No Defense Against Windows Rootkits?

An anonymous reader writes "Spyware bad guys (and also phishing people) started using rootkits technology to stay hidden in a system. The problem is that at the moment the technology to defend a Windows system from these things is very poor. In fact antivirus companies have just started adding basic anti-rootkits technology. So the problem is serious, and well outlined by this question: Is the closed source code of Windows preventing us from actively defending our systems?"

Comments

I fear not your rootkits!

[tsalaroth]

Because Windows has no root!

Re:I fear not your rootkits!

[El_Muerte_TDS]

Crap, I renamed the user "Administrator" to "root"

Re:I fear not your rootkits!

[spellraiser]

True enough. Unless, of course, you consider Windows itself to be The Root of All Evil ...

Ask the UNIX folk...

[lpangelrob]

They've been dealing with rootkits seemingly forever. How did they manage?

No, seriously, I don't know the answer to this. :-)

Wow, what a dumb question...

[NIN1385]

So the problem is serious, and well outlined by this question: Is the closed source code of Windows preventing us from actively defending our systems?

YES!!!!!!! that is all...

Easy fixes!!

[AnonymousYellowBelly]

1. Buy a Mac! and be a little bit paranoid about security.
2. Use Linux and be paranoid about security.
3. Buy a tinfoil hat.
4. Build a beowulf cluster of Linux enabled devices: an iPod, two toasters, one 'smart' fridge, and one spoon -anything runs Linux these days-.
5. Build your own OS!

Or you can keep on using Windows and trusting AV companies and its flawed model of "ok, we'll release the fix AFTER enough people have been screwed".

I don't think that the design of Windows, where changing an int to a float in the library that displays Clippy can crash MSN Messenger, would allow for easy fixes, regardless of closed or open source code.

You can actively defend your system anyway. It takes time and money (e.g. self-made hardware firewall with parts bought from the tinfoil-hat store, if you want to be /. grade paranoid), but is doable.

What if we just stopped fixing their shitty code?

[gelfling]

What if we as a community just put a 12 month moratorium on backfilling MS crappy code and the crappy job they do designing and then maintaining it. What if we simply let it go to shit and let MS deal with the consequences. Sometimes I feel like an ennabler for a crazy codependent cranked out asshole. What if we just said NO -it's your fundamental problem, you fix it. Maybe MS stock would go down, maybe not. Maybe some really important systems would fizzle up in flames. Who fucking cares? I say call them on their bluff and stop pretending that they're not sucking off OUR work and OUR integrity.

Securing Windows

[bahwi]

1. Get pair of scissors
2. Cut Ethernet Cable
3. Windows is now secure from attacks via the internet!

Nah

[Aumaden]

Is the closed source code of Windows preventing us from actively defending our systems?

Windows being closed source in no way prevents me from defending my system. I just insert my Gentoo install disk and reboot.

Re:But can antivirus companies be too good at it?

[caffeinemessiah]

Perhaps you should put the bong down now....

That brings a friends tagline to mind.....

[8127972]

..... My other computer is YOUR computer.