Slashdot Mirror


Buy Vista or Else

theodp writes "Upgrade or keep crashing was the tagline when Windows XP was introduced. So how will Windows Vista be marketed? 'I'd hate to see something bad happen to your PC,' seems to be one pitch. Even if new features won't get you to upgrade to Vista, you should buy Vista for the security, urged Windows Chief Jim Allchin. Are commercials featuring Tony Soprano next? Bada Bing!"

49 of 539 comments (clear)

  1. Security by Fusen · · Score: 5, Insightful

    Who's to say Vista will be secure? Surely from past experience its safer to use XP which has had numerous security patches then a whole new OS with thousands of vulnerabilities to be found

    1. Re:Security by CyricZ · · Score: 5, Insightful

      And beyond that it's probably safer to use something like OpenBSD instead of XP. It not only has a far more stable and secure base, but it also has far stricter security-wise development policies, and apparently more thorough code audits.

      --
      Cyric Zndovzny at your service.
    2. Re:Security by LiquidCoooled · · Score: 5, Interesting

      I would say if the codebase is entirely new, the chances of making the same mistakes again would be lower.
      What worries me more about rebuilding any codebase is the possibility of introducing whole new categories of bugs.

      --
      liqbase :: faster than paper
    3. Re:Security by bender647 · · Score: 5, Informative

      TFA describes many ways in which Vista will be more secure by design than the security-patched XP. For example, more attention to user privileges, sandboxing IE, a firewall that looks at outgoing traffic, integrated spyware checking.

      I could pretty much care less about Vista until the games I want to play won't run on anything else, but you can't doubt that M$ will be paying more attention to security in the fundamental design of Vista than they did in XP.

    4. Re:Security by Kjella · · Score: 4, Insightful

      Who's to say Vista will be secure?

      Well, I assume it'll be more secure against you. It is pure doublespeak because it has nothing to do with user security and everything to do with content security. But I assume they'll try to market it as "security", because everyone wants security right?

      --
      Live today, because you never know what tomorrow brings
    5. Re:Security by advocate_one · · Score: 5, Insightful

      we know the codebase is NOT new... because the first security update for the beta was for the .wmf vulnerability... who knows what other nightmares are still ticking away in it.

      --
      Donald 'Duck' Dunn: We had a band powerful enough to turn goat piss into gasoline.
    6. Re:Security by HalAtWork · · Score: 4, Insightful
      That was exactly my reasoning for staying with Windows 2000 while Windows XP was being introduced. When I saw that I was right, and how bad XP really was, I decided to just move to Linux and have been happy ever since.

      Previously my attempts to move to Linux had been unsuccessful because I had problems getting certain hardware working (video capture, RAID) and was concerned about what software would be available (certain emulators I had grown fond of, video codecs, VirtualDub and other transcoding software), but even Windows 2000 was giving me some problems, such as booting into a blue screen telling me my registry had become corrupt, and also actually getting infected by viruses such as Blaster.

      I had everything up to date, all patched up, antivirus installed, etc, but still contracted the virus. A few reinstalls later and I just figured it wasn't worth it putting up with all the headaches.

      When I started running Linux, I quickly saw the advantages... Installing software didn't require the usual "Next, Next, uncheck every checkbox, delete desktop and quicklaunch icons, uninstall additional software installed along with the software I actually wanted, check for hidden startup items, make sure program doesn't phone home", when I started my PC I wasn't greeted by millions of splash screens, applications that couldn't make a connection popping up and letting me know, I didn't have to readjust settings that kept resetting for some reason (volume levels, icon positions on the quicklaunch)... GNU/Linux is about using your PC and not just working around problems to get what you want... and then I realized that upon discovering all this I didn't even have to worry about viruses at all, and I had no problems with crashes at all! Even if programs didn't behave in a way I expected I found it simple to find solutions, the error messages meant something and I could see exceptions thrown if I launched an application from a terminal, etc...

    7. Re:Security by zootm · · Score: 4, Insightful

      It's based on BSD, yes. So's OpenBSD. Vista and XP, similarly, are based on the same thing. The basis is not the point here.

    8. Re:Security by zootm · · Score: 3, Interesting

      You misunderstand, sorry my wording was ambiguous. OpenBSD and OSX have the same roots, XP and Vista have the same roots, was my point. The point that the article was trying to get across is that these two systems with the same roots have different characteristics in terms of security, which is also the case with OSX and OpenBSD. Of course, I'm not saying that OSX is as insecure as XP, however.

    9. Re:Security by CyricZ · · Score: 5, Interesting

      OpenBSD is a great system for secretaries and people in a finance department, for instance.

      I worked at one firm that was having problems with the computer systems their secretaries and finance department were using. Many of the workers would play games, or worse, they'd manage to infect the existing Windows XP systems with spyware.

      Considering they were doing basic word processing, spreadsheet and web-based data entry tasks, we decided that Windows XP was excessive. OpenBSD, OpenOffice, and Konqueror would be sufficient.

      The main benefit was that the systems just plain didn't get infected with viruses, spyware, and some such software. The price was a big benefit, too. And the ignorance of the general staff towards OpenBSD, and UNIX in general, helped. Instead of playing games and chatting, the employees had little to do but work. Productivity rose significantly within the weeks after switching over to OpenBSD.

      --
      Cyric Zndovzny at your service.
    10. Re:Security by CyricZ · · Score: 3, Informative

      The parent poster was saying that Mac OS X was based on BSD, which it is. Mach was derived from BSD, and Mac OS X builds upon Mach. Of course, it also integrates code from the other BSDs, which tend to use code from each other, too.

      At one point there was a BSD-derived networking stack included with Windows. However, it is reported these days that a new implementation was written.

      --
      Cyric Zndovzny at your service.
    11. Re:Security by Blakey+Rat · · Score: 3, Interesting

      Hm. Let's see... installing my Hauppauge card and Sage TV took approximately two hours on Windows, and that includes all the time I spent setting preferences. Oh, and it all worked on the first try.

      I spent over 16 hours *attempting* to install IVTV (the "official" Linux drivers for the Hauppauge capture cards) before giving up.

      During this period of time, I had help from two Linux experts. The best output I ever got from the cat was a postage-stamp-size mpeg2 movie with no sound and no way to change the channel. (Needless to say, the GUI TV viewer apps didn't work at all, and didn't give any clues as to why they wouldn't work.) That was on Ubuntu.

      Then I looked at other Linux distributions, and noticed that SUSE claims to support Hauppauge hardware out of the box. So I spend the hours downloaded 5 freakin' CDs worth of CRAP so I do a single task (not counted in the 16 hours) and install SUSE with default settings to my PC. During the install, it gives me an encouraging message, reading something like: "We've detected a video capture card in your computer, so you should install these TV viewer applications." I hit yes, install. Get a working, booting system, open the TV viewer app and... nothing! No error message, it just froze.

      Now, given, this was on Linux. But I can't imagine how it could be any easier on BSD.

    12. Re:Security by kuzelnik · · Score: 4, Insightful

      Well ...
      FreeBSD *is* viable alternative to XP.
      Today I have even installed Windows-only Tutenstein game from kids.discovery.com on it for my little daughter using wine. A few days ago I have installed Linux binary Fentun to open winmail.dat file I have received form an Outlook/Exchange user.

      FreeBSD has more then 14000 ports available.

      It has got everything an ordinary user needs.
      Office, mail, browsers, chat, much greater number of supported media files than most Linux distros ...

      I know, It is comon belief FreeBSD is more difficult to install than XP.
      Well, Joe Sixpack isn't able to install Windows either.
      And tell me, how many users can remove dozens of malware, viruses, rootkits and other unwanted crappy applications from Windows?

      You install FreeBSD for a non-technical user once, and you do not have to come back to clean it up.

    13. Re:Security by utlemming · · Score: 5, Interesting

      I know that the Slashdot crowd has mixed feelings about VMware, but honestly, I am a huge fan of it. VMware is what allowed me to switch from Windows to Linux, while keeping the programs that I need for school, and keep my wife happy. Further, I can run a different Windows for whatever the different need may be. For example, I have one Windows for personal use, work, school, security/spyware/malware research, Windows Server 2003, Windows 98, an Oracle enviroment, FreeBSD, and several different Linux bases installed. Before I made the leap, I tried VMware in Windows, and decided that it was a viable alternative and then made the conversion to Linux. The great thing about running Windows under Linux is that I have not had any spyware problems since converting, nor virus problems -- probably because I surf the internet and do email under Linux as opposed to Windows. The downside to this approach is that it 1) Expensive, VMware cost $189 for Linux, but they do give you a 30-day license; 2.) You have to have a lot of memory in order to get the full benefit. 3.) You still need a license for Windows. However, I get better performance for my Windows installations under Linux than I did with a native Windows installation. And then you can do snapshots and other features. Even if you manage to hose your Linux installation, short of deleting your virtual machine files, your virtual machines are safe.

      Anyhow, the point of the post, is that if you seriously would like to be able to migrate away from Windows, and need to be able to maintain compatablilty, then look at VMware. Unlike some of the other virtualization solutions, VMware is extremely professional, polished, and does a slick job. I am the president of a Linux and Unix User group and we distribute VMware disk images for use in VMPlayer (which is free) to help people get farmiliar with Linux. The quaility of VMware is such that after using a beta release for two months I couldn't help but buy it after the beta expired -- their beta was so professional, I was really impressed.

      And no, I don't work for VMware.

      --
      The views expressed are mine own and do not express the views of my employer.
    14. Re:Security by bowlingfreak · · Score: 3, Interesting

      You get stuff like this on both sides. Here's mine.
      I built 2 64bit AMD boxes, and purchased WinXP X64 for both. I figured one would be a Win box for my wife, the other would be dual boot, Win for games, Fedora Core 4 for development.
      I spent about 2 weeks finding and downloading drivers for the Windows installs. Everything on the motherboard (including 1Gb network card), the DVD RW, video card...
      I was ALMOST afraid of putting Fedora Core 4 64bit on it, but figured I could get it working with some work. So installing Fedora was a much, different experience. Put in the DVD and follow the install screens. No drivers to find and everything worked out of the box.
      So in MY case, Windows took days, Linux was less than an hour.

  2. linux? OS X? by joe+155 · · Score: 3, Interesting

    maybe they should say "upgrade to linux for the security" (or macOS X)... Vista seems to be offering very little in terms of features, and will offer little else in terms of security, partly people go for it because it's what most people use, and partly because M$ just doesn't take security seriously enough... they need to have a root and branch change of how the OS is designed to give a greater emphasis on security instead of useless visual tweaks.

    --
    *''I can't believe it's not a hyperlink.''
    1. Re:linux? OS X? by DaHat · · Score: 5, Informative
      Vista seems to be offering very little in terms of features

      Lemme guess... you are basing that solely on what you've read on /.?

      Allow me to list a few features coming in Vista that I am looking forward to:

      • Application level audio control
      • Application specific remoting
      • Vastly improved networking stack (apparently superior to any other OS's)
      • Support for user mode drivers
      • New printer technology (way beyond postscript)
      • Pluggable crypto system


      Take a look at this MSN Spaces post which has some links to some videos on some of these improvements and more on Channel 9.
    2. Re:linux? OS X? by Anonymous Coward · · Score: 3, Informative

      While per-application audio control (I can't wait to be able to turn down my games and turn up teamspeak) and a new networking stack sound nice, remoting a single application has always been possible through netmeeting or with stuff like citrix. User mode drivers have been around for a while in other operating systems (libusb, libsane, various user mode filesystem drivers, etc). Not sure what a "pluggable crypto system" is but linux has had a good number of kernel crypto modules for a long time now for various purposes. As for Metro, the only thing it really brings to the table is XML. PDF already does everything Metro will, and will probably be much less encumbered than anything Microsoft releases as "open". (I also suspect that you could set per-application mixer levels in ALSA for any application not using OSS emulation, but it would be an undocumented hack and application dependent, rather than an OS feature)

    3. Re:linux? OS X? by ratboy666 · · Score: 4, Interesting

      I want to comment on some of the features you list:

      "New printer technology (way beyond postscript)"

      This is interesting. What could be "way beyond Postscript"? Postscript is a general purpose language, with rendering support. It has even been extended into a GUI (although that is irrelevant from the perspective of printing). By utilizing a common language for print rendering, different vendor OSs and systems can actually share printers. The reference implementation of Postscript is now (arguably) Ghostscript, which is Open Source. Postscript is also behind PDF technology.

      If there is a new rendering technology, how will it be incorporated into heterogenous network?

      "Support for user mode drivers"

      Is this a good thing? I know that there have been attempts at providing "user mode drivers" to Linux, and other OSs, but that is a REALLY BAD thing to do wrt security. Transitions from less trusted code to more trusted code are ok, because the more trusted code can check its inputs. The reverse transition is not ok -- simply because the code is less trusted.

      Of course the "user mode driver" may require signing, but then why not test it and put it back into kernel mode? The only other reason I can see for "user mode drivers" is that you want the driver code and data to participate in standard OS semantics (scheduling, swapping, etc.). Which may be a good reason to do it. But the security implications are immense: maybe front layer drivers only, that cannot do anything with the OS core or data, and where data only flows "user->user driver->kernel" -- you get the idea.

      Still, I was under the impression that Windows was a micro-kernel (in some sense), which is supposed to eliminate the need for this hack.

      "Application level audio control"

      Can you elaborate on this? I was under the impression that that was ALREADY a feature (or are you referring to OS control on the application audio, which is more interesting - specifically, the ability to route the audio output from an application to another application which can provide filtering: say, low-pass. Of course, this provides a security hole for the media, and so I doubt that this will be implemented).

      The other features will be welcome.

      Ratboy.

      --
      Just another "Cubible(sic) Joe" 2 17 3061
  3. quote? by Prong_Thunder · · Score: 5, Funny

    "nice computer you got here... be a shame if it crashed...."

  4. People actually pay for articles like this by heinousjay · · Score: 5, Funny

    This is all about anti-Microsoft masturbatory geekspasms, right? Let the games begin:

    Yeah, Winblows security? They haven't reimplemented enough of Unix to be secure yet.
      - or -
    Sure, it's secure - it can't be pwned when the new RSOD feature is active.

    Well, I've shot my wad.

    --
    Slashdot - where whining about luck is the new way to make the world you want.
  5. Secure? by SpasticWeasel · · Score: 5, Informative

    From TFA: "People Near Me" feature, which searches over a Wi-Fi connection for other Vista users nearby and then sets up a peer-to-peer network with them. Yeah, that sounds pretty secure. Same old Microsoft.

    --
    No sooner do I get over one, then you put a better one right next to me. Bastards.
    1. Re:Secure? by PCM2 · · Score: 3, Informative

      If this is the Windows Collaboration feature they're talking about, then it doesn't automatically connect everybody. You can invite the people you choose. And it's not a peer to peer filesharing network or even a standard Windows network. It's a Groove-like system that allows you to share files and screen real estate among the connected peers. So if you're showing a presentation from your laptop, you can let me connect to your projector using your laptop over the network and show my presentation from my hard drive, using your screen in a sense. I can also push the same file to everybody in the ad hoc "network" so that they can view it. Optionally I can also send them a copy of the file, but I don't have to... that kind of thing. It's actually pretty neat.

      --
      Breakfast served all day!
  6. Or we will shoot this dog by HeavyMS · · Score: 5, Funny
  7. Upgrade! by Jane_Dozey · · Score: 4, Funny

    Or we'll send Balmer around with this chair...

    --
    Silly rabbit
  8. Lost trust by PornMaster · · Score: 4, Interesting

    I'm all for upgrading things to newer versions to enhance security. Secure by design should be the default, and if someone fessed up and said, "Hey, we fucked up last time, but we got it right this time", and could be trusted, then it wouldn't be extortionist of them to try this.

    But we've all seen how Trustworthy Computing didn't really change things. New products came through that obviously weren't vetted, and plenty of legacy problems remained. I don't know who's really going to buy Vista because they'll believe the security "threat" perpetuated by MS.

  9. It could get worse? by kamikaze2112 · · Score: 5, Funny

    'I'd hate to see something bad happen to your PC'

    Jeez, if it's alredy got windows on it, how much worse can it possibly get?? *ducks*

  10. The jokes keep on coming. by TubeSteak · · Score: 4, Funny

    Buy Vista... or someone might throw a chair at you.

    In Soviet Russa, Windows Vista pays you protection money

    Take your pick folks, I'll be here till Sunday.

    --
    [Fuck Beta]
    o0t!
    1. Re:The jokes keep on coming. by jcupitt65 · · Score: 5, Funny

      Upgrade to Windows Vista because, thanks to XP product activation, we know where you live.

  11. I knew it! by Ardeocalidus · · Score: 4, Funny

    As long as I don't find my computer's monitor in my bed, I'm not upgrading.

  12. Talking out of both sides of his mouth by Dekortage · · Score: 4, Interesting

    "Even if they are not into home entertainment or in any of the specialty areas, they are just going to feel safer and more secure by using it."

    "...[Alchin] demonstrated a collaboration tool that uses a "People Near Me" feature, which searches over a Wi-Fi connection for other Vista users nearby and then sets up a peer-to-peer network with them."

    Your computer must be more secure -- it can automatically network wirelessly with other computers to share your files.

    --
    $nice = $webHosting + $domainNames + $sslCerts
  13. The problem is implementation rather than design by Colin+Smith · · Score: 4, Interesting

    Start shipping installs secured from the start. Require an admin/install user account for new system wide applications, sandbox user installed software in their home directory/profile. Users then don't trash everything when they fubar their profile or homedir. Windows has all the necessary features to do it, It's had them since the first versions of NT.

    Microsoft frankly can't be arsed and there's no profit in a secured system when they can instead continually be selling you upgrades as security fixes.

    It isn't rocket science, it's just segregation of responsibility. Unix has been doing it for 30 years. No wait, it must be closer to 35 now.

    --
    Deleted
  14. Its your choice by gsfprez · · Score: 5, Insightful

    no one on earth is forcing an IT, CIO, homemaker, graphic artist, gamer or anyone else to HAVE TO BUY Micro Soft's shit.

    I have for the last two years officially told people - i cannot and will not help you if you are running Windows. I am too busy accomplishing things (photography, videographic analysis) to be bothered with tools that do not just work. I don't care that there are millions of Windows viruses, i don't care if your webpage doens't work with anything but IE and Active X, i just have stopped caring.

    I am getting older - i have a family, and i want to create and do things which are special, and i no longer have the time nor the incination to either myself, or have to deal with others who's job it is to spend all day and night defending computers from themselves. I am the architect who doesn't want to deal with the knock-off cheap Chinese crap powertools and hear all the workers bitch about them, or hear about the foreman that tells me i have to keep taking apart all the power tools and putting them back together again... build the fscking house - go get the tools that WORK - and pay more for them if you have to.

    The simple fact is - its totally irrelevant to me if a Mac costs $1000 or $3000. If it does what i need - and prevents me from having to fix my tool all day long - the $3000 tool will be far more vaulable in just a week or two. Theoretical, imaginary, or otherwise fantasmic notions that Macs are just as insecure as Windows are irrelevant to me - i work today, and i work now. (well, its saturday, i'm only working a few hours today).

    But the flip side of that is - i no longer give a shit what anyone uses. I don't care. Do not bother me or hassle me or get in my way if you can't keep up with me. My friends and family no longer bother me - i bought my family Mac minis, and my friends are all switching.

    The world uses Windows?? I'm fscking George Bush of the Mac - i don't give a shit if every person on earth said "jump off this cliff, its the industry standard"

    i'm not a lemming - i have things to get done. Whatever you want to do is fine with me, you're out of my "circle of give a shit".

    You run Windows. I'm getting things done.

    --
    guns kill people like spoons make Rosie O'Donnell fat.
    1. Re:Its your choice by Anonymous+Poodle · · Score: 5, Insightful

      You should trademark "circle of give a shit" and "You run Windows--I'm getting things done." and sell them back to Apple. Seriously.

      I'm in the same boat--After spending 20+years eating, sleeping and breathing computers, and acting as the reisident expert in my family/circle of friends/global village/whatever, I no longer support/advise/provide a shoulder to cry on for any one I know who uses a PC. I switched as many family members as possible over to iMacs, and so I now no longer get those late night calls (my screen is blue, what do I do?).

      I now claim total ignorance of all things PC, so when someone asks me "is this $399 laptop from Costco a good computer?", I tell them to buy a Mac, 'cause it's all I know. I also tell them to make sure they buy an extended warranty , because they will Sure Need It.

      I view the legions of unofficial Windows Support Staff--your Brother-in -law, neighbor, whoever--as part of the hidden cost of running crappy software.

  15. Shiny shiny! by vga_init · · Score: 4, Insightful

    I think screenshots will be the selling point for most people.

  16. SECURITY!?! by Svartalf · · Score: 3, Insightful

    When they have things like the WMF flaw in the designs (And ended up in Vista as well as XP and 2000...) they are NOT about security.

    Security is by design, not as a friggin' afterthought.

    This has little to do with MS bashing- it's just that MS doesn't think much about security and everyone knows it (Well, everyone but you, it seems...)

    --
    I am not merely a "consumer" or a "taxpayer". I am a Citizen of the State of Texas
  17. Upgrade or keep crashing by Stan+Vassilev · · Score: 5, Insightful

    Microsoft designed the 9x with the clear conscience that it's not as stable as its NT platform.

    Why was it developed? Compatibility. People wouldn't really drop all their DOS and Windows 3.11 programs, so 9x was the bridge that allowed the smooth transition that ultimately brought the consumer to the NT platform.

    The plain logic basically was "we have the better platform, but you want compatibility, so here's a compromise".

    Now that 16-bit is a thing of the past, the DOS layer could be removed ultimately resulting in a fully 32-bit protected environment that is Win 2000 and XP. Is Microsoft to blame they sell XP as more stable OS?

    Could they have success with any other strategy? I'd say unlikely.

    Vista is the next step in improving security and it took a lot of effort to develop this OS, the entire submission is a flamebait: if you were Microsoft, would you work 6 years on a new product and give it for free? Yes, imagine, you have to pay for the updates, and yes the purpose of updating is improved security, new features and modern hardware support.

    Microsoft isn't forcing anyone to upgrade. It just does its best to demonstrate the benefits of its latest offering, because this is what software companies do with new releases.

    Now get over it, and stop ranting.

    1. Re:Upgrade or keep crashing by jimicus · · Score: 4, Insightful

      Vista is the next step in improving security and it took a lot of effort to develop this OS, the entire submission is a flamebait: if you were Microsoft, would you work 6 years on a new product and give it for free?

      Why not? Linus Torvalds did ;)

      All joking aside, I agree with you insofar as no-one's giving away major upgrades to commercial operating systems. But you've sidestepped the issue which was first raised by Douglas Adams in 1995 and AFAICT still exists:

      "The idea that Bill Gates has appeared like a knight in shining armour to lead all his customers out of a mire of technological chaos neatly ignores the fact that it was he who by peddling second-hand, second-rate technology, led them all into it in the first place."

  18. Market Opportunity for Macs and Linux by kai.chan · · Score: 5, Insightful

    With the advent of the iPod, I already know of a few people who are considering a Mac as their next purchase -- the everyday Joe who would have never considered a Mac before. With more game and application developer support on the Macs, I think Apple has the ability to eat a large chunk of the Desktop OS market during the switch from XP to Vista. If Guild Wars, Counter Strike Source, and Spore get a Mac release, I'd certainly be one to get a Mac. It would also make my decision between Linux or Mac a bit easier.

  19. Also comes to mind is... by Vorondil28 · · Score: 5, Funny

    ...Ballmer.

    "Fucking XP users are fucking pussies. I'm going to fucking bury them, I have done it before, and I will do it again...I'm going to fucking kill anybody that doesn't upgrade."

    --
    This sig rocks the casbah.
  20. Read this or the terrorists have already won . . . by pariahdecss · · Score: 5, Insightful

    This is nothing new . . . we live in an society (post 9-11) where everything is predicated on fear. "Buy our anti-bacterial hand soap or your kids may die!!" , "Buy this ADT security system or you are a failure as a parent" . . . marketers and the government have embraced the ubiquitous power of fear and uncertainty to sell everything from tampons to troop deployments . . .ad nausea infinitum

    Personally I am more afraid of deploying Windows Vista than not, and Microsoft can stick the DRM in the orifice of their choice.

  21. Trying to be fair about it by TheReaperD · · Score: 5, Interesting

    Of what I have read, there will be, at least, one thing that could improve Vista's security. Also, several people have commented on it without having read anything about Vista. Users will login to a limited access user account, rather then an administrator account as the default.

    Unfortunately, there are several bad points with Vista that will make me hesitate on upgrading:

    1. DRM This is a big one, for me.
    2. Requires a P3 800 or higher, just to run the operating system with no tangible benefit to the user.
    3. Visual enhancements require Direct X 9c compatible hardware.
    4. No compelling features.
    --
    "Be particularly skeptical when presented with evidence confirming what you already believe." -
  22. Re:The problem is implementation rather than desig by ajs318 · · Score: 5, Insightful

    ..... And by requiring all that, you immediately nullify one of the chief "advantages" of Windows. That is, the ability just to turn on a computer and start using it, without identifying yourself or otherwise taking notice of it. You don't get a screenful of diagnostic messages ending with a bunch of green [OK]s while Windows is booting up, "in case that might confuse the poor user". {As a full-time Linux user who has had to attempt to fix a Windows box, I can say that not having those messages is way more inconvenient for the technician than having them is inconvenient for the user. Users can just ignore them, after all. On that logic, maybe we should start building cars where the oil pressure and alternator warning lights don't come on when you first turn on the ignition.} The default privilege level is administrator; but unlike root on a unix system, there are certain actions that are blocked from even an administrator on a Windows system.

    I think Windows with passwords is going to be a bit like a pale imitation of KDE.

    --
    Je fume. Tu fumes. Nous fûmes!
  23. A really sad commentary... by seven+of+five · · Score: 4, Insightful

    MS has failed the user community when it has to say, 'don't keep running the old unsecure shit we sold you last year, buy this new shit. And trust us this time.'

  24. Take a page from Apple by aduzik · · Score: 4, Insightful

    It's pretty clear to me that the main reason that Windows has so many security problems is that there is something inherently broken in its design. Remember: when Microsoft first designed Windows, no one was using the Internet, office LANs were pretty much the most networking you were likely to find. So Microsoft didn't have to think about network security back then. Now that the world of computing is increasingly connected to a high-bandwidth Internet connection all the time, it's clear that the model that Windows is built upon is broken.

    I think it would benefit Microsoft to do a fundamental redesign of Windows. Apple did this about five years ago when they made the transition from Classic Mac OS 9 to Mac OS X. They designed an API that permitted developers to write software that ran natively on both operating systems (Carbon) and gradually phased it out in favor of an API that was completely native to Mac OS X (Cocoa). At the same time, there were many applications that would only run on Mac OS 9 -- i.e., those that were not Carbonized -- that ran in a (mostly transparent) virtualized environment. Microsoft could follow the same pattern as Apple and redesign their operating system from the ground up with security as a primary focus.

    The thing that's going to get people to upgrade to Vista isn't the desktop search or any new multimedia features. It's the security and the performance. Right now, Microsoft keeps tacking on bloat after bloat to the existing Windows codebase. This has the effect of making Windows slower. Also, these "ad-hoc" additions, I think, have a tendency of opening up security holes. Microsoft, it's time for you to reevaluate the design of your operating system. Instead of focusing on devising as many different editions as you can for Vista -- which, by the way, baffles the hell out of a lot of your customers -- it's time to wipe the slate clean and start over.

    I know we've all said at one point or another, "if I'd known then what I know now, I would have done things completely differently." Well, Microsoft, you do know stuff now that you didn't know 20 years ago. It's time to do things completely differently. Your model no longer works; find a new one.

    --
    If it's not one thing it's your mother.
  25. Re:Seamless switch? by CyricZ · · Score: 5, Interesting

    KDE can be easily configured to be quite Windows-like. Many people didn't even notice, to be quite honest. We did our best to make the transition as seamless as possible, and we managed to do that well.

    We labelled the OpenOffice Writer icon as "Microsoft Word", for instance, and people didn't know the difference.

    We imported the Word templates and Excel spreadsheets they were using, tested them out with the OpenOffice equivalents, and for the most part they worked. The one problem we ran into was the font on the standard company letterhead was a bit too large under OpenOffice. That took about a second or so to remedy, of course.

    When they asked about the games and MSN, they were simply told that they were deleted.

    A little bit of preparation, forethought, and the use of quality software lead to a transition that went very well.

    --
    Cyric Zndovzny at your service.
  26. MS Has Gone Backwards Since Windows 2000 by LazloToth · · Score: 3, Interesting

    The saddest aspect of Vista's arrival, as far as I'm concerned, is that XP technology has been no improvement over Win2k Pro or Win2k Server in our company. And now we get another scary OS release from MS as the end-of-life date for 2000 products draws near. After SP4 came out for the 2000 products, the only real annoyance was the constant stream of critical updates, some of which unleashed mayhem on our network until we got a handle on update management. Otherwise, the Windows 2000 servers have been rock solid. Meanwhile, XP and Server 2003 have been insufferable turkeys, making me regret every installation. The memory leaks that have plagued Server 2003 should be getting a lot more attention than they've been getting in the tech press. I suspect Microsoft would say that hardware vendors have delivered faulty drivers, but we never saw the random crashes and reboots in Windows 2000 Server that we see in our 2003 servers. I can't trust the 2003 platform anymore - - we moved everything of importance back to Win2k. Service Pack 1 for 2003 Server was about as helpful as a broken ankle. I understand we might see SP2 in 2007. Wow, that's encouraging. Who here wants to dive for Vista? Thank the gods for Linux, Apache, and MySQL . . . .

    --


    It's only funny until someone gets hurt. Then, it's hilarious.
  27. Re:Seamless switch? by sd_diamond · · Score: 5, Funny

    We labelled the OpenOffice Writer icon as "Microsoft Word", for instance, and people didn't know the difference.

    We need to talk.

    --Sincerely,
    Microsoft Legal Dept.

  28. I don't think your position makes any sense.. by bmajik · · Score: 3, Interesting

    Is security a binary thing? Is something secure or insecure ?

    I don't think so.

    I think "security" is a blend of many things.. the _correctness_ of non-security features, the selection and depth of security-focused features, the process around resolving defects (because there will be defects), and the conditions under which a user can use the machine.

    Even if Microsoft had done everything they knew how to do to make XP "secure" when they had made it, would it be secure today? No. Because today new threats are understood and being used that weren't in existance when XP was designed and shipped. Is XP retroactively insecure? Or it just less secure than something newer, all things otherwise equal, that was developed with the context of the threats that have emerged since XP was released?

    In the specific case of Vista vs XP, some of the things that are "better" this time around are
    - more credible run-as-non-admin story
    - better sandboxing and least-priviledge stuff, even within a normal user account (i.e. its not necessarily true that IE running as you can do anything you can)

    The run-as-non-admin thing "worked" in XP, but with enough caveats that it was hard to credibly say "everyone, do it that way". The POR for XP was to ship with non-admin-by-default until very, very late in the ship cycle, where there was just too much stuff that didn't work as non-admin. They made the hard decisino to make users=admin by default, and nobody was happy about it. This is a problem that Microsoft has been chipping away at for a while now, because the goal is "let everyone run with as few permissions as possible" and it often conflicts with the other goal of "20 year old software written by 3rd party people needs to keep running"

    I have no problem buying that Vista has more security-focused features than XP. I have no problem buying that Vista has better code correctness in non-security features than XP. I don't think the security response process will be any worse in vista, infact, i know of at least one technology that makes it better (but im not sure if its public yet?).

    Will Vista be "more secure" than XP? I think so. Will it be "as secure" as OpenBSD? Probably not. Will it do more things that more users want than OpenBSD? Definiately. Will Vista have a better intersection of practical security vs functionality than OpenBSD?

    Microsoft thinks so, and I think I agree with them.

    --
    My opinions are my own, and do not necessarily represent those of my employer.