main

Microsoft Beefs up Online Security Offerings

Tom Warren on 02 February 2004 - 14:45 · 3 comments & 410 views

Advertisement (Why?)
Perhaps no company in the industry is working harder than Microsoft at making sure the public knows what steps to take to secure its products.

If your servers aren't properly patched and your systems secured, it's getting harder and harder to blame Microsoft. Perhaps no company in the industry is working harder at making sure the public—both IT and at-large—knows what steps to take to secure its products.
One of the latest offerings is a monthly security newsletter, the first issue of which appeared last December. The newsletter is packed with relevant, crucial information. One example: A Q&A section asks the question "I received an e-mail telling me I should remove the Teddy Bear virus that is contained in a file named jdbgmgr.exe. Should I follow these instructions?" The file is a Microsoft java debugger file, and shouldn't be removed.

Another nifty section at the end of the newsletter details upcoming end-of-support dates for various products. For instance, support for a number of products still likely to be on many networks, including Access 97, Word 97, Excel 97 and Office 97, and FrontPage 98 and Outlook 98, had their support cut off just a few weeks ago, on Jan. 16.

News source: Mcpmag.com


Dave arrived and set his laptop up, an IBM ThinkPad A31. He didn't connect to the Internet - too dangerous, and against regulations, if I recall - but instead ran his presentation software using movies and videos where others would have actually gone online to demonstrate their points. While he was getting everything ready, I took a look at the first FBI agent I could remember meeting in person.

Dave had some surprises up his sleeve as well. You'll remember that I said he was using a ThinkPad (running Windows!). I asked him about that, and he told us that many of the computer security folks back at FBI HQ use Macs running OS X, since those machines can do just about anything: run software for Mac, Unix, or Windows, using either a GUI or the command line. And they're secure out of the box. In the field, however, they don't have as much money to spend, so they have to stretch their dollars by buying WinTel-based hardware. Are you listening, Apple? The FBI wants to buy your stuff. Talk to them!

Dave also had a great quotation for us: "If you're a bad guy and you want to frustrate law enforcement, use a Mac." Basically, police and government agencies know what to do with seized Windows machines. They can recover whatever information they want, with tools that they've used countless times. The same holds true, but to a lesser degree, for Unix-based machines. But Macs evidently stymie most law enforcement personnel. They just don't know how to recover data on them. So what do they do? By and large, law enforcement personnel in American end up sending impounded Macs needing data recovery to the acknowledged North American Mac experts: the Royal Canadian Mounted Police. Evidently the Mounties have built up a knowledge and technique for Mac forensics that is second to none.

(I hope I'm not helping increase the number of sales Apple has to drug traffickers.)

Post a comment · Send to friend Comments · There are 3 additional comments
#1 ThePDW on 02 Feb 2004 - 18:23
Perhaps they should work as hard at making their products secure?
#2 LordHatrus on 02 Feb 2004 - 18:38
Microsoft Beefs up online security?
*caugh* *Caugh* *caugh*
No, Bill Gates, stop pulling my leg....
#3 Brontojoris on 03 Feb 2004 - 02:58
The example mentioned is really of the P.E.B.K.A.C variety. I mean really, what sysadmin worth their salt is going to take security advice from an unsolicited email. I would be more impressed if Microsoft shipped products which were secure by default, followed open standards, and had user interfaces that assisted the sysadmin with securing and monitoring their servers. As it is now the MMC is a User Interface nightmare which only makes administration and setup more difficult.

Updating and patching is no better, with the Windows Update tool offering hardly any information about what is being updated (what files, where, which registry settings etc) and often ends with the totally useless line of: 'This update may require a restart' May?!? That's no good if you are running an e-commerce server. I can just imagine someone in the middle of ordering a product just at the moment I click the restart button. Oh whoops, there goes another customer.

Commenting has either been disabled on this article or you are not logged in. Click here to login or register, its free!

Note: Anonymous commenting is disabled in order to keep the quality of responses to a high standard.

Advertisement (Why?)