Recommended Posts

Microsoft claims

Windows users running 64-bit versions of the operating system are less likely to get infected by attack code. According to Microsoft's security team said that 64-bit Windows has some of the lowest reported malware infection rates in the first half of 2009.

According to the Microsoft Malware Protection Center 64-bit malware is still exceedingly rare in the wild. Based on data gleened from Microsoft's Malicious Software Removal Tool (MSRC) the 64-bit version of Windows XP was 48 per cent less likely to be infected than the 32-bit edition during the first half of 2009; PCs running Vista 64-bit, meanwhile, were 35 per cent less likely to be infected than Vista 32-bit.

The blog said that that Windows 7 64-bit is the dominant flavor of that new OS as he touted its security. The blog claims that 64-bit Windows was safer by design than the less-powerful 32-bit version, ticking off such measures as PatchGuard, which makes it more difficult for malware to tamper with the operating system's kernel.

source

Link to comment
https://www.neowin.net/forum/topic/846834-windows-64-bit-is-safer/
Share on other sites

Heh. How many people here have EVER encountered PatchGuard? None, I bet.

It's just what redfox says, 64-bit is too fringe for anyone to bother making malware for it. The malware it does have will be of the 32-bit variety that still works because it doesn't mess with any parts of the system that are 64-bit only.

Overall, 64-bit is safer for the same reason Macs and Linux are: number of users.

If I'm going to spend an hour writing code to disable systems, would I rather spend

that hour and effect 1 million systems, or 20 million?

Look at the number of "dangerous" websites. You know what MOST of them have in common? Porn. They either have porn, or just advertise it to get you to the site. Why? Because there's more people searching for porn that anything else. It's all in the numbers of potential victims.

64 bit users arent safer than 32bit users. 32 bit malware still works on 64 bit hardware.

if anything 64 bit users are more at risk as they could be infected with 64bit malware as well as 32bit malware, 32bit users dont have this problem.

Nothing to do with patchguard and the other x64 security features in your highly qualified opinion then... :rolleyes:

64 bit users arent safer than 32bit users. 32 bit malware still works on 64 bit hardware.

if anything 64 bit users are more at risk as they could be infected with 64bit malware as well as 32bit malware, 32bit users dont have this problem.

How much x64-specific malware have you seen?

Overall, 64-bit is safer for the same reason Macs and Linux are: number of users.

Probably not. Most of the APIs, unless you are in kernel mode, is same. So, most malicious applications could still work in Windows x64. IMO, the higer security is probably the handiwork of on-for-all-programs-by-default hardware No Execute, PatchGuard and more randomization for ASLR

Nothing to do with patchguard and the other x64 security features in your highly qualified opinion then... :rolleyes:

I didnt say that & I didnt say my opinion was highly qualified, but thanks.

How much x64-specific malware have you seen?

none. but if there was none at all then the report would be pointless.

Ever had a patchguard crash? I've never heard of anyone who has as a result of malware.

Most malware doesn't try and patch the kernel. Anything that tries to patch system dlls would fail though because they'd be 64 bit as apposed to x86 which is what it would most likely target.

Most malware doesn't try and patch the kernel. Anything that tries to patch system dlls would fail though because they'd be 64 bit as apposed to x86 which is what it would most likely target.

Exactly. PatchGuard isn't very relevant in this context. Not just that, but if some malware for whatever reason wanted to patch the kernel, they could just disable PG first. A piece of malware that just sent the machine into a continuous crash loop would after all not be very useful.

PG primarily stops legitimate software from doing things it shouldn't, and that is its main purpose.

See http://en.wikipedia.org/wiki/Security_and_...ecific_features. The first 2 apply to XP 64 as well. Alas, if only Microsoft had supported XP x64 really well when it came out in April 2005.

It's like this:

- Windows users running the 64bit versions are immune against every kernel mode malware that was designed for 32bit versions of Windows. Why ?

Simply because every kernel level malware that was designed for 32bit versions of Windows rely heavily on modifying the Service Descriptor Table. Modifying the Service Descriptor Table on x64 is no longer possible, not without circumventing the Patch Guard Technology. So, all that malware that was designed for x86 is obsolete on x64.

- Windows users running either 64bit or 32bit versions of Windows are absolutely NOT immune against malware that is designed for x64. Circumventing Patch Guard is very well documented now (the very first public paper on this subject was published on Uninformed by Skape who works for MS now and Skywing, back in 2005), and more malware is being developed for x64 systems, especially that more and more users/enterprises are moving to this architecture.

To sum it up, in a couple years, there will be more malware targeting x64 systems and so this equation will shift.

Overall, 64-bit is safer for the same reason Macs and Linux are: number of users.

If I'm going to spend an hour writing code to disable systems, would I rather spend

that hour and effect 1 million systems, or 20 million?

Look at the number of "dangerous" websites. You know what MOST of them have in common? Porn. They either have porn, or just advertise it to get you to the site. Why? Because there's more people searching for porn that anything else. It's all in the numbers of potential victims.

It doesn't matter if you wrote just for 32-bit, the 32-bit virus code CAN STILL run on a 64-bit system with WOW...in simple terms, you can run a 32-bit app/virus/etc. on 64-bit windows...it doesn't matter. Now, if it's a 64-bit ONLY virus, that's a different story...as for Linux/Mac, I have no experience to comment in that area.

So your argument is null and void for Windows 64-bit systems using AMD64 (not Itanium64 versions).

Nothing to do with patchguard and the other x64 security features in your highly qualified opinion then... :rolleyes:

Haha...eye roll is right.

The comments are almost Picard face-palm worthy.

x64 was designed to be more secure. Why the **** is anyone surprised that MS says it's safer.

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Posts

    • Microsoft released Windows 11 KB5094149 / KB5095971 / KB5094156 Setup, Recovery updates by Sayan Sen Earlier this week Microsoft released its newest Patch Tuesday updates (KB5094126 / KB5093998 on Windows 11 and KB5094127 on Windows 10). Alongside those, Microsoft also released new dynamic updates. These Dynamic Update packages are meant to be applied to existing Windows images prior to their deployment. Dynamic Updates also help preserve Language Pack (LP) and Features on Demand (FODs) content during the upgrade process. VBScript, for example, is currently an FOD on Windows 11 24H2. This time both recovery and setup updates were released for Windows 11 as well as Windows 10. The company writes: "KB5095185: Safe OS Dynamic Update for Windows 11, version 26H1: June 9, 2026 This update makes improvements to the Windows recovery environment (WinRE). After installing this update, the WinRE version installed on the device should be 10.0.28000.2269. KB5094149: Safe OS Dynamic Update for Windows 11, versions 24H2 and 25H2: June 9, 2026 This update makes improvements to the Windows recovery environment (WinRE). After installing this update, the WinRE version installed on the device should be 10.0.26100.8655 KB5095971: Setup Dynamic Update for Windows 11, version 23H2: June 9, 2026 This update makes improvements to Windows setup binaries or any files that setup uses for feature updates in Windows 11, version 23H2. KB5094156: Safe OS Dynamic Update for Windows 11, version 23H2: June 9, 2026 This update makes improvements to the Windows recovery environment (WinRE). After installing this update, the WinRE version installed on the device should be 10.0.22621.7219 KB5098815: Windows Recovery Environment update for Windows 10, version 21H2 and 22H2: June 9, 2026 This update automatically applies Safe OS Dynamic Update (KB5094154) to the Windows Recovery Environment (WinRE) on a running PC. The update installs improvements to Windows recovery features. KB5094154: Safe OS Dynamic Update for Windows 10, versions 21H2 and 22H2: June 9, 2026 This update makes improvements to the Windows recovery environment (WinRE). After installing this update, the WinRE version installed on the device should be 10.0.19041.7417. KB5094153: Safe OS Dynamic Update for Windows 10, version 1809 and Windows Server 2019: June 9, 2026 This update makes improvements to the Windows recovery environment (WinRE). After installing this update, the WinRE version installed on the device should be 10.0.17763.8880. KB5094152: Safe OS Dynamic Update for Windows 10, version 1607 and Windows Server 2016: June 9, 2026 This update makes improvements to the Windows recovery environment (WinRE). After installing this update, the WinRE version installed on the device should be 10.0.14393.9234." Microsoft notes that both the Recovery and Setup updates will be downloaded and installed automatically via the Windows Update channel.
    • Quantum Error Correction Validated in Nature: Microsoft and Quantinuum Log 800-Fold Improvement Two years after the original press-release announcement, independently peer-reviewed results published in Nature on June 10, 2026, have confirmed that Microsoft and Quantinuum achieved an 800-fold reduction in quantum error rates on real trapped-ion hardware — the largest gap between physical and logical error rates ever independently validated.    What Quantum Error Correction Actually Does — and Why Breaking Even Is Hard https://www.techtimes.com/articles/318329/20260613/quantum-error-correction-validated-nature-microsoft-quantinuum-log-800-fold-improvement.htm   Quantum Computing Wiring Bottleneck Cracked by HKU Silicon Carbide Chip at Qubit Temperature Engineers at the University of Hong Kong have built the first cryogenic control chip that operates at the same temperature as superconducting qubits — 10 millikelvin, or just one-hundredth of a degree above absolute zero — without generating the heat that has forced every competing approach to park its electronics hundreds of meters of cable away. https://www.techtimes.com/articles/318325/20260613/quantum-computing-wiring-bottleneck-cracked-hku-silicon-carbide-chip-qubit-temperature.htm  
    • RevPDF 4.5.0 by Razvan Serea RevPDF is a free, fully offline PDF editor for Windows, macOS, and Linux that lets you edit text and images directly inside PDF files — no internet connection, no account, and no cloud uploads required. Unlike bloated alternatives that demand subscriptions and constant connectivity, RevPDF fits in under 60MB on desktop while delivering a complete editing toolkit: annotate, redact, sign, compress, split, merge, convert, and reorganize pages, all processed locally on your device. Smart font matching ensures edited text blends seamlessly with the original, and multi-language support includes RTL scripts such as Arabic and Hebrew. Where most PDF editors force you to choose between features and simplicity, RevPDF manages both. You can build interactive forms from scratch with text fields, checkboxes, and dropdowns, permanently redact sensitive data before sharing, draw freehand on contracts and diagrams, and add custom watermarks — all without a single file leaving your machine. Edit Text and Images Directly Inside PDFs RevPDF supports true inline PDF editing — not just annotation layers on top of a document, but actual modification of existing text and images within the file. A smart font-matching engine identifies the font used in the original document and applies it automatically when you make edits, so changes blend naturally with the surrounding content. You can reposition elements, resize images, and update text across single pages or entire documents. RevPDF 4.5.0 release notes: This is one of the biggest updates to RevPDF yet. A lot of things people have been asking for are finally here. New Features Auto Redaction Permanently redact sensitive text and areas from your PDFs before sharing. Clean, irreversible, and fully offline. Comments, Links & Bookmarks Add comments for review, insert clickable links, and create bookmarks to jump around long documents without scrolling forever. Find & Replace Search across the whole document and replace text in one go. Long overdue. Split Pages Vertically or Horizontally Split any page down the middle, vertically or horizontally. Perfect for scanned books or double-page spreads. New Drawing Tools More tools for freehand drawing and markup, better for annotations, sketches, and detailed notes. Continuous Scrolling in Editor The editor now scrolls continuously through pages instead of jumping between them. Working through long documents is a lot smoother now. PDF Metadata Editor View and edit the metadata stored inside your PDFs, including title, author, subject, and keywords. Better Font Matching Text edits now blend in more naturally by doing a better job of matching the original font. Tabbed PDF Viewer Open multiple PDFs at once in tabs and switch between them without going back to the home screen. Add Links Insert hyperlinks anywhere in your PDF, to external URLs or to other pages within the document. Share & Print Shortcuts Share or print directly from the editing screen, home screen, and viewer. No extra steps. Minor Updates Paste images directly from clipboard into your PDF New image editing tools for more control over images inside documents Bug Fixes Fixed file saving issues on Windows and Linux Everything still works fully offline. No login, no cloud, no account. Your files stay on your device. Download: RevPDF 4.5.0 | 58.0 MB (Open Source) Links: RevPDF Home Page | Github | Screenshots 1 | 2 Get alerted to all of our Software updates on Twitter at @NeowinSoftware
    • Interesting. I'm not using a VPN with my phone. I tried though my home internet (Rogers) and my cellular internet (Telus) using their respective DNS servers and both trigger the dialog above.
    • Three days after Anthropic launched Claude Fable 5 as the most capable AI model it had ever released to the public, the United States government ordered it switched off — and now the company is refunding customers who paid to use a product that vanished almost overnight https://www.techtimes.com/articles/318342/20260613/us-government-pulls-anthropics-fable-5-offline-now-come-refunds-vanished-ai.htm  
  • Recent Achievements

    • Week One Done
      agatameier earned a badge
      Week One Done
    • One Month Later
      agatameier earned a badge
      One Month Later
    • Week One Done
      ssd21345 earned a badge
      Week One Done
    • Contributor
      MarkHughes4096 went up a rank
      Contributor
    • Dedicated
      jordanspringer earned a badge
      Dedicated
  • Popular Contributors

    1. 1
      +primortal
      507
    2. 2
      +Edouard
      175
    3. 3
      PsYcHoKiLLa
      139
    4. 4
      ATLien_0
      91
    5. 5
      Steven P.
      76
  • Tell a friend

    Love Neowin? Tell a friend!