Recommended Posts

Microsoft claims

Windows users running 64-bit versions of the operating system are less likely to get infected by attack code. According to Microsoft's security team said that 64-bit Windows has some of the lowest reported malware infection rates in the first half of 2009.

According to the Microsoft Malware Protection Center 64-bit malware is still exceedingly rare in the wild. Based on data gleened from Microsoft's Malicious Software Removal Tool (MSRC) the 64-bit version of Windows XP was 48 per cent less likely to be infected than the 32-bit edition during the first half of 2009; PCs running Vista 64-bit, meanwhile, were 35 per cent less likely to be infected than Vista 32-bit.

The blog said that that Windows 7 64-bit is the dominant flavor of that new OS as he touted its security. The blog claims that 64-bit Windows was safer by design than the less-powerful 32-bit version, ticking off such measures as PatchGuard, which makes it more difficult for malware to tamper with the operating system's kernel.

source

Link to comment
https://www.neowin.net/forum/topic/846834-windows-64-bit-is-safer/
Share on other sites

Heh. How many people here have EVER encountered PatchGuard? None, I bet.

It's just what redfox says, 64-bit is too fringe for anyone to bother making malware for it. The malware it does have will be of the 32-bit variety that still works because it doesn't mess with any parts of the system that are 64-bit only.

Overall, 64-bit is safer for the same reason Macs and Linux are: number of users.

If I'm going to spend an hour writing code to disable systems, would I rather spend

that hour and effect 1 million systems, or 20 million?

Look at the number of "dangerous" websites. You know what MOST of them have in common? Porn. They either have porn, or just advertise it to get you to the site. Why? Because there's more people searching for porn that anything else. It's all in the numbers of potential victims.

64 bit users arent safer than 32bit users. 32 bit malware still works on 64 bit hardware.

if anything 64 bit users are more at risk as they could be infected with 64bit malware as well as 32bit malware, 32bit users dont have this problem.

Nothing to do with patchguard and the other x64 security features in your highly qualified opinion then... :rolleyes:

64 bit users arent safer than 32bit users. 32 bit malware still works on 64 bit hardware.

if anything 64 bit users are more at risk as they could be infected with 64bit malware as well as 32bit malware, 32bit users dont have this problem.

How much x64-specific malware have you seen?

Overall, 64-bit is safer for the same reason Macs and Linux are: number of users.

Probably not. Most of the APIs, unless you are in kernel mode, is same. So, most malicious applications could still work in Windows x64. IMO, the higer security is probably the handiwork of on-for-all-programs-by-default hardware No Execute, PatchGuard and more randomization for ASLR

Nothing to do with patchguard and the other x64 security features in your highly qualified opinion then... :rolleyes:

I didnt say that & I didnt say my opinion was highly qualified, but thanks.

How much x64-specific malware have you seen?

none. but if there was none at all then the report would be pointless.

Ever had a patchguard crash? I've never heard of anyone who has as a result of malware.

Most malware doesn't try and patch the kernel. Anything that tries to patch system dlls would fail though because they'd be 64 bit as apposed to x86 which is what it would most likely target.

Most malware doesn't try and patch the kernel. Anything that tries to patch system dlls would fail though because they'd be 64 bit as apposed to x86 which is what it would most likely target.

Exactly. PatchGuard isn't very relevant in this context. Not just that, but if some malware for whatever reason wanted to patch the kernel, they could just disable PG first. A piece of malware that just sent the machine into a continuous crash loop would after all not be very useful.

PG primarily stops legitimate software from doing things it shouldn't, and that is its main purpose.

See http://en.wikipedia.org/wiki/Security_and_...ecific_features. The first 2 apply to XP 64 as well. Alas, if only Microsoft had supported XP x64 really well when it came out in April 2005.

It's like this:

- Windows users running the 64bit versions are immune against every kernel mode malware that was designed for 32bit versions of Windows. Why ?

Simply because every kernel level malware that was designed for 32bit versions of Windows rely heavily on modifying the Service Descriptor Table. Modifying the Service Descriptor Table on x64 is no longer possible, not without circumventing the Patch Guard Technology. So, all that malware that was designed for x86 is obsolete on x64.

- Windows users running either 64bit or 32bit versions of Windows are absolutely NOT immune against malware that is designed for x64. Circumventing Patch Guard is very well documented now (the very first public paper on this subject was published on Uninformed by Skape who works for MS now and Skywing, back in 2005), and more malware is being developed for x64 systems, especially that more and more users/enterprises are moving to this architecture.

To sum it up, in a couple years, there will be more malware targeting x64 systems and so this equation will shift.

Overall, 64-bit is safer for the same reason Macs and Linux are: number of users.

If I'm going to spend an hour writing code to disable systems, would I rather spend

that hour and effect 1 million systems, or 20 million?

Look at the number of "dangerous" websites. You know what MOST of them have in common? Porn. They either have porn, or just advertise it to get you to the site. Why? Because there's more people searching for porn that anything else. It's all in the numbers of potential victims.

It doesn't matter if you wrote just for 32-bit, the 32-bit virus code CAN STILL run on a 64-bit system with WOW...in simple terms, you can run a 32-bit app/virus/etc. on 64-bit windows...it doesn't matter. Now, if it's a 64-bit ONLY virus, that's a different story...as for Linux/Mac, I have no experience to comment in that area.

So your argument is null and void for Windows 64-bit systems using AMD64 (not Itanium64 versions).

Nothing to do with patchguard and the other x64 security features in your highly qualified opinion then... :rolleyes:

Haha...eye roll is right.

The comments are almost Picard face-palm worthy.

x64 was designed to be more secure. Why the **** is anyone surprised that MS says it's safer.

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Posts

    • Universal USB Installer 2.0.3.7 by Razvan Serea The Universal USB Installer (UUI) is a powerful bootable USB software tool for creating USB boot drives from ISO files, perfect for installing Linux or Windows, running live systems, or building diagnostic toolkits. This versatile ISO-to-USB software makes it easy to boot from USB and create Live USBs for Linux distributions, Windows setup installers, antivirus tools, and system diagnostic utilities. Whether you need a multisystem Windows Media Creation Tool, a Live USB Linux installer, or an all-in-one PC diagnostic toolkit, UUI offers a reliable and flexible Linux and Windows bootable USB creator. Effortlessly carry your favorite portable operating systems and essential troubleshooting and diagnostic tools on a single flash drive or USB boot stick. Take your preferred Live Linux distributions, Windows installers, recovery software, backup utilities, and diagnostic tools with you, all bootable from a single USB drive. No more juggling multiple USB sticks or complicated bootloaders, UUI consolidates everything into one flexible, multiboot solution. Using this open source USB boot maker software is easy as 123. To create a Linux or Windows bootable USB drive, you simply select your target flash drive, choose your distribution from the list, browse to the ISO file (or choose to download the ISO), and then click Create. Once finished, you should have a ready to run Live USB containing the Live operating system, Windows installation media, or system diagnostics utility, or advanced system cleaner tool you previously selected. Universal USB Installer 2.0.3.7 changelog: Expanded the distro and tool catalog with additional popular Linux ISO entries. Updated: several distro homepage and download links, including Ubuntu Unity, Garuda Linux, Arch Linux, Fedora, Manjaro, and SystemRescue. Fixed: ISOs added via drag and drop (or manually copied to the drive) are now listed in the removal dropdown alongside normally installed distros. Download: Universal USB Installer 2.0.3.7 | 19.4 MB (Open Source) Link: Universal USB Installer Home Page | Screenshot Get alerted to all of our Software updates on Twitter at @NeowinSoftware
    • You are clueless. The updates are done in the background so the next time you open Edge the updates are applied automatically. There is no need to close all your tabs. Just keep browsing like you normally do. Clearly you don't use Edge and are just one of those haters that complain for the sake of complaining.
    • I don't get this David. Can you explain it please.  
    • Microsoft is busy. Lots of changes to be released imminently for Windows server or soon. Also, lots happening for next version as well. Third party virus scanning software is being moved out of Kernel mode to avoid repeat of Crowdstrike incident. Windows Protected Mode and Windows Ready Print no longer require third party print drivers to be installed. New storage stack being developed. New NVME drivers now available for Windows Server 2025 to improve local NVME drive performance by 60+ percent. NVME-Of of fabric being worked on for next release to improve network access to NVME drives. ReFs (next file system) now has ability to boot and will become default file system in next release of Windows Server. ReFs improves on NTFS in several areas including resiliency and reliability and scalability. New update stack is being worked on to unify Windows updates, and updates for drivers and first party/3rd party application software. A stricter and more robust third-party driver certification program (ODI) is being worked on to improve performance, thermals, battery life, and reliability on modern Windows hardware by tightening how OEMs and IHVs (Intel, AMD, Qualcomm, NVIDIA, etc.) build and ship drivers. There is a tone more but too numerous to mention.
  • Recent Achievements

    • Rookie
      Rimplesnort went up a rank
      Rookie
    • One Month Later
      Markus94287 earned a badge
      One Month Later
    • Week One Done
      Markus94287 earned a badge
      Week One Done
    • One Year In
      Markus94287 earned a badge
      One Year In
    • Dedicated
      truespursfan earned a badge
      Dedicated
  • Popular Contributors

    1. 1
      +primortal
      507
    2. 2
      +Edouard
      168
    3. 3
      PsYcHoKiLLa
      154
    4. 4
      ATLien_0
      90
    5. 5
      Steven P.
      79
  • Tell a friend

    Love Neowin? Tell a friend!