade he plans to release it.”

Full article here.

MacDailyNews Take: Macintosh. Because life’s too short.

Advertisements:
Get Free Shipping on Top-Rated iPod and Mac Accessories
The New iPod with Video. The ultimate music & video experience on the go. From $299. Free shipping.
Connect iPod to your television set with the iPod AV Cable. Just $19.00.
The New iMac G5. Built-in camera and remote control. From $1299. Free shipping.
Apple USB Modem. Easily connect to the Internet using your dial-up service. $49.00.

Related MacDailyNews articles:
Mac tips for former Windows users – December 28, 2005
Switching from Microsoft Windows to Apple Macintosh – December 04, 2005
Apple’s Mac OS X, Safari web browser show market share gains – December 03, 2005
Want to switch to Mac? Mossberg answers common questions – November 10, 2005
Why people are switching from Microsoft’s Windows to Apple’s Mac OS X – November 09, 2005
Windows PC retailers face tough holiday season, meanwhile Apple stores are packed as Mac sales surge – November 09, 2005
Analyst estimates over a million Windows to Mac switchers during 2005’s first three quarters – November 07, 2005
Windows sufferers: It’s not your fault, but it is your problem – switch to Mac – November 07, 2005
Tech writer: Windows PCs highly vulnerable to zombie hijacking; get an Apple Mac instead – November 06, 2005
Windows switchers, now’s your chance: Apple Mac mini with Mac OS X Tiger for $379 – November 03, 2005
Computer columnist: anti-virus software purely optional for Apple Macs, not so for Windows – November 01, 2005
Microsoft apologists and why Apple’s Mac OS X has zero viruses – October 24, 2005
Mossberg: Switching from Windows to Mac – software not an expensive proposition – September 30, 2005
Windows to Mac switchers: recommendations and Total Cost of Ownership analysis – September 29, 2005
Switching from Windows to Mac is easy and liberating – September 14, 2005
Mossberg offers resources for Windows users interested in switching to Apple Mac – August 18, 2005
Windows users’ questions and concerns answered about Windows to Mac switch – July 27, 2005
Get your Outlook info off your PC and onto your Mac – March 05, 2003
The best way to transfer Windows Outlook folders to Mac OS X – January 22, 2003

Yahoo’s CES keynote riddled with glitches due to unreliable Microsoft Windows – January 06, 2006
F-Secure recommends Windows users go back to text-only computing – January 03, 2006
Microsoft Windows’ Zero-Day WMF flaw threats widespread; Macintosh unaffected – December 29, 2005
Security company Sophos: Apple Mac the best route for security for the masses – December 06, 2005
Microsoft Windows virus spreads rapidly; Apple Macintosh unaffected – November 28, 2005
Computer columnist: anti-virus software purely optional for Apple Macs, not so for Windows – November 01, 2005
Microsoft apologists and why Apple’s Mac OS X has zero viruses – October 24, 2005
NY Times’ Pogue: Apple’s iMac G5 with sleek, virus-free, spyware-free OS earns place in living room – October 19, 2005
$500 bounty offered for proof of first Apple Mac OS X virus – September 27, 2005
Symantec: 10,866 new Microsoft Windows virus and worm variants in first half 2005 – September 19, 2005
How to avoid viruses and malware? Dump your Windows PC and get an Apple Macintosh – August 22, 2005
Do Apple Mac OS X users need antivirus software? – August 22, 2005
ZDNet: How many Mac OS X users affected by the last 100 viruses? None, zero, not one, not ever – August 18, 2005
Hackers already targeting viruses for Microsoft’s Windows Vista – August 04, 2005
16-percent of computer users are unaffected by viruses, malware because they use Apple Macs – June 15, 2005
Intel CEO Otellini: If you want security now, buy a Macintosh instead of a Wintel PC – May 25, 2005
There are no viruses for Apple’s Mac OS X – May 13, 2005
Apple touts Mac OS X security advantages over Windows – April 13, 2005
97,467 Microsoft Windows viruses vs. zero for Apple Mac’s OS X – April 05, 2005
Apple’s Mac OS X is virus-free – March 18, 2005
Cybersecurity advisor Clarke questions why anybody would buy from Microsoft – February 18, 2005
Security test: Windows XP system easily compromised while Apple’s Mac OS X stands safe and secure – November 30, 2004
Microsoft: The safest way to run Windows is on your Mac – October 08, 2004
Information Security Investigator says switch from Windows to Mac OS X for security – September 24, 2004
New York Times: Mac OS X ‘much more secure than Windows XP’ – September 18, 2003
Defending Windows over Mac a sign of mental illness – December 20, 2003

30 Comments

  1. Microsoft as a company might not be a threat to national security, but widespread adoption of the Windows OS and associated applications definitely puts us at risk. We all know it. We all cringe when we think of a Department of Homeland Security “standarizing” on Windows.

    But when we, as technical professionals, try to push for a proper analysis of the risks associated with a Windows monoculture, we typically get blank stares. When we push for alternative components – say, Firefox instead of IE – we as typically hear about “cost of conversion”.

    But anyone whose been in IT over the years knows we’re converting all the time: Windows 3.1 to ’95 to NT 3.51 to NT 4.0 to Windows 2000 to XP. Mainframe app to local app to client-server to web and java. Netscape to IE. Desktop to laptop. Old PC to new. Each such change presents an opportunity to migrate to an alternative platform.

    But large organizations reliant on specialized home-grown apps won’t migrate away from Windows until those apps are rearchitected to support an alternative environment, and small businesses reliant on specialized apps (say, real estate agents, or opticians) won’t migrate until they have, or become aware of, viable non-Windows alternatives.

    Until then, they’ll continue to be at risk.

  2. “if you exploit one, you exploit them all”

    “Just last week, more digital content providers were announcing additional deals with competitors like Microsoft and others that use the software giant’s Windows operating system.”

    I can see it now–PlaysForSure iPod killers…THAT GET INFECTED!!!!!

    Threat to national security is too soft a take on it! When M$ continues to collapse over the 2-3 years, and starts to drag down stock portfolios all over the country…

    SJ once said that he never met an HR type “who was worth a damn” to a person he was interviewing for the job. I will gladly add IT people to that list–because I’ve never actually seen a Mac IT person. (If you are one and read this WAY TO GO!)

  3. iVlad:

    I am blessed enough to be a Mac IT person. I have the utter joy of running a small network of 7 macs most of which are running Tiger, a Tiger server, and a laptop that is VPN’ed in from half way across the country and “It just works”. The only issues I’ve had (Except when I was upgrading the equipment) are with my one and only PC that I need to run one app and if I could get virtual PC to run reliably I would ditch the PC hardware in a heart beat to run it on a mac.

    So basically what I’m saying I guess is, don’t give up. It will change. Apple will take the #1 spot from Microsoft. Apple is doing a planned assult on the status quo, it’s a war out there… A media war, where the fighting is done in the news papers, radio, tv, word of mouth…. But if Apple sticks to there guns and does what is right, they will WIN!

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.