Slashdot Mirror


Vista Post-SP2 Is the Safest OS On the Planet

pkluss noted Kevin Turner, COO of Microsoft making the proclamation that "Vista today, post-Service Pack 2, which is now in the marketplace, is the safest, most reliable OS we've ever built. It's also the most secure OS on the planet, including Linux and open source and Apple Leopard. It's the safest and most secure OS on the planet today."

143 of 1,010 comments (clear)

  1. I have a feeling.... by Drakin020 · · Score: 5, Funny

    That this thread will consist only of positive remarks, and supportive statements towards Microsoft.

    --
    The greatest revenge in life is massive success.
    1. Re:I have a feeling.... by xmason · · Score: 4, Funny

      That this thread will consist only of positive remarks, and supportive statements towards Microsoft.

      Well, they make some dandy keyboards and mice, and I've always been a fan of Flight Simulator...
       
      ...but that's about all I got here. OS X FTW!

      --
      I'm not cool enough to have a .sig
    2. Re:I have a feeling.... by someone1234 · · Score: 2, Insightful

      Correct.
      I commend Microsoft for doing an OS which no one uses (therefore it is the safest).
      It is also a reason for wider Linux adoption (which is a very positive thing).
      So, we all owe a big thanks to their developers for creating such a wonderful OS.

      --
      Patents Drive Free Software as Hurricanes Drive Construction Industry
    3. Re:I have a feeling.... by DigiShaman · · Score: 2, Funny

      Is it reliable (as in stable)? Sure. I have yet to have Vista bomb out on me that wasn't due to a buggy 3rd party driver or faulty hardware.

      Is it safe? Heh, so says the wife beater of software...

      --
      Life is not for the lazy.
    4. Re:I have a feeling.... by Jason+Earl · · Score: 4, Informative

      Flight Simulator is now grounded.

    5. Re:I have a feeling.... by nine-times · · Score: 2, Insightful

      And if it's not, then I suppose you'll claim it's evidence that this site is biased... as opposed to the site the article is on, which is completely fair and balanced?

    6. Re:I have a feeling.... by whoever57 · · Score: 5, Insightful

      Is it reliable (as in stable)? Sure. I have yet to have Vista bomb out on me that wasn't due to a buggy 3rd party driver

      That is a distinction without a difference. If you need those drivers to run Vista on your PC, then Vista has a problem. Users should not have to care who writes the drivers, unless you have some esoteric and unusual hardware in your PC.

      --
      The real "Libtards" are the Libertarians!
    7. Re:I have a feeling.... by cyber-vandal · · Score: 5, Informative

      People are always saying this on here (from NT 4.0 onwards) but how does the average user determine whether their hardware is faulty, their drivers are buggy or their OS is just a load of bloated crap? Vista is ok but I don't see any specific advantage over XP Home apart from being able to alter ACLs with a GUI instead of CACLS, and despite what apologists say, it is slower than XP.

    8. Re:I have a feeling.... by ushdfgakj · · Score: 2, Funny

      Maybe you haven't used Vista enough...

    9. Re:I have a feeling.... by Anonymous Coward · · Score: 5, Insightful

      I think securing any OS is a good thing but I'm strangely reminded of the win2k security certification. Win2k was certified secure as long as it wasn't networked. As the saying goes, microsoft are now 4/5 of the way to reinventing unix... badly. Any OS security can be easily subverted by an administrator, but Myopicsoft make it a necessity. In my case I run Fax and Scan as administrator on some client machines as I refuse to set up an AD domain for 3 clients. Endless examples of this kind of braindamage... runas isn't a patch on SxID and they didn't even get sudo right.

      Hopefully Microsoft will have a usable secure OS some time soon. In the mean time, there's unix.

    10. Re:I have a feeling.... by lukas84 · · Score: 5, Interesting

      And XP is slower than 2k.

      And 2k is slower than NT4.

      More functionality means less performance. Doesn't matter much. Vista on my i7 is still faster than XP on my old 4 year old Athlon machine.

      For a home user, there are currently few advantages in using Vista, even though there are many under-the-hood optimizations that may help them.

      As such, i would not recommend a home user to go through the effort of upgrading his existing machine to Vista. At this time, that machine is likely to be over 2 years old.

      However, when deciding to buy a new machine, why use an 8-9 year old operating system? There is no reason for a home user to not use Vista on a new machine.

    11. Re:I have a feeling.... by Anonymous Coward · · Score: 4, Insightful

      If you're still wondering why you got modded "flamebait", consider that the user has already paid both Microsoft and the hardware vendor for what you're accusing them of expecting for free.

    12. Re:I have a feeling.... by notaprguy · · Score: 4, Insightful

      I'd bet $1000 that more people have DOWNGRADED from Vista to Windows XP than have ever used Linux as a client OS.

    13. Re:I have a feeling.... by Gerzel · · Score: 3, Insightful

      Well they may have been right, but only in the short term.

      It takes some time for the bugs and exploits to be found. Even the best OS's will have them. And if not fixed the safest OS one year will be the wide open security hole the next.

      That said I seriously doubt they did any real checking to see if what they were saying was true.

      The best way to make a computer safe from hackers is to remove the power cord. The second best is to remove all network connections. But both of those are only if you are measuring purely from a safety from hackers and malicious use, as both also remove most all other use of the computer as well.

    14. Re:I have a feeling.... by Gerzel · · Score: 5, Funny

      Socialism is a form of government not a software license.

    15. Re:I have a feeling.... by sexconker · · Score: 4, Insightful

      There is more free software available for windows then there is for all other operating systems combined.

    16. Re:I have a feeling.... by Kleen13 · · Score: 3, Insightful

      Is it reliable (as in stable)? Sure. I have yet to have Vista bomb out on me that wasn't due to a buggy 3rd party driver

      That is a distinction without a difference. If you need those drivers to run Vista on your PC, then Vista has a problem. Users should not have to care who writes the drivers, unless you have some esoteric and unusual hardware in your PC.

      Hey, I'm not trying to stir it up here, but I'm confused. Serious question here. Why is it Vista's fault if the hardware manufacturer releases crappy drivers, regardless of the nature of the hardware? Driver signing?

      --
      That sinking feeling deep in your gut when you KNOW you screwed up bad summed up with: {head desk} {head desk}
    17. Re:I have a feeling.... by whoever57 · · Score: 4, Insightful

      And you think that way of all OSes? Even ones not from Microsoft?

      Isn't that Red Hat's value proposition? Red Hat supplies and supports Linux, yet the components come from multiple sources. If a shitty driver in Red Hat Enterprise Linux is causing problems and I have a support contract, then I expect Red Hat to take ownership of the problem and not just blame it on the author of the device driver.

      --
      The real "Libtards" are the Libertarians!
    18. Re:I have a feeling.... by aliquis · · Score: 2, Insightful

      You mean as in no cost and not open-source?

      Though very much open-source software run on Windows, and I guess sorta almost all would be able to.

    19. Re:I have a feeling.... by JumpDrive · · Score: 4, Funny

      I don't think that Anonymous Coward cares what he gets modded.
      He seems to always be spouting drivel and trash.

    20. Re:I have a feeling.... by whoever57 · · Score: 5, Insightful

      Is it reliable (as in stable)? Sure. I have yet to have Vista bomb out on me that wasn't due to a buggy 3rd party driver

      That is a distinction without a difference. If you need those drivers to run Vista on your PC, then Vista has a problem. Users should not have to care who writes the drivers, unless you have some esoteric and unusual hardware in your PC.

      Hey, I'm not trying to stir it up here, but I'm confused. Serious question here. Why is it Vista's fault if the hardware manufacturer releases crappy drivers, regardless of the nature of the hardware? Driver signing?

      You are confusing fault with who needs to own the problem. Imagine that I go into a restaurant and the food presented is off. Who is at fault: possibly the supplier of the food, but who am I going to complain to: the manager of the restaurant.

      Microsoft continually talks about "experience" -- if a crappy driver spoils my experience, then Microsoft has a problem, even if MS is not at fault.

      --
      The real "Libtards" are the Libertarians!
    21. Re:I have a feeling.... by morcego · · Score: 2, Insightful

      There are ways to make it next to impossible (if not impossible) for a driver to crash the whole OS. Also, it is entirely possible to make drivers marked as "trusted" only after they've got tested by Microsoft. Didn't Apple have something like this in the past ?

      When a driver (and not the hardware) crashes the OS, it is because the OS allows it.

      However, increasing quality control over those drivers will make most hardware pieces unavailable to Windows, which would hurt Microsoft. It would not be cheap to have a driver "certified by Microsoft Labs".

      If I know that, you can be pretty sure people at Microsoft knows it too. It is not hard to figure it out. So, in that regard, Microsoft made a decision to allow that to happen. Was it the right decision FOR THEM ? The money they are making say it was. For the users ? Maybe. It does make hardware cheaper. How much cheaper, I really can't say, so I can't answer that question.

      --
      morcego
    22. Re:I have a feeling.... by bane2571 · · Score: 2, Informative

      Google - Free windows software - 1 - 10 of about 68,000,000

      Google - Free Linux software - 1 - 10 of about 32,700,000

      Google - free OS X Software - 1 - 10 of about 24,100,000

      Google - Free unix software - Results 1 - 10 of about 12,800,000

      Google free amiga os software - 1 - 10 of about 454,000

      Hmm, he was pretty damn close. I probably missed a few, but not many.

    23. Re:I have a feeling.... by Unoriginal_Nickname · · Score: 3, Informative

      Yes, they do make peripherals. No, they aren't re-branded.

    24. Re:I have a feeling.... by Chosen+Reject · · Score: 3, Insightful

      Let's continue with your analogy. You take your meal home and add salt. It turns out your salt supplier failed to mention that its really sodium chromate instead of sodium chloride. Who is at fault? Who should "own" the problem?

      --
      Stop Global Warming!
      Just say no to irreversible processes!
    25. Re:I have a feeling.... by LittleRunningGag · · Score: 5, Insightful

      Seriously.  More people are currently running Vista than have ever used Linux.  Hell, more people have pirated Vista than have ever used Linux.

      I can't believe that the GP was modded insightful.

    26. Re:I have a feeling.... by spud603 · · Score: 5, Informative

      And XP is slower than 2k.

      And 2k is slower than NT4.

      More functionality means less performance. Doesn't matter much

      Not to feed the troll, but really? In my experience new, feature-rich releases of OSs tend to be much faster than their predecessor. My experience is mostly with OS X and a bit of Ubuntu. OS X in particular has gotten snappier and more featureful with each point release.

    27. Re:I have a feeling.... by secolactico · · Score: 4, Insightful

      In the olden days, sometimes it was a loose SATA cable

      SATA? Olden days? Come on, it's only been what, like 5 years?

      --
      No sig
    28. Re:I have a feeling.... by AttillaTheNun · · Score: 4, Funny

      You are correct. Last I checked, viruses are free of charge.

    29. Re:I have a feeling.... by David+Gerard · · Score: 4, Funny

      We need a car analogy. Does the car you take it home in have chrome on the bumpers? Or does it have ... CHLORINE???!?!?! This PROVES by the power of car analogy that Google Chrome is a superior operating system to Windows Internet Chlorine!

      --
      http://rocknerd.co.uk
    30. Re:I have a feeling.... by KwKSilver · · Score: 5, Interesting

      Hmmh. You may be right. Given that everyone downgrading from VISTA to XP is--almost by definition--a Windows user, what does this say about Windows-lover's opinion of VISTA? Here, have a couple of "meaningless" anecdotes ;-)

      Meaningless Anecdote 1: One of my colleagues went to upgrade to VISTA a few days back. I'm only surprised it took him so long, as he has been dutifully following the MS upgrade treadmill since before WIN95, a Windows-lover's Windows-lover. VISTA refused to install on a 2.2GHz AMD64 with 2GB RAM. He is such a happy camper he started asking me about Linux. He is also tired of viruses, spyware worms etc. I burned the 5.3 LiveDVD of Scientific Linux for him, so he can see if he likes it and wants to install it.

      Meaningless Anecdote 2 I installed Zenwalk Linux on my 79 year old Mom's compromised (by malware) XP computer two weeks ago. She does have an occasional question, however, she's enjoying the use of her computer again. :-)

      Have a nice day.

      --
      If you want your life to be different, live it differently.
    31. Re:I have a feeling.... by DigiShaman · · Score: 2, Insightful

      Microsoft continually talks about "experience" -- if a crappy driver spoils my experience, then Microsoft has a problem, even if MS is not at fault.

      Well then, it's settled. Microsoft should own the hardware in much the same way Apple owns theirs.

      What, that scares you?! Get over it. You can't have your cake and eat it too.

      --
      Life is not for the lazy.
    32. Re:I have a feeling.... by lordtoran · · Score: 2, Insightful

      This doesn't translate to a number of software packages. It just means that there are more pages mentioning free Windows software, which is to expect, as you have to search for and download software manually in Windows.

      --
      Want to hear the voice of GOD? cat /boot/vmlinuz > /dev/dsp
    33. Re:I have a feeling.... by k1e0x · · Score: 2, Informative

      This is true, optimizations in GCC have lead to the newer OS's becoming faster on new hardware when doing the same things.

      So the above note about the latest version *always* being slower.. that actually only applies to Windows.

      --
      Bringing liberty to the masses. - http://freetalklive.com/
    34. Re:I have a feeling.... by Lershac · · Score: 5, Funny

      in the olden days... *snigger*.

      In the real olden days it was mislabeled reel tapes

      --
      Chuck
    35. Re:I have a feeling.... by somersault · · Score: 4, Funny

      amazing framerates of 1 and maybe 2

      Would I be correct in assuming the obvious of 1 to 2 frames per pineapple, or are we dealing with a non standard unit here?

      --
      which is totally what she said
    36. Re:I have a feeling.... by Anonymous Coward · · Score: 2, Insightful

      Just to expand on what the parent said: Not only is it true for MS, but also true for everyone else. Despite the fact that hardware lacking Linux drivers is more the fault of hardware manufactures than, say, Red Hat, it is Red Hat that take the blame and Red Hat that need to get the hardware working if the manufacturer does not care to.

      This is a large part of why Apple has such strict control over what hardware you can use its OS on. Apple makes sure the hardware it sells works with the software it sells.

      The parent wasn't using round logic to pick on MS - it applies to both Linux boxen and Macs. Its just that Apple takes control over what hardware you run and Linux companies go out of their way to get the hardware working (eventually) while MS sits back and blames hardware manufacturers.

    37. Re:I have a feeling.... by clem · · Score: 2, Funny

      Age of Empires was fun.

      --
      Your courageous and selfless spelling corrections have made me a better person.
    38. Re:I have a feeling.... by vivian · · Score: 2, Interesting

      In the case of most hardware under Linux, it's the Linux community supporting the harder, making the community responsible for crappy drivers.

      You neglect to take into consideration crappy drivers that are crappy because the manufacturer has not released any information OR drivers for their product (for a particular platform), and the community has had to make do with whatever information they could glean from the hardware. eg. as used to be the case for many video drivers under Linux - the video card makers would provide minimal, if any, information about various low level hardware details for fear of providing dome edge to their competition. This meant the community had to basically reverse engineer a lot of the workings of the card instead of being able to just write a driver according to proper hardware and firmware specs.

        I would argue that in this case, although the poorly performing driver may have been written by the community, it is still largely the fault of the hardware company that the drivers do not work as well could be wished, because the hardware company refused to release data about the hardware that would make it possible to write more stable drivers.

    39. Re:I have a feeling.... by thelamecamel · · Score: 3, Insightful

      Don't forget the upgrade from Mac OS 9 to OS X, and the massive lags when just dragging windows around the screen! OS X has been getting faster because there has been so much room for improvement.

    40. Re:I have a feeling.... by MightyYar · · Score: 4, Informative

      Why is it Vista's fault if the hardware manufacturer releases crappy drivers

      It's not. If you buy the machine from - say Dell - and it is flaky due to some hardware or driver issue, then Vista shouldn't be blamed - Dell should.

      However, that is a very naive view of human nature. In fact, MS plasters their branding all over the place within Vista - so no wonder you are much more likely to be aware that it is a Windows machine rather than a Dell machine. If they wanted to keep a premium image they needed to pursue a different marketing strategy. Their reputation for instability is a marketing problem, not a technical one.

      --
      W..w..W - Willy Waterloo washes Warren Wiggins who is washing Waldo Woo.
    41. Re:I have a feeling.... by MightyYar · · Score: 2, Insightful

      OS X in particular has gotten snappier and more featureful with each point

      While I agree with you and have been using Macs since 1993, I feel the need to point out that OSX was so freaking slow upon introduction that there was no way to slow it down any further. I'll give them credit for improving performance with each release, but the responsiveness of OSX 10.0 vs OS9 was truly dreadful.

      --
      W..w..W - Willy Waterloo washes Warren Wiggins who is washing Waldo Woo.
    42. Re:I have a feeling.... by Unoriginal_Nickname · · Score: 4, Insightful

      Chinese manufacturers, not Chinese suppliers. There's a difference. Almost no companies run their own manufacturing or fabrication facilities. They're expensive as hell. We're talking in the range of a billion dollars for a facility that can meet international demands. You need to produce an obscene amount of a product just to meet the operating costs of a facility.

      Logitech, a company that you can't seriously suggest just "sells some nice stuff", outsources half of their production to third party contractors. What you're basically saying is that Microsoft's hardware division is somehow different because they outsource 100%? How is this right?

    43. Re:I have a feeling.... by SanityInAnarchy · · Score: 5, Insightful

      When Microsoft controls the "vista capable" logo, the fact that a piece of hardware is branded "vista capable" means Microsoft has reviewed the driver and approved it. So absolutely, they should be responsible.

      If they don't want to be responsible for a shitty drivers, they shouldn't hand out the logo to shitty drivers.

      --
      Don't thank God, thank a doctor!
    44. Re:I have a feeling.... by MadnessASAP · · Score: 4, Informative

      And for those of us who want something usable there's X-Plane. Nothing against Flightgear but last time I checked it still needed a fair bit of work.

      --
      I may agree with what you say, but I will defend to the death your right to face the consequences of saying it.
    45. Re:I have a feeling.... by Crayon+Kid · · Score: 2, Insightful

      You know what? Wake me up when the antivirus and generally the anti-malware industry goes out of business. THEN we'll know for sure we got a safe Windows OS.

      In the meantime, all Microsoft's claims are just more marketing bullshit to me.

      --
      i ate crayons when i was a kid and now i have two braincells and the blue ones taste nicer
    46. Re:I have a feeling.... by roguetrick · · Score: 2, Interesting

      If you're talking about desktop usage, I just did some back of the envelope calculations and I think you're right as far as current userbase goes. If you're talking about everyone who has ever touched linux, however, I think you'd be pretty wrong.

      I came up with:
      42,000,000 Vista downgrades in 2008 based on
      this http://www.crn.com/software/207402009
      and this

      and 15,000,000 linux users based on
      this http://en.wikipedia.org/wiki/Usage_share_of_operating_systems
      and this http://en.wikipedia.org/wiki/Usage_share_of_operating_systems>http://en.wikipedia.org/wiki/Usage_share_of_operating_systems

      Now, I'm sure I'm wildly off the mark and someone can do better than I did. Regardless, that's depressing.

      --
      -The world would be a better place if everyone had a hoverboard
  2. is the safest, most reliable OS we've ever built by b0ttle · · Score: 5, Insightful

    He should have stopped here.

  3. what? by Tumbleweed · · Score: 3, Interesting

    "Vista today, post-Service Pack 2, which is now in the marketplace, is the safest, most reliable OS we've ever built. It's also the most secure OS on the planet, including Linux and open source and Apple Leopard. It's the safest and most secure OS on the planet today."

    See any serious problems with this story?

    Do I see any serious problems with this story? Uh, yeah, maybe one or two...

    I'm not sure why this is news - MS says this about every OS release they put out...

    1. Re:what? by Anonymous Coward · · Score: 2, Funny

      But it IS the safest - it now fails to boot.

  4. Fail by clang_jangle · · Score: 2, Informative

    April 1st was 2 weeks ago.

    --
    Caveat Utilitor
    1. Re:Fail by Fallen+Seraph · · Score: 3, Insightful

      Conficker Worm: Hi guys, what's up? What're you all reading? Did I miss anything?

  5. today.... by SIR_Taco · · Score: 5, Insightful

    It's the safest and most secure OS on the planet today

    Until tomorrow when all those pesky exploits come out

    --
    I say don't drink and drive, you might spill your drink. Before you get behind the wheel just stop and think.
    1. Re:today.... by networkBoy · · Score: 2, Funny

      5 bucks says some exploits launch just to poke holes in their statement.

      Next major worm will only target Vista and will spam MS addresses with

      EPIC FAIL
      This spam was sent from a compromised Vista machine.

      --
      whois gawk date unzip strip find touch finger mount join nice man top fsck grep eject more yes exit umount sleep dump
  6. Safest? by Jhon · · Score: 4, Insightful

    Even if it is, it's too late. Vista is already perceived as the new Windows ME. With Windows 7 coming up soon, I doubt there will be much sales increase for MS.

    1. Re:Safest? by zlogic · · Score: 4, Insightful

      People worship XP, even though it was released just after WinME.

    2. Re:Safest? by PhantomHarlock · · Score: 5, Informative

      Windows XP was not a continuation of the 95-98-98SE-ME hybrid 16/32bit product line. It is a continuation of Windows NT->2K line, which was 32-bit pure and already very stable in comparison. Apples and oranges.

  7. Please don't by Daimanta · · Score: 5, Funny

    In the history of man there have been several cases of fatal hilarity(http://en.wikipedia.org/wiki/Fatal_Hilarity) and this article might inflict this seemingly comical effect on technically concious people.

    Posting an article like this without thinking about the consequences might actually hurt and kill people. Please don't.

    --
    Knowledge is power. Knowledge shared is power lost.
  8. ORLY? by Just+Some+Guy · · Score: 5, Insightful

    It's also the most secure OS on the planet

    Trusted Solaris would like to have a word with you.

    --
    Dewey, what part of this looks like authorities should be involved?
  9. Waving red in front of the bull. by m0nkyman · · Score: 5, Insightful

    Waving red in front of the bull. Always a good idea.
    Pity that it will be MicroSofts' customers, not MS that will suffer when the hackers, script kiddies and miscellaneous ne'er-do-wells inevitably trash the security for their latest offering.

    --
    ~ a low user id is no indication I have a clue what I'm talking about.
  10. Fools? by JJman · · Score: 3, Funny

    Checks current date. No, not the 1st.
    Checks date on the article. No, still not the 1st (though eight days different).

    Well, somebody's a fool.

    1. Re:Fools? by dltaylor · · Score: 4, Funny

      Only 8 days late? For M$, that's better than their normal delivery.

  11. post SP2? by mugnyte · · Score: 4, Funny

      Did he mention that Vista post SP2, there is no network stack? Fwoppies FTW!

  12. The winner of Pwn2Own seems to agree by YesIAmAScript · · Score: 5, Informative

    http://www.tomshardware.com/reviews/pwn2own-mac-hack,2254-4.html

    'The NX bit is very powerful.When used properly, it ensures that user-supplied code cannot be executed in the process during exploitation. Researchers (and hackers) have struggled with ways around this protection. ASLR is also very tough to defeat. This is the way the process randomizes the location of code in a process. Between these two hurdles, no one knows how to execute arbitrary code in Firefox or IE 8 in Vista right now. For the record, Leopard has neither of these features, at least implemented effectively. In the exploit I won Pwn2Own with, I knew right where my shellcode was located and I knew it would execute on the heap for me.'

    And this was with Vista SP1. No one knows how to exploit Firefox or IE on Vista due to NX and ASLR.

    This seems to be a pretty powerful statement, from someone who would stand a chance of knowing.

    My only question is, where is Vista SP2? Last I checked, it was not yet released.

    --
    http://lkml.org/lkml/2005/8/20/95
    1. Re:The winner of Pwn2Own seems to agree by fuzzyfuzzyfungus · · Score: 5, Informative

      Thing is, NX and ASLR are not unique to Vista.

      Linux, and the BSDs have, at least optionally, had them for some years now. I'm not sure about OSX.

      There is a very large difference between saying "most secure MS OS ever" and "most secure OS".

    2. Re:The winner of Pwn2Own seems to agree by Lennie · · Score: 2, Informative

      What I've heared is, the people who do that work, like any hobbiest or professional for that matter, doesn't want to use Vista.

      --
      New things are always on the horizon
    3. Re:The winner of Pwn2Own seems to agree by GNUbuntu · · Score: 3, Informative

      And this was with Vista SP1. No one knows how to exploit Firefox or IE on Vista due to NX and ASLR.

      Wow with Vista SP1?!??!?! Gee that totally beats out the fact that the Linux, FreeBSD, NetBSD kernels had support for that back in 2004 with OpenBSD having support in 2003 and Solaris having NX support as early as 1997 in Solaris 2.6, right?

    4. Re:The winner of Pwn2Own seems to agree by YesIAmAScript · · Score: 4, Informative

      NX alone doesn't do it. Ask Linus.

      As mentioned in the article, without adding stuff to the kernel that is not in the default on distros, you aren't getting the same protection as Vista has.

      Vista had NX and ASLR before SP1, but it was a weak form (much like Linux has a weak form by default).

      http://en.wikipedia.org/wiki/Address_space_layout_randomization

      You don't believe me? I provided a link from a security expert. He seems to be somewhat impressed.

      Before you try to throw it in my face, I think Linux survived pwn2own unscathed, but Charlie says that's because the equipment you get if you pwn Linux (remember, it's pwn to own) wasn't worth the effort.

      --
      http://lkml.org/lkml/2005/8/20/95
    5. Re:The winner of Pwn2Own seems to agree by Have+Blue · · Score: 2, Interesting

      Leopard was sort of a field test of ASLR, it can relocate a small subset of its system libraries. Allegedly, Snow Leopard will bring full pervasive ASLR.

    6. Re:The winner of Pwn2Own seems to agree by YesIAmAScript · · Score: 2, Interesting

      How about you read the link and then post again?

      Charlie (the winner) says due to ASLR and NX, no one knows how to inject code into a Vista SP1 machine. That seems pretty good to me.

      If you take his comment "safest OS" (not most secure) as an absolute, he's surely wrong. But the most secure OS is also probably not nearly as useful for getting actual work done as many other OSes that present a compromise, like various forms of Linux or Vista.

      --
      http://lkml.org/lkml/2005/8/20/95
    7. Re:The winner of Pwn2Own seems to agree by Xenographic · · Score: 2, Informative

      > As mentioned in the article, without adding stuff to the kernel that is not in the default on distros, you aren't getting the same protection as Vista has.

      I don't know when it was added to Linux, but OpenBSD had all of this (and more) ages ago (about 2003, according to Wikipedia). Fact is, this was old hat by the time Microsoft announced support for it.

      I'm not buying any Vista/Win7 marketing hype. It's good that they're adding more security, but they're not doing anything other people haven't done long before them. They're playing catch-up, and they're quite a ways behind.

      Anyhow, I don't think your premise (that Microsoft's stuff is the latest and greatest) is supported by that link. You're misreading it. He's saying that the implementation is new (so people haven't had time to explore it yet), not that the technique is new (as previously documented, NX bits and ASLR have been around for years now, in various kernels, even by default).

      I'm not saying that Microsoft doesn't have a credible implementation (I haven't seen enough research yet to make a determination), but whatever they have is built off of ideas that were created independently by the security community long before Microsoft even thought about implementing them.

      P.S. Just in case you want to play "but he's a security expert," I'm one, too, and I remember thinking "it's about damn time" when I heard Microsoft announce support for them.

  13. "Cancel or Allow" by starglider29a · · Score: 2, Funny

    You are about to boot up your Windows Computer -- (C)ancel, (A)llow, (F)ail

    Yep, most secure, indeed!

  14. In further news... by Jason+Earl · · Score: 4, Funny

    Richard Stallman announced in a press conference today that Emacs is the safest operating system on the planet. According to Stallman Emacs is safer than Linux, Windows Vista, or Apple's Mac OS X.

    1. Re:In further news... by SkinnyKid63 · · Score: 5, Funny

      Richard Stallman announced in a press conference today that Emacs is the safest operating system on the planet. According to Stallman Emacs is safer than Linux, Windows Vista, or Apple's Mac OS X.

      Yes, but it's missing a decent text editor.

  15. Re:HAHAHAHA by blueg3 · · Score: 2, Insightful

    I'm going to go out on a limb and guess that it'll be because they, just like nearly every other piece of malware out there, are only capable of running on a single platform -- regardless of the actual security of that platform.

  16. There's always a get-out clause by tenchima · · Score: 5, Funny

    He never stated which planet...

    --
    If at first you don't succeed, so much for skydiving.
  17. oops by Anonymous Coward · · Score: 4, Funny

    "..It's also the most secure OS on the planet, including Linux and open source and Apple Leopard. It's the safest and most secure OS on the planet today.... oh...uh.... i mean NOT including.. NOT including, sorry i misread that part, it actually says NOT including so.... can i start again please?"

  18. Re:is the safest, most reliable OS we've ever buil by IamTheRealMike · · Score: 3, Insightful

    No, he is probably right.

    MacOS X isn't all that secure. Professional hackers have said that the implementation of ASLR/NX on Vista is far superior to Apples.

    And as for Linux? Well, it wasn't that long ago that a certain high profile distribution accidentally disabled the pRNG in its core crypto libraries ... for two years. And then another high profile distro let attackers actually sign some rogue packages with their private key. I don't think anybody should be making smart comments about the security of Linux.

    That leaves Vista, the result of many years of applying the Secure Development Lifecycle. Extensive fuzz testing on the APIs. Extensive security review of all features. IE uses a low privilege renderering engine like Chrome (and unlike any browser on Linux or MacOS).

    This doesn't mean MacOS or Linux are bad. But Microsoft have been throwing enormous resources behind security for years now. Is it any surprise they are caught up and in many ways ahead?

  19. Awesome! by DoofusOfDeath · · Score: 3, Funny

    "Vista today, post-Service Pack 2, which is now in the marketplace, is the safest, most reliable OS we've ever built.

    Security through obscurity?

    Brilliant!

  20. Re:That's great... by aster_ken · · Score: 4, Informative

    Would you rather that RAM sit there doing nothing? Windows Vista has many features that utilize RAM to its fullest extent. Any free RAM on my system is RAM that is sitting on its lazy ass doing nothing. Windows Vista is actually smart enough to user it (Super Prefetch comes to mind) when my applications are not.

    I'm actually typing this in Internet Explorer 8 on Windows Vista Business SP1 32-bit on a Pentium M 1.4 GHz with 1 GB RAM, and it's actually quite snappy.

  21. Re:is the safest, most reliable OS we've ever buil by Just+Some+Guy · · Score: 5, Insightful

    That leaves Vista

    ...and all the security-designed systems. Do you really think Windows is safer than OpenBSD, let alone OpenVMS? Or whatever the NSA uses on their hardest systems? His quote is like saying that "the Ford Mustang is the fastest car on the planet".

    --
    Dewey, what part of this looks like authorities should be involved?
  22. What planet? by Xarun · · Score: 2, Funny

    Did they send a copy of Vista SP2 to Mars or something?

  23. The most secure OS would be... by Targon · · Score: 4, Insightful

    one that allows the user to decide not to install potentially insecure software during the initial OS install. This is the biggest problem with Microsoft Windows when it comes to security, the huge amount of crap that gets installed automatically without the ability to decide DURING the install what features you want or do not want.

    Linux as a whole does provide the ability to make a very minimal install with only those applications that you want on the machine. Solaris used to have this ability as well, though I am not sure if you can go package by package during the initial install to decide what you want or do not want on the machine.

    You hear about Linux problems, but then it only applies to a specific Apache version that comes with a "typical" RedHat install, or some other issue which only applies to a certain software package. When a problem can be traced to the kernel or some other core component, that is when it applies to the OS as a whole.

    So, saying that Vista is the most secure after SP2 means nothing if garbage like Internet Explorer is still open to all the exploits that Microsoft doesn't like to talk about.

  24. In other NON-News... by killmenow · · Score: 4, Funny

    Today Eric Schmidt, CEO of Google, proclaimed "Google search is the best search on the planet!"

    Also, Tom Long, CEO of Miller Brewing Company announced, "Our beer is the best tasting beer in the world!"

    Here's a template: [Insert Person's Name Here], [insert title here] of [insert company name here] [announced|proclaimed|stated|declared|quothed] "[insert company's product here] is the [insert positive attribute here] in the entire [world|planet|universe]."

    Repeat, ad infinitum.

    1. Re:In other NON-News... by DavidD_CA · · Score: 2, Funny

      Killmenow, user of Slashdot, stated, "My template is the best in the entire world."

      --
      -David
  25. Aahh I Needed a Laugh by Greyfox · · Score: 2, Interesting

    Tell ya what. I have a cable right here that will connect your computer directly to the internet. Lets plug in a computer and kick off a Vista SP2 install (I assume you can get an installation disk that's pre-patched to SP2, right?) Then we'll measure how long it takes for the system to get taken over. Then we'll do the same thing with a stock Debian install CD. Then we'll post our results on the Internet. If your operating system is indeed so secure, you should have no problem with this, right?

    --

    I'm trying to teach myself to set people on fire with my mind... Is it hot in here?

  26. No... by jrothwell97 · · Score: 3, Insightful

    the safest OS on the planet is one stored in non-erasable ROM.

    --
    Those using pirated Tinysoft signatures(TM) are a real threat to society and should all be thrown in jail.
  27. See a problem? Check Vista SP2's release date by number6x · · Score: 5, Interesting

    "Do I see any serious problems with this story? Uh, yeah, maybe one or two..."

    How about the fact tha Vista SP2 is not "in the marketplace" at all.

    It hasn't been released yet and is still an RC candidate in beta testing!

    If Microsoft wants to compare imaginary not yet released software to actual software, I set let them and Google play games with beta releases. The rest of us have actual work to do.

    1. Re:See a problem? Check Vista SP2's release date by Chyeld · · Score: 4, Funny

      You are missing the point. SP2 is secure because no one can hack it. No one can hack it, because it hasn't been released. Microsoft has finially discovered how to ensure their products are invunerable to hackers, simply never release anything.

      I pray they will only roll this technology forward to all future product lines...

  28. Re:is the safest, most reliable OS we've ever buil by Anonymous Coward · · Score: 3, Insightful

    Does BSD do everything that Vista does? Those systems are so locked down that it affects their capabilities. I'm not saying it's bad, but I don't think you can compare BSD to Vista without starting by saying that BSD doesn't do alot of the important things that Vista users take for granted.

    Your comment is like saying that an Abrams Tank is more secure than a Mustang.

    True, but can a tank get on the freeway without causing a traffic jam?

  29. Re:is the safest, most reliable OS we've ever buil by ushdfgakj · · Score: 5, Insightful

    Let's see here. On the left hand, we have the people at Microsoft claiming to make a secure operating system, and putting escrow into the encryption such that data can be seamlessly copied from the operating system to an unknown location. We witness Microsoft as an incredibly corrupt entity, in nearly every possible way - from locking in hardware manufacturers to using Windows to throwing lawsuits at everybody who even vaguely seems to threaten them (remember Lindows?). On the right hand, we have the code of Linux, FreeBSD, etc. available for the entire world to review, figures of authority are not chosen based on how much of a jackal they are, but how much their experience is worth. OpenBSD and FreeBSD have things like in-kernel crypto, chroot jails, are actually POSIX compliant, and seem to suffer from very little bloat due to the trend to make specific utilities as discrete as possible, and hence nearly as flawless as possible. Let's just agree to disagree. Or I can just call you an idiot. I'm fine with either.

  30. Re:is the safest, most reliable OS we've ever buil by Anonymous Coward · · Score: 5, Insightful

    The reason why Vista, Mac OS X, and Linux have fewer exploits is simple. Windows XP is easier to exploit.

    Just remember that the security of the newer OSes is only one factor in the availability of the exploits.

    If you want to visualize a flawed analogy; when you're being chased by a hungry lion, it doesn't matter how fast you run as long as you run faster than the guy beside you.

    In this analogy XP is the slowest runner who is still plentiful. When the XP prey dwindles away, the hungry blackhat lions will look for the next slowest runner.

  31. Re:is the safest, most reliable OS we've ever buil by Anonymous Coward · · Score: 4, Insightful

    "And as for Linux? Well, it wasn't that long ago that a certain high profile distribution accidentally disabled the pRNG in its core crypto libraries ... for two years. And then another high profile distro let attackers actually sign some rogue packages with their private key. I don't think anybody should be making smart comments about the security of Linux."

    Let's get this straight. You think *all* Linux distributions are unsafe because of TWO vendors. Do you believe in eugenics as well?

    You do realize that your comment glosses over the hundreds(thousands?) of holes and exploits that M$ is responsible for it every OS up to and including this one you're waxing poetically about, right?

    I wonder why I haven't ever had a rootkit on my Linux installations but I fix M$ installations all the time(Vista included) that have been rootkitted. Once a week at least.

  32. Re:is the safest, most reliable OS we've ever buil by Anonymous Coward · · Score: 3, Funny

    Yes, it can. It just has to run over a few cars first. :)

  33. Re:That's great... by AK+Marc · · Score: 2, Interesting

    Would you rather that RAM sit there doing nothing?

    Yes.

    Windows Vista has many features that utilize RAM to its fullest extent. Any free RAM on my system is RAM that is sitting on its lazy ass doing nothing. Windows Vista is actually smart enough to user it (Super Prefetch comes to mind) when my applications are not.

    And what happens is that it determines that it wants to swap my actual program memory to disk to make room for these advanced features? And those features may save me 10 minutes a day, but they are 10 minutes I didn't know I was missing. But I notice the 10 seconds longer it takes switching between programs because my open programs have been moved to the slow disk and out of the fast RAM. I'd rather they don't touch them and waste my time, than think for me and get it wrong in a way that causes me trouble. It's an open program. There's available RAM. Don't touch my open programs, even if I haven't used them in 18 hours. (yes, if you leave a distro downloading over bittorrent overnight, you'll find that other programs will be swapped to the disk, and the open programs will take much longer to run in the morning)

  34. Re:is the safest, most reliable OS we've ever buil by IamTheRealMike · · Score: 2, Interesting

    Well, together Debian Ubuntu and Red Hat probably compromise the majority of Linux installs these days. If two large and well respected distros can fail in such basic ways, then it's reasonable to extrapolate that smaller and presumably less professional outfits will be even more flaky. Of course you can always find some Linux distro that has a perfect track record, but like I said above, usage counts. At some point if you want the word "Linux" to be meaningful you have to start talking about the bits actually in circulation.

  35. Funny that the tags mention OpenBSD by aliquis · · Score: 4, Insightful

    ... and not only because the article isn't about OpenBSD at all.

    Anyway, yes, OpenBSD as an OS is probably pretty secure, but so are many others to, but the more crap you pile on top of it the more risk.

    Anyway, the OpenBSD people count their "security" (marketing vise atleast) in years since the last remote root(?) exploit.

    How likely is a remote root/administrator exploit vs Vista with a software firewall, no extra services and a user which don't do anything? ...

    When it comes to exploits vs browsers, mail clients, IM clients, document viewers and such the OS isn't the issue.

    1. Re:Funny that the tags mention OpenBSD by dna_(c)(tm)(r) · · Score: 2, Insightful

      When it comes to exploits vs browsers, mail clients, IM clients, document viewers and such the OS isn't the issue.

      Once such an app is compromised, that's when the OS can make a difference...

    2. Re:Funny that the tags mention OpenBSD by Spit · · Score: 2, Informative

      OpenBSD is consistently impervious to network service attacks which are exploitable on other platforms. Generally an exploit will lead to a service crash in the worst case.

      --
      POKE 36879,8
  36. Re:is the safest, most reliable OS we've ever buil by spinkham · · Score: 5, Insightful

    Vista is arguably the most secure OS suitable for desktop use.
    It is not the safest OS suitable for desktop use however.
    What's the difference?

    The President of the United States is arguably the most secured individual on the planet.
    However, due to the large number of threats against him and his need to travel and be in the public eye often, he is not the safest individual on the planet.

    Operating systems are the same. Vista has added many good defenses, but is still the OS with the target on its back.
    I'm ok with Microsoft claiming to be the most secure OS for desktop use. OpenBSD and some hardened Linux distros might wish to disagree, but most people don't run hardened systems on desktops, they want more functional systems that are easier to support.
    However, I'm not going to let MS get away with calling Vista the safest OS out there, because it just isn't.

    --
    Blessed are the pessimists, for they have made backups.
  37. Re:is the safest, most reliable OS we've ever buil by Anonymous Coward · · Score: 3, Informative

    it wasn't that long ago that a certain high profile distribution accidentally disabled the pRNG in its core crypto libraries ... for two years.

    Umm, no.

    A certain high-profile distro accidentally disabled the pRNG in it's sshd initialization scripts.

    another high profile distro let attackers actually sign some rogue packages with their private key.

    again, no. The key was suspected to have been compromised, and as soon as it was discovered, the key was revoked, they performed a complete audit of all packages, and everything checked out.

    I don't think anybody should be making smart comments about the security of Linux.

    Least of all you... of course the fact that the only two incidents that you could come up with are entirely in your head actually speaks volumes.

  38. Testing isn't security by argent · · Score: 3, Interesting

    Security has to be designed in.

    When Microsoft deployed ActiveX installation and launch over HTTP and email with Active Desktop in 1997 they made Windows inherently insecure in a way that nobody had ever imagined anyone would be stupid enought to do. In fact it used to be a joke, the "Good Times" virus... a virus so effective it would run without you even opening the email message it was contained in. EVERYONE knew it was a joke, because EVERYONE knew nobody would be so stupid as to deliberately allow untrusted content to automatically run.

    Nobody but Microsoft was that stupid, anyway.

    Jesus Christ, man, the fundamental desing of Internet Explorer is so f-ing bad that over 10 years later I am STILL aghast that ANYONE would defend it, or any OS that depends on it. What the HELL are you smoking? DO you honestly not understand just how amazingly stupid this is? Honestly? By the bowels of Christ, consider that you might be mistaken.

  39. Re:That's great... by Fujisawa+Sensei · · Score: 2, Insightful

    Would you rather that RAM sit there doing nothing? Windows Vista has many features that utilize RAM to its fullest extent. Any free RAM on my system is RAM that is sitting on its lazy ass doing nothing. Windows Vista is actually smart enough to user it (Super Prefetch comes to mind) when my applications are not.

    I'm actually typing this in Internet Explorer 8 on Windows Vista Business SP1 32-bit on a Pentium M 1.4 GHz with 1 GB RAM, and it's actually quite snappy.

    Any RAM on my system that's doing nothing on my System is at my beck and call anytime I want it. The OS never knows when I want to start up Eclipse and JBoss to do some development, or maybe digiKam and convert a couple of hundred RAW images to jpegs. And while that batch is running, I probably want to start doing some image post processing with Gimp.

    --
    If someone is passing you on the right, you are an asshole for driving in the wrong lane.
  40. Re:is the safest, most reliable OS we've ever buil by IamTheRealMike · · Score: 4, Informative

    Windows Update does not use IE and hasn't since XP. You need to get information that isn't many years out of date.

  41. Re:is the safest, most reliable OS we've ever buil by jonbryce · · Score: 2, Informative

    IE is only used for Windows 2003/XP and earlier systems. Vista/2008 has its own separate updating program.

  42. Re:is the safest, most reliable OS we've ever buil by Dotren · · Score: 4, Informative

    Windows Update does not use IE and hasn't since XP. You need to get information that isn't many years out of date.

    Where are my mod points when I need them? Mod parent up informative please!

    He is correct.. Vista and beyond use an interface in the Control Panel which is vastly superior to the IE Windows Update. Read up here: Windows Update

  43. Unsupported claims. by lattyware · · Score: 2, Funny

    The foundation of any fact.

    --
    -- Lattyware (www.lattyware.co.uk)
  44. Re:is the safest, most reliable OS we've ever buil by aliquis · · Score: 2, Insightful

    Locked down? In what way? Sure you can lock down both OpenBSD and Linux with additional patches and what not, but quite functional as is? The standard amount of applications and services may differ though, but then there is the question where you draw the line between OS and applications.

    For comparison I'd like to draw it so that OS covers things various applications may use, whereas single applications which don't offer anything for other applications would be just that.

  45. Re:They removed the PORT FILTERING GUI, & said by Computershack · · Score: 3, Informative
    Utter fucking bullshit.

    Point 1. Port filtering is still there. Control Panel, Administrative Tools, Windows Firewall with Advanced Security. Just because you're too fucking stupid to find it doesn't mean it doesn't exist.

    Point 2. IE 7 runs in a sandbox. IE8 does as well as well as having inbuilt checking of known bad sites (Smartscreen filter), anti-phishing, popup blocker, blocking of add-ons etc. SO YOU DON'T NEED ANY OF THAT SHIT YOU'RE ON ABOUT which actually causes MORE trouble than its worth.

    --
    I only please one person per day. Today is not your day. Tomorrow isn't looking good either. - Scott Adams
  46. Re:HAHAHAHA by Computershack · · Score: 2, Informative

    If Max OS X isn't full of holes, why are there several pages of them on Securityfocus.com? Hell, Safari had a big enough list on its own.

    --
    I only please one person per day. Today is not your day. Tomorrow isn't looking good either. - Scott Adams
  47. Re:is the safest, most reliable OS we've ever buil by Jurily · · Score: 5, Insightful

    Your comment is like saying that an Abrams Tank is more secure than a Mustang.

    True, but can a tank get on the freeway without causing a traffic jam?

    If the internet was a warzone, would you take the tank which is impervious to nearly everything they'll shoot at you with, or would you take the Mustang, paint a target on the back of your head, and relax, knowing you can have air conditioning while trying to dodge the bullets?

    See all those wrecked Mustangs on the side of the road? They too can cause a traffic jam. It's called a botnet.

  48. Re:is the safest, most reliable OS we've ever buil by IamTheRealMike · · Score: 4, Informative

    The pRNG was disabled in the openssl library, thus compromising any system using keys generated by that library. That is a major, major hole and has nothing to do with sshd initialization scripts (where did you get that from anyway?)

  49. Windows Rulz! by qazwart · · Score: 2, Funny
    Windows rulz and Linux sux. If you use Linux you're a luzr!

    Oh, wait this is Slashdot! Sorry.

    Linux rulz and Windoze Sux! If you use Windows you're a luzr!

    ---
    Posted on my iPhone.

  50. It's true! by thetoadwarrior · · Score: 2, Funny

    I'm sure no one can hack Vista SP2 because no one is using it. Therefore it's impenetrable!

  51. Re:That's great... by adolf · · Score: 3, Informative

    You don't understand. Which is normal: You're about the sixtieth person I've had to correct on this issue.

    In synopsis: you're wrong.

    Here's why:

    RAM that is sitting there holding stuff you might need, sometime (ala Superfetch) is just as ready to be utilized as RAM which is doing nothing at all. Superfetch is a read caching system, and any RAM it has in use for itself can be used by other programs IMMEDIATELY if they need it instead. Nothing has to wait buffers to get pushed out to disk, there's no longstanding delay. It just gets repurposed, and overwritten with other stuff. It doesn't need zeroed first. It's RAM, ie Random Access Memory, ferfuck'ssake.

    In other words:

    A system with a gigabyte of free RAM is a system with a gigabyte of RAM that it's failed to use. An optimized system does not have unused RAM.

    Linux systems also eventually use all available RAM for caching. Your UID is low enough that you've probably even seen discussions of this "problem" in *nix years and years ago, and you should understand by now that it's not a problem at all, for all of the same reasons (listed above) that it's not a problem with Windows.

  52. Re:That's great... by skelterjohn · · Score: 3, Informative

    More than that, if you suddenly try to load a large application that demands RAM, and there isn't enough due to the super pre-fetch or whatever, it's not like they're going to swap the super pre-fetch stuff to disk. They'll just drop it and load eclipse. Computer science is easy, folks!

  53. Dave Barry to the rescue by Citizen+of+Earth · · Score: 2, Funny

    "Saying that [Vista] is the most stable MS OS is like saying that asparagus is the most articulate vegetable." -- Dave Barry

  54. Re:is the safest, most reliable OS we've ever buil by Eil · · Score: 4, Insightful

    Heh, "since XP," because man, that was freakin' eons ago. Like back before marketshare fell from 63.76% to 63.67%.

  55. Re:That's great... by Jah-Wren+Ryel · · Score: 2, Interesting

    You are all loving superfetch.
    That's not the problem.
    NT/XP/Vista and presumably Win7 all have brain-dead paging algorithms which favor i/o buffering way too much over user code and data.
    Open up a big app. Do a ton of sequential i/o - windows will page out most of that app in order to buffer up that sequential data which is never touched again. Switch back to that app and wait ages for it to page back in.

    Do the same under linux and the memory manager is smart enough to recognize that sequential i/o should not cause buffercache to consume as much physical ram as possible.

    That's why windows's memory management sucks ass and linux's doesn't.

    --
    When information is power, privacy is freedom.
  56. ...with the most dangerous community imaginable by malevolentjelly · · Score: 2, Interesting

    This really a rather complex statement. While it's true that no other consumer desktop operating system has quite the level of security and anti-exploit code, etc... Linux and Mac simply exist in a safer world. Perhaps one of the safest aspects of a linux system is that you're almost always running trusted code from a verified repository. This means that you really don't have to test the mettle of a linux installation (and thank god you don't) besides the fact that the level of incompatibility between linux systems provides a level of security through obscurity. Now, common images such as OpenWRT or (eventually) default Ubuntu installs may eventually be targeted, but right now they're simply not.

    If someone is trying to take over your machine remotely, you're probably better off with Vista. If you're an idiot, you're probably better off with linux, where it's more difficult to shoot yourself in the foot by running insecure code as administrator.

    From the results of the recent pwn2own competitions, I would say that Apple is going to eat a lot of security crow as they get just a tad bit more popular. I think Mac OS X will prove to be comically insecure when people start attacking it.

  57. IE will NOT fill your computer with child porn! by David+Gerard · · Score: 4, Funny

    Microsoft is reeling from the vicious and unwarranted slanders of security companies and the US government's Computer Emergency Response Team that its Internet Explorer web browser has alleged "security holes" or is in any way less than the finest software known to mankind and excellent value for your money.

    The festering paedophiles of CERT have gone so outrageously far as to make the ludicrous claim that just viewing a malicious webpage in IE could leave your computer open to being hacked and turned into a Russian Mafia spam server. "We don't know what could have triggered such vindictiveness," sobbed Microsoft marketing marketer's marketer Steve Ballmer. "Do they hate free enterprise that much?"

    There are things you can do to make your computing experience even more secure. Microsoft's official suggestion -- make sure your anti-virus software is up to date and using an entire CPU doing nothing much, click through five screens to run IE in "protected mode," click through four screens to set zone security to "high," click "JUST BLOODY DO IT WILL YOU" when the User Access Control asks if you really want to do this, enable automatic updates with the minor side-effect of installing Microsoft DRM on your system or Windows Genuine Advantage randomly turning your computer into a paperweight, and sacrifice a goat to Microsoft at midnight on a moonless night -- is simple and straightforward. "It's the quality you're paying for."

    On no account should you consider that there might be other web browsers out there, as researchers have demonstrated that all of them automatically download the cover of Virgin Killer. "I saw a report," said marketing marketer John Curran of Microsoft Completely Enderlependent Analysts, Inc., "that another browser had more vulnerabilities than ours! People would be very foolish indeed to move from the latest IE to Netscape 4.01."

    "These CERT wankers are Mactards and trolls," said Guardian marketing marketer Jack Schofield. "They just want to take IE users out, brutally sodomise them, gas them in concentration camps and" [This comment has been removed by a Guardian moderator. Replies may also be deleted.]

    --
    http://rocknerd.co.uk
  58. Re:is the safest, most reliable OS we've ever buil by hondo77 · · Score: 5, Insightful

    If you're the one driving the tank there are no traffic jams.

    --
    I live ze unknown. I love ze unknown. I am ze unknown.
  59. Re:That's great... by dbIII · · Score: 2, Insightful
    Except the way it pages out is fairly unpleasant. It would be far less stupid if it just dropped those prefetched files when memory runs out instead of writing it all out to disk. If the machine is used for a variety of different tasks the prefetching is counterproductive and is a rather stupid idea for an OS with such a low memory ceiling (well under 4GB due to incompatibility with the Pentium Pro and later - other 32bit OS's including the MS Server range can cope with more). On a 64 bit version with far more memory than you need it would make sense paticularly if the machine is used for a limited range of tasks so doesn't have much to load.

    It really means you have to either turn prefetch off on general purpose desktop machines or spec machines to have the full 3GB or so no matter what their purpose is.

  60. Re:I have a keyboard... by Ironica · · Score: 2

    Let me get this straight... you're installing keyboard drivers? That could be your problem...

    --
    Don't you wish your girlfriend was a geek like me?
  61. The problematic truth by Gription · · Score: 5, Insightful

    The sad truth is the majority of people using Vista have it because that was the only choice at the computer store.

    (Then there is the fun bit where MS counts every Vista license purchased as a downgrade to XP as a "Vista sale".)

    1. Re:The problematic truth by LittleRunningGag · · Score: 5, Interesting

      You know, I work in a retail store as a break/fix monkey.  I hardly ever see people downgrading.  Most 'regular' people are perfectly fine with Vista.  Especially now that hardware has caught up to it.

      I'd be really curious to see some actual statistics re: downgrading.  I doubt it'd be as high as Slashdot seems to think.

    2. Re:The problematic truth by LittleRunningGag · · Score: 3, Insightful

      Heh, you think they'll stay home and just deal with the occasional BSOD?  You've never worked with end users have you?  Users taking time to actually work through problems...  OMG LMAO!  No, they come to me.  And, yes, for the record, we have the occasional person come in to complain.

      But not for the OS being unstable.  They come in because they can't get their ten year old printer to work.  Or, because their friend told them that the Vista is bad.  Or, because they're so afraid of computers that they can't handle change.

      Look, I'm not saying that Vista is all flowers and puppies, but I only have two issues with it.  1. x64 adoption and support is not nearly wide enough to support the resource requirements.  2.  GNS3 / Dynamips doesn't play nice with the UAC and that made for a long afternoon trying to do my Cisco lab for the first time after I installed Vista.

      But then the second issue could have been solved if the GNS3 developers had taken a little more time to test it with Vista.

      Oh, and 'the rest of us' is not the majority.

    3. Re:The problematic truth by DAldredge · · Score: 4, Funny

      I use it (Vista) because it is the best tool for my needs.

    4. Re:The problematic truth by Anonymous Coward · · Score: 4, Funny

      I'm sure I can't speak for everyone here, but I have Vista simply because it works. No, it's not perfect. Yes, Microsoft always seems to fall a bit short when polishing their GUIs. But even though Vista annoys me, it annoys me less than XP did and far less than any Linux distro I've ever tried.

      Seriously, if all the major Linux distro groups would just quit their bitching and work together, it could be amazing. But there is just way too much fragmentation right now. I really wish Red Hat would have absorbed Suse instead of Novell.

  62. Re:is the safest, most reliable OS we've ever buil by Pantero+Blanco · · Score: 2, Insightful

    It's absurd pedanticism. If Apple says "MacOS X is the easiest to use operating system in the world" do people respond with, no, the operating system that runs my car is easier to use? No they don't because that's obviously comparing apples to oranges. Trying to make a marketing dude look bad by comparing a production desktop OS like Windows to OpenVMS is just time wasting.

    Well, Turner is comparing Vista to "open source", which isn't even an operating system. If we decide to be kind and limit the statement to "all open source OSes", he has still opened up quite a can of worms. In either case, that statement isn't limited to "production desktop OSes" (and we aren't talking about technicalities here). I will be very surprised if Vista SP2 stacks up against OpenBSD and hardened Linux.

    Vista today, post-Service Pack 2, which is now in the marketplace, is the safest, most reliable OS we've ever built. It's also the most secure OS on the planet, including Linux and open source and Apple Leopard. It's the safest and most secure OS on the planet today.

    That statement is very far-reaching, and Turner seems pretty confident about that. I'd say OpenVMS is a valid comparison, though a "tamer" one such as OpenBSD would be better. ;)

    Of course, Turner is a businessman speaking to other businessmen, not a professor talking to other professors. I'm amused by the bragging, not angered at the inaccuracy.

  63. Re:That's great... by jcnnghm · · Score: 3, Informative

    Except that the RAM used for prefetch isn't paged out, ever. If an application needs it, it's immediately released to the application. All modern OS's that I know of do this, including Linux, OS X, and Windows. Don't talk about things that you don't understand.

    --
    You don't make the poor richer by making the rich poorer. - Winston Churchill
  64. Re:That's great... by slartibart · · Score: 2, Insightful

    Would you rather that RAM sit there doing nothing?

    No, I'd prefer that as I'm using my foreground application, the disk sit there idle waiting for me to ask it to do something, and when I do ask, it carries out that action immediately, rather than finishing the unnecessary swapping it had decided to do for no reason.

    An OS has absolutely no clue which app I'm going to switch to next, because often I don't know myself. For all it knows, the memory pages it just swapped out for no reason, I'm going to want swapped back in half a second later. So I have to share my disk accesses with a totally unnecessary swap, and then wait for it to be unswapped. No thanks. Even if the cost of swapping out could be reduced to zero, it's still stupid. There's just no benefit, and at the very least puts more wear and tear on your drive, and on laptops, uses more power.

  65. Wrong by jpmorgan · · Score: 2, Informative

    Wrong. They broke the entire OpenSSL library, not just some initialization scripts.

  66. Re:is the safest, most reliable OS we've ever buil by ozphx · · Score: 2, Informative

    Wrong. Not only did they break the entire OpenSSL library - they broke it in such a way that every damn certificate created using that distro was one of a "limited series" of around a thousand certs.

    They broke the seeding of the PRNG such that the only seed was the PID.

    It was, in laymans terms, a fucking disaster. They may have well enforced everyones root password to be 'password***', pick your three numbers.

    --
    3laws: No freebies, no backsies, GTFO.
  67. Re:That's great... by dbIII · · Score: 4, Interesting

    I suggest reading the docs BEFORE accusing people of not knowing what they are talking about. You probably don't recall but there was a lot of discussion about this bizzare counterproductive feature of superfetch at the time Vista was released and it's all explained quite well on Microsoft's technet site.

  68. Hah! Beat tat Windows suckers by bwashed75 · · Score: 4, Funny

    I installed Zenwalk Linux on my 79 year old Mom's compromised (by malware) XP computer two weeks ago.

    Linux can run on 79 year old hardware.

  69. And one more thing ... by KwKSilver · · Score: 3, Insightful

    If VISTA is so sooper-dooper, why is there no mention of it on the front page of microsoft.com. Lots of other MS products, including Windows 7 Beta! Poor VISTA, she must feel unwanted even in her own birthplace. Strange way to treat your flagship product, if you are really, really proud of it.

    --
    If you want your life to be different, live it differently.
  70. Re:That's great... by Ralish · · Score: 4, Informative

    I think you don't properly understand how SuperFetch works. It caches in RAM frequently used program data by pre-emptively loading commonly used applications and program data into unused RAM in anticipation of the user intending to run these applications. If he/she does, load times can be greatly reduced.

    However, note that the SuperFetch service runs at a very low priority, and will yield system resources to effectively any other process that requests system resources. Further, in the event of a program requesting memory that isn't available, SuperFetch will just dump from its cache a large enough portion of memory to accomodate the program. By your own admission, and correctly, RAM is _FAST_. The process of re-allocating a segment of memory from SuperFetch to your new program is negligible. SuperFetch will also never page to disk memory in use by an actually running program in order to fill the cache. I'm not saying that running programs won't be cached to disk, but it isn't SuperFetch that is the culprit. There are many other mechanisms in place that can result in this occuring, and SuperFetch isn't the only code on the system that plays around with the cache.

    Suffice to say, if you dislike SuperFetch, it's easy to disable it. Just go into Windows Services and change the SuperFetch service startup from Automatic to Disabled, and stop the service. You've now disabled the aggressive pre-caching, no harder than any other tweak for any other operating system.

  71. If You Don't Try The BACK Door..... by IHC+Navistar · · Score: 2

    ""It's also the most secure OS on the planet, including Linux and open source and Apple Leopard. It's the safest and most secure OS on the planet today.""

    -----Translation: "The key is under the mat."

    --
    Knowing Google's lust for data collection, the Soviet Union is still alive and well inside the psyche of Sergey Brin....
  72. 2008 by Bert64 · · Score: 3, Interesting

    So they're saying that their client OS vista is more secure than windows 2008?

    --
    http://spamdecoy.net - free throwaway anonymous email - avoid spam!
  73. They design them by snowwrestler · · Score: 2, Informative

    As someone who spent many long hours performing patent searches while working for a consultant to MS Hardware, I can assure you that yes, they do their own hardware design. They are subject to counterfeiting and "third shift" IP theft* just like many other companies who manufacture overseas, and the keyboard you saw was no doubt one or the other. In parts of Asia it is just as easy to find counterfeit or copycat Logitech stuff too. I know because my company bought them to study.

    * Third shift theft is when a company (often Chinese) signs a legitimate manufacturing deal with a U.S. company but purposefully overproduces. So say Company X does a deal to manufacture 2 million MS keyboards. They produce 2.5 million and do another deal on the side to slap a no-name label on the extra 500,000.

    --
    Build a man a fire, he's warm for one night. Set him on fire, and he's warm for the rest of his life.
  74. safest OS on the planet != safest OS MS build by moronoxyd · · Score: 2, Insightful

    I'm quite disappointed.
    The quote says that Vista SP2 "the safest, most reliable OS we've ever built". "we" as in Microsoft.
    Since when is Microsoft "the world"?

  75. Sorry. No. by SCHecklerX · · Score: 2, Insightful

    If I can't understand how it does things, and if I can't explicitly enable/disable components as needed, then no, it is not the most secure OS on the planet. Not even close. And as for functionality? Please.

    Hint: I can easily build a linux box to be a hardened gateway/firewall/ipsec device out of the box. I don't think windows can do that, nor will it ever with Microsoft's past and current philosophy.

    Does windows include a flexible SPI firewall at the level of iptables yet? Can I disable all services that listen on network sockets yet without breaking *something* in the OS?