__/ [ William Poaster ] on Tuesday 03 October 2006 12:13 \__
> On Tue, 03 Oct 2006 11:44:36 +0100, Roy Schestowitz wrote:
>
>> Analysts Doubt Microsoft's Vista Will Be Adopted Before Late 2007
>>
>> ,----[ Quote ]
>> | Microsoft's bullish projections don't appear to jibe with most
>> | current third-party customer surveys, such as one online survey of 314
>> | IT professionals conducted by Computer world in August. Just 17 percent
>> | of IT professionals say they are considering rolling out Windows Vista
>> | in the first year. Forty-one percent of respondents said they had no
>> | plans to roll out Vista, while 35 percent said they would begin testing
>> | Vista only after it ships.
>> `----
>>
>> http://biz.yahoo.com/seekingalpha/061002/17776_id.html?.v=1
>
> As was reported in another thread, by "Ghost", M$ appears to be taking
> risks with Fista's security according to McAfee & Symantec...(McAfee took
> a large ad in the Financial Times yesterday about it.) Whether they just
> wanted to have a rant or whine about M$, I dunno.
> However, supposing what they say *is* true & that Fista's kernel has
> *already* been cracked but they (or any other IT security firms) are
> unable to do anything to "protect" windows against malware?
> Would *you* risk buying it?
> M$, OTOH, said they are on top of it...uh,huh.. Now as M$ have
> prevaricated, or covered things up, in the past, would you *still* trust
> them?
Microsoft /claimed/ that the infection rates are somewhere below 2% and that,
thereofre, the problem can be considered negligible. That is only one among
the security FUD (disinformation) compaigns that Microsoft has got going in
the press.
> Apparently M$ has also said that if the EU wants to "play silly
> buggers", they won't ship Fista to whingeing countries. Oh, we can only
> HOPE! <grin>
> http://www.theinquirer.net/default.aspx?article=34825
>
> F8ck M$ & the horse they rode in on, I'm staying with linux! :-)
By concidence, I had posted something on the topic you are alluding to just 2
minutes before I read your reply. For the record, here is the post repeated
verbatim.
===
McAfee: Microsoft completely unrealistic on Vista
,----[ Quote ]
| Windows Vista does not ship with antivirus software installed and active,
| but for the first time Microsoft will be promoting their own antivirus
| service in Windows OneCare. Alex Eckelberry, CEO of Sunbelt Software,
| has already called Microsoft's plans predatory based on pricing. McAfee
| is focusing its critique on operating system design, arguing instead that
| Microsoft's decisions with Vista will simply make the operating system
| less secure.
|
| In the advertisement, McAfee CEO George Samunek is quoted as saying,
| "Microsoft is being completely unrealistic if, by locking security
| companies out of the kernel, it thinks hackers won't crack Vista's kernel.
| In fact, they already have." The advert continues: "With its upcoming
| Vista operating system, Microsoft is embracing the flawed logic that
| computers will be more secure if it stops co-operating with the
| independent security firms."
`----
http://arstechnica.com/news.ars/post/20061002-7875.html
The back the claim that Vista has already been hacked (even at kernel
level):
Black Hat Takes Vista to Task
,----[ Quote ]
| She demonstrated two potential attack vectors. One could allow unsigned
| code to be loaded into the Vista kernel. The second vector involved
| taking advantage of AMD's Pacific Hardware Virtualization to inject a
| new form of super malware that Rutkowska claimed to be undetectable.
`----
http://www.internetnews.com/security/article.php/3624861
Symantec highlights Windows Vista user vulnerabilities
,----[ Quote ]
| Symantec has shed more light on potential vulnerabilities in Windows
| Vista that could circumvent new security measures and leave users
| vulnerable to attack.
`----
http://www.theregister.co.uk/2006/08/02/symantec_windows_vista_security/
Symantec continues Vista bug hunt
,----[ Quote ]
| After poking around the Windows Vista networking stack, Symantec
| researchers have tried out privilege-escalation attacks on an early
| version of the Windows XP successor.
|
| "We discovered a number of implementation flaws that continued to allow
| a full machine compromise to occur," Matthew Conover, principal
| security researcher at Symantec, wrote in the report titled "Attacks
| against Windows Vista's Security Model." The report was made available
| to Symantec customers last week and is scheduled for public release
| sometime before Vista ships, a Symantec representative said Monday.
`----
http://news.zdnet.com/2100-1009_22-6097976.html
Symantec Finds Flaws In Vista's Network Stack
,----[ Quote ]
| Researchers with Symantec's advanced threat team poked through
| Vista's new network stack in several recent builds of the
| still-under-construction operating system, and found several bugs
| -- some of which have been fixed, including a few in Monday's
| release -- as well as broader evidence that the rewrite of the
| networking code could easily lead to problems.
|
| [...]
|
| Among Newsham's and Hoagland's conclusions: "The amount of new
| code present in Windows Vista provides many opportunities for
| new defects."
|
| "It's true that some of the things we found were 'low-hanging
| fruit,' and that some are getting fixed in later builds,"
| said Friedrichs. "But that begs the question of what else
| is in there?"
`----
http://www.techweb.com/wire/security/190700049;jsessionid=MWLALDT21M1...
Symantec Says Windows Vista Will be Less Secure than XP
,----[ Snippet ]
| Symantec said earlier last week that there were no viruses for Apple's
| OS X.
`----
http://www.dailytech.com/article.aspx?newsid=3389
Symantec sees an Achilles' heel in Vista
,----[ Quote ]
| Some of Microsoft's efforts to make Windows Vista its most stable and
| secure operating system ever could cause instability and new security
| flaws, according to a Symantec report.
|
| [...]
|
| "Microsoft has removed a large body of tried and tested code and
| replaced it with freshly written code, complete with new corner cases
| and defects," the researchers wrote in the report, scheduled for
| publication Tuesday.
`----
http://news.zdnet.com/2100-1009_22-6095119.html
--
Roy S. Schestowitz | Windows XP: Dude, where's my RAM?
http://Schestowitz.com | Open Prospects ¦ PGP-Key: 0x74572E8E
Tasks: 139 total, 1 running, 136 sleeping, 0 stopped, 2 zombie
http://iuron.com - knowledge engine, not a search engine
|
|
