Symantec/EU succeed in making Vista insecure


Recommended Posts

http://it.slashdot.org/article.pl?sid=06/10/14/0832202

Microsoft Agrees to Changes in Vista Security

Posted by Zonk on Saturday October 14, @09:27AM

from the those-waters-were-a-mite-too-deep dept.

Security Microsoft Windows

An anonymous reader writes

"Bowing to pressure from European antitrust regulators and rival security vendors, Microsoft has agreed to modify Windows Vista to better accommodate third-party security software makers. In a press conference Friday, Microsoft said it would configure Vista to let third-party anti-virus and other security software makers bypass 'PatchGuard,' a feature in 64-bit versions of Windows Vista designed to bar access to the Windows kernel. Microsoft said it would create an API to let third-party vendors access the kernel and to disable the Windows Security Center so that users would not be prompted by multiple alerts about operating system security. In addition, Redmond said it would modify the welcome screen presented to Vista users to include links to other security software other than Microsoft's own OneCare suite. From the article: 'It looks like Microsoft was really testing the waters here, sort of pushing the limits of antitrust and decided they probably couldn't cross that line just yet.'"

http://www.washingtonpost.com/wp-dyn/conte...6101301280.html

Microsoft Now Decides to Accept Outside Security for Vista

By Brian Krebs

Special to the Washington Post

Saturday, October 14, 2006; Page D01

Microsoft Corp. did an about-face yesterday, agreeing to make it easier for customers of its forthcoming Vista operating system to use outside security vendors, such as those who make popular antivirus and anti-spyware programs.

Until now, Microsoft had planned to block those companies from installing their products in the deepest levels of the new operating system, which is scheduled for release early next year.

The company said it was doing so to address the concerns of security and performance in Windows XP and apply them to Windows Vista.

Microsoft's shift means that users would continue to have a choice in the programs they use to protect their computers and not be tied to something that Microsoft offers.

Microsoft is getting into the established, multibillion-dollar Windows security market with its own antivirus and anti-spyware services. The European Commission, which has fined Microsoft nearly $1 billion for antitrust violations, told the company that it was concerned that Vista's system for alerting users about security weaknesses might confuse customers who were using a similar alert system with other security programs.

Symantec Corp., maker of the Norton security programs, specifically took issue with what Vista users will see when they start their computers: a screen that advertises Microsoft's own antivirus and security services.

Symantec spokesman Cris Paden said the company was encouraged by Microsoft's announcement, but noted that it had not received any technical details about the plan.

"Right now we're in wait-and-see mode, but we're hopeful because it looks like customers are now going to have the right to use whatever security solutions they want with Vista," Paden said.

Microsoft said it is still gathering information from the software security vendors and will respond case by case.

The company said that blocking the core area of the operating system was also meant to enhance the performance of the entire computer, noting that unsupported access by outside software programs could affect the overall stability of the machine.

Stephen Northcutt, president of the SANS Technology Institute of Bethesda, a computer-security training group, said the changes that Microsoft agreed to make with Vista would help ensure that consumers continue to have a choice in security software.

"It looks like Microsoft was really testing the waters here, sort of pushing the limits of antitrust and decided they probably couldn't cross that line just yet," Northcutt said. "That's a good thing, because it's just too easy for mistakes to happen when you are only left with a single security provider."

the likeliness of me ever buying a pc with vista on it is rapidly decreasing.
I have to agree with you. I wonder, if Win 98 is still used 8 yrs after release ... how long will XP remain used for?

Well this is too bad. It's groups like Symantec, McAfee, and the EU that generally suck at life.

We go from a good idea that will make all of our millions of Windows computers that much more secure, to Microsoft essentially being forced to give in to these self serving douche bags. This annoys me to no end.

I say we boycott Symantec (and Norton) and McAfee products here in the US! :angry: (Y)

What ms needs to provide is a stable/documented interface for hooking the kernel (specifically the SDT). If they did this, they could keep patch-guard in place and still keep security vendors happy.

And the statement that patch-guard makes computers more secure is silly. In order to run at kernel-mode at all, you need a signed driver. What malware/rootkit is going to sign their drivers? There's an easy case that patchguard makes computers more stable, since SDT hooking is unstable, since there is no way to unload your hook once installed - the solution is to create a stable hooking api as I've said above.

Microsoft said it would create an API to let third-party vendors access the kernel and to disable the Windows Security Center so that users would not be prompted by multiple alerts about operating system security.

All I can say is that I'm glad the EU is here to protect me from Microsoft. Without this new API, the SuperPornoToolbar I just downloaded might not have been able to disable the security center!

Here's a question... A program like Novell (the client for NetWare) seems to integrate fairly deeply into the OS (even going as far as replacing the logon process). Would they not have problems if they could "play" with the kernel? Perhaps this might have more practical uses for companies aside from Symantec/McAfee? :unsure:

Why the hell would I trust Symantec to protect my system over the company that wrote all the code and knows the OS inside and out??? %#@ing ridiculous that MS spent so much time trying to make the OS secure and now they have to scale back on their efforts.

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Posts

    • The sweet release of death has never looked more appealing.
    • Meh, just another dongle-haven downgrade compared to my Surface Pro 7+. Whenever I decide to upgrade in the next decade or so, it certainly won't be another microslop Surface with this enshitification trend they've been having after the Surface Pro 7+. Hopefully a future generation of the Framework 12 will be a real upgrade...
    • This could exactly be how our Sun ends but it's not as simple by Sayan Sen Image by Drew Rae via Pexels An international team led by Université de Montréal (University of Montreal) PhD student Érika Le Bourdais has found that the ancient white dwarf star LSPM J0207+3331 is still pulling in planetary debris, even though it has been cooling for about three billion years. White dwarfs are dense, Earth-sized stellar remnants left behind when Sun-like stars exhaust their nuclear fuel and shed their outer layers. The star, located 145 light-years away in the constellation Triangulum, is the oldest and coldest white dwarf known to have a surrounding disk of dust. The star was first spotted in 2019 by a citizen scientist through the Backyard Worlds: Planet 9 project. Its cool temperature immediately suggested that it was very old, since white dwarfs gradually lose heat over time. Using the W. M. Keck telescopes in Hawaii, astronomers later confirmed that the star shows infrared signals consistent with dust rings formed by asteroids breaking apart under its strong gravity. Such infrared excesses occur when a star emits more infrared light than expected, often because warm dust surrounding it absorbs and re-radiates energy. “This discovery challenges our understanding of planetary system evolution,” said Le Bourdais. “The fact that we still see planetary debris being accreted three billion years after the star became a white dwarf suggests that asteroids, comets, and even planets can remain in orbit around these stars for a very long time.” Spectroscopic analysis—a technique that studies light to identify the chemical elements present in an object—revealed thirteen heavy elements in the star’s atmosphere: sodium, magnesium, aluminium, silicon, calcium, titanium, chromium, manganese, iron, cobalt, nickel, copper, and strontium. Normally, heavy elements sink quickly in hydrogen-rich white dwarfs, making them hard to detect. “We expected to see only a few elements, but we found dozens!” explained Le Bourdais. The research paper adds more detail. The absence of carbon features suggests the debris came from a carbon-volatile-depleted source. The abundance pattern shows slight deficits of magnesium and silicon compared to iron but otherwise resembles Earth-like material. This points to a differentiated rocky body—one whose materials have separated into distinct layers such as a metallic core and rocky mantle—with a metallic core fraction higher than Earth’s. In other words, the star is accreting the remains of a large rocky object, similar in structure to Earth or the asteroid Vesta. “White dwarfs offer one of the only ways we can directly measure the composition of exoplanets,” said Patrick Dufour, co-author and professor at Université de Montréal. “When planetary debris come too close, they are torn apart by the star’s gravity and end up polluting its atmosphere, leaving a detailed chemical fingerprint of its composition.” The team also detected weak Ca II H & K line core emission, making this only the second known isolated polluted white dwarf to show this feature. These are specific spectral signatures produced by ionised calcium and can indicate unusual physical activity in a star’s upper atmosphere. The finding suggests that extra physical processes may be happening in or above the star’s upper atmosphere. The study stresses the importance of including heavy elements in model atmosphere calculations, since leaving them out can distort the inferred structure and lead to inaccurate stellar parameters. Earlier work suggested the star’s infrared excess came from two dust rings. The new analysis shows that a single silicate dust disk—a ring composed largely of rock-forming minerals rich in silicon and oxygen—can explain the observed signal at 11.6 μm, simplifying the picture of the system’s structure. The question of how debris ended up falling into the star so late remains open. One idea is that giant planets in the system slowly destabilised smaller bodies over billions of years. Another possibility is that a passing star disturbed the orbits of debris. “Future observations with the James Webb Space Telescope or archival data found in the European Space Agency’s Gaia mission could help distinguish between a planetary rearrangement and the gravitational effect of a close stellar encounter,” said John Debes, co-author and researcher at the Space Telescope Science Institute. Dufour noted that hydrogen-rich white dwarfs are the most common type, and the coolest among them are the oldest stars in the galaxy. “We didn't have the habit of looking for signs of accretion in them. This unique case motivates us to expand our search to more of these stars.” The findings show that even after billions of years, planetary systems can remain active and complex. Substantial accretion events—the gradual accumulation of surrounding material onto a celestial object—can still occur long after a star’s death, offering a rare window into the composition and fate of distant worlds. Source: University of Montreal, IOPScience This article was generated with some help from AI and reviewed by an editor. Under Section 107 of the Copyright Act 1976, this material is used for the purpose of news reporting. Fair use is a use permitted by copyright statute that might otherwise be infringing.
    • Doesn't DDG mainly use Bing?
    • Given the hefty price tag this thing will likely have I doubt many everyday home users will be in the market for one especially given the current climate.
  • Recent Achievements

    • One Year In
      MadMung0 earned a badge
      One Year In
    • Week One Done
      jefred earned a badge
      Week One Done
    • Apprentice
      JoeyNeo went up a rank
      Apprentice
    • Week One Done
      oliviaexpo earned a badge
      Week One Done
    • Week One Done
      eurospharma62 earned a badge
      Week One Done
  • Popular Contributors

    1. 1
      +primortal
      481
    2. 2
      PsYcHoKiLLa
      229
    3. 3
      Skyfrog
      64
    4. 4
      monterxz
      56
    5. 5
      FloatingFatMan
      56
  • Tell a friend

    Love Neowin? Tell a friend!