Slashdot Mirror
Justifying the Common Criteria Security Evaluation
lewko writes "Microsoft has just received a Common Criteria certification for Windows 2000 at Evaluation Assurance Level (EAL) 4. Security experts have been saying for years that the the security of the Windows family of products is hopelessly inadequate. Now there is a rigorous government certification confirming this. What does it all mean? This paper suggests that Microsoft spent millions of dollars producing documentation that shows that Windows 2000 meets an inadequate set of requirements, and that you can have reasonably strong confidence that this is the case. Microsoft bashing aside, the process in evaluating a security product is relevant to anyone considering the deployment of technology into their environment." The EROS operating systems he mentions looks interesting - of course, it also looked interesting three years ago.
Bueller?
""Microsoft has just received a Common Criteria certification for Windows 2000 at Evaluation Assurance Level (EAL) 4. Security experts have been saying for years that the the security of the Windows family of products is hopelessly inadequate. Now there is a rigorous government certification confirming this. What does it all mean? "
The computer was off during the test.
is CAPP/EAL4.
It protects me against threats of inadvertent or casual attempts to breach the system security, like people walking in while I'm, uhh, ya know.
Of course it does nothing when someone disables the lock or tries to kick the door in.
He painted a unicorn in outer space. I'm askin' ya, what's it breathin'?
A properly configured Windows Box can be just as secure as any OS, you just have to know the system
yeah, right. only when both systems are turned off
So is that why I get script monkeys flooding my webserver with crap like this?
146.83.216.249 - ... "GET /MSADC/root.exe?/c+dir HTTP/1.0" 404 1003 ... "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 1003
146.83.216.249 -
Didn't need no millions-of-dollars report to convince me!
Photoshop?
== Jez ==
Do you miss Firefox? Try Pale Moon.
Do you get your Microsoft check weekly, monthly or by the word. Because if you get it for new ideas: post anti-Linux anywhere there is an honest discussion about an important Microsoft topic, then you get NO PAYMENT.