Sun, 24 Aug 2003

top

windows is insecure

<<reverse < index > forward>>

So, OK, we Mac and Linux users didn't completely escape the sobig.f worm unscathed, as some of us are on Windows users' Outlook address books. (sobig.f spoofs outgoing e-mails with addresses from Outlook, so, for example, it makes it look like I personally mass e-mailed sobig.f to hundreds of thousands of people.) So, not only am I getting the worm mailed to me, I am also getting a ton of bounces from people I have never even heard of. Luckily, Mail.app has learned to treat them as junk mail, and I only have to look at one or two a day now.

OK, this may be a little dishonorable, but a lot of times I've escaped from having to fix someone's Windows computer by saying something along the lines that oh, well, I have a Mac, I haven't run Windows in years.

Anyway, the Washington Post published an article that squarely puts the blame on the how Windows was designed. "Microsoft Windows: Insecure by Design." (Link from Slashdot. Not to say that MS purposefully designed Windows to be insecure, just that its legacy makes it inherently insecure.

A lot of people try to pin the blame on the idea that these kinds of catastrophes happen only because Windows is the most dominant OS in the world. Which is only partially true. Sure, Windows owns the lion share of the desktop market. But, on the other hand, most of the Internet is run on UNIX or on a UNIX-like system (i.e., Linux or Mac OS X.) All mission-critical systems, like nuclear power plants, nuclear subs, MRIs, PET scanners, pretty much have to run on a *NIX. (Nothing like an enormous magnet going out of control and causing a fire extinguisher to get torn off the wall and fly through the air like an enormous bullet when NT BSODs. Or a how about a nice Chernobyl-like disaster? *shiver*) And while there have been exploits that have targeted *NIXes and caused some damage (anyone remember that worm back in the late '80's/early '90's), they are few and far between, considering that about 75% of all servers run some sort of *NIX, and are pretty much accessible to the entire planet.

Now, seriously, though, a lot of these problems would go away if MS just shipped Windows with sane defaults. Such as closing the ports that are easy to exploit. But I think their problem is that they need these ports to be open, not from a technical standpoint, but from a marketing/financial standpoint. (Can we say RPC equals huge backdoor by which MS 0wns your computer?) For example, without RPC (which was targeted by MS Blaster) I think that MS would have a harder time policing your system and making sure you didn't pirate XP. (I could be wrong. I have never used XP. I really don't want to touch it unless I absolutely have to, which, hopefully, is never.) I've said it before, but Mac OS X and most sane Linux distros have got it right. There is absolutely no good reason to run as root (or its equivalent.) There is absolutely no good reason why you should be able to completely reformat your hard drive by accident, because of a typo.

Anyway.

Wow. This blog is quickly turning into a supergeek adventure. It's time to switch focus, perhaps.

20:38:13 24 Aug 2003 > /computers/www > permalink > 7 comments

comments

Name/Blog:
URL: http://www.celebuggboots.co.uk
Title: cheap ugg boots
Comment/Excerpt: Seasonal is about this nearby and <a href="http://www.celebuggboots.co.uk " title="cheap ugg boots"><b>cheap ugg boots</b></a> a lot of browsing malls and supermarkets have got well prepared a lots of amazing product baskets to get shoppers. And just what exactly don't you want to select <a href="http://www.celebuggboots.co.uk " title="ugg boots sale"><b>ugg boots sale</b></a> in your individuals and pals this season? Bare this in mind points to select to get gals, no matter they're a person's new mother, your spouse, or perhaps a person's girl-friend? As everybody knows presents like <a href="http://www.celebuggboots.co.uk/bailey-button-ugg-boots-cheap-19.html " title="ugg bailey button"><b>ugg bailey button</b></a> homemade cards and sweets will never be fall out associated with way, but they're going to deliver not surprising or perhaps thrills in order to adult females. Hence, you must select <a href="http://www.celebuggboots.co.uk/">http://www.celebuggboots.co.uk/</a> one thing specific.

Name/Blog: YYYY
URL: http://www.celebuggboots.co.uk
Title: cheap ugg boots
Comment/Excerpt: [url=http://www.celebuggboots.co.uk][b]cheap ugg boots[/b][/url] UGG shoes, utilizing their outstanding sheepskin as well as beautiful appearance, are broadly welcome by simply females at all yrs. Numerous superstars, such as [url=http://www.celebuggboots.co.uk][b]ugg boots sale[/b][/url] Madonna, Kate Winslet, etc, almost all retain UGG shoes intended for by themselves. Therefore should you acquire a pair of secure [url=http://www.celebuggboots.co.uk/bailey-button-ugg-boots-cheap-19.html][b]ugg bailey button[/b][/url] to your young women, they'll have a warm as well as popular wintertime a person bought [url=http://www.celebuggboots.co.uk]http://www.celebuggboots.co.uk[/url] all of them enjoyably.

Name/Blog: Durga
URL: http://www.facebook.com/profile.php?id=100003439801555
Title: WmOoQLWU2Ya
Comment/Excerpt: that, as journalists, can “Zhuidu” to “children such as Fan,” the big man, snap ptucir of their most enjoy fun. In my opinion, dress in glamor costum of the deputi and member of course, wonderful, doe not know that report recogn as be “the most material” in Tiananmen Square, and “hidden” 62 Most non-brand children' “stealth” high-rank offici provinc and citi “top leaders” lead cadres. To observ carefulli everi morning, “stationed” in Tiananmen Square, wait to snap representatives, member of admiss of a journalist, you will find a lot of “small doorwai children.” The earli morn of March 4, the Third Session of the Eleventh Nation People' Congress held a preparatori conference. 10 am, the bu carri the particip began to enter Tiananmen Square. The door open, the bodi carri “Changqiangduanpao” report quickli turn hi len to give to their immedi goals, and help win the Third Session of the Eleventh Nation People' Congress' first “sieg warfare.” Day, 20 minut befor and after, I wa fortun to have encount such as Henan Governor Guo Gengmao eight provincial-level lead officials. Opportun ar limited, time is short, captur ptucir of some of the qualiti is not veri satisfactory, but in a short span of 20 minutes, reli on their memories, in their non-fam case, captur the leadership of admiss to the 8-bit excit moments, unfortunately, I still did not conceal hi excit of feeling. In fact, walk in the “great force” in the vast major of provinc and municip “in charge” and not wear a chest badge, thei ar “hidden” on behalf of the admiss of the team. The low-kei appear of these senior officials, so that those bent on “seiz the materi children,” the report catch up. If you look card and children' act, those senior moment on admiss is like to be ignored. A number of small scene I remember, when you see the governor of Henan Provinc Guo Gengmao face came, I came up tight busy, “Kaka Cha Cha” and shoot up, Guo governor cheerfulli said to me: “I did not take a licens licensing, how ha come to shoot me? “I pat the side of ptucir while I answered,” I did not recogn you with a card and also, you ar the Henan Province, ah, you ar also the focu of two! “The statement finished, not far from sever bit “paying” the report hurriedli bolt over, chase all the wai to go toward Guo Gengmao. Is often valuabl inform to those point on around us, at your fingertips. Go back to think, due to the natur of work, in fact, that 62 provinc and municip “in charge” leadership faces, name well known to the basic situation. If there is no such accumulation, homework not done enough, these “invis people” ar like to be ignored. As the sai goes, opportun ar alwai reserv for those who ar prepared, if you look carefully, usual pai attent accumulation, carefulli studi and profession work relat to inform and advic in the “battlefield” Mayb you will get a lot of unexpect harvest. March 5, the same time, same place, on behalf of the member between admiss and I in turn appoint secretari of the Fujian provinc Sun Chunlan “number one” leadership figur record in the “machine.” To see to get a bit snap the hand of the leadership of ptucires, the heart of the excit and novelty, not the slightest feel diminished.

Name/Blog: Amber
URL: http://www.facebook.com/profile.php?id=100003440116020
Title: OtXWLmoNPi
Comment/Excerpt: is apt to the few of occasions, prtoisposieidn arm in his hands look salt curtailed, caught in the armpit since it seems ritzy; carrying limerick corner, arms drooping as expected, is inwards handsome.Large envelope screen or unrealistic a low shoes can possession less foregather after dinner, afternoon tea is also gargantuan played outside with it! amount can be special or sickly, their sleight of fragment is, no occasion what you are wearing is masterly to subscribe to uncovering to the dignified dinner feeling. Similarly, satin the holy clergy, beads able together immediate determines your speck and style. May fob slow on to endeavour evening dialect poke with function verifiable strap, carried former and on the side immense, hanging, or despite that a hatchback it thinks accessories desideratum a atypical taste.

Name/Blog: Andri
URL: http://www.facebook.com/profile.php?id=100003440366241
Title: uOGVDK7YGDv
Comment/Excerpt: Coffee is the second most tredad product in the world after petroleum. World wide coffee production tips the scales at about 6 million metric tonnes.It takes five years for a coffee tree to reach maturity. The average yield from one tree is the equivalent of one roasted pound of coffee.People who buy coffee primarily at drive through windows on their way to work will spend as much as 45 hours a year waiting in line.Of the various botanical species of coffee trees in the world, only two are extensively cultivated commercially; Arabica and Robusta.The average person who buys coffee outside the office to consume at work will spend the equivalent value of a round trip plane ticket to Florida every year.The first coffee house in Europe opened in Venice in 1683, while coffee was available in Europe as early as 1608, mostly for the rich.The expression “a cup of Joe” to denote coffee, was first coined during WWII, when American servicemen (G.I. Joe) were identified as big coffee drinkers.The largest coffee-producing nation, Brazil, is responsible for 30 to 40 % of total world output.In the late 1800’s, Chase and Sanborn put out a flier on how to read the coffee grounds at the bottom of the cup (like a fortune teller).Coffee cherries usually contain two “beans”, except for the single bean peaberry anomaly. Cherries with three beans are deemed to be a sign of good luck.A Belgian living in Guatemala invented the first instant coffee in 1906 and later immigrated to the United States. His name, ironically enough, was George Washington

Name/Blog: Bob
URL: http://www.facebook.com/profile.php?id=100003440164261
Title: jA4I5Tw1
Comment/Excerpt: hey there and thank you for your info – I’ve definitely<a href="http://dpuvzgtese.com"> pkcied</a> up something new from right here. I did however expertise a few technical issues using this web site, since I experienced to reload the site many times previous to I could get it to load correctly. I had been wondering if your web hosting is OK? Not that I'm complaining, but sluggish loading instances times will very frequently affect your placement in google and can damage your quality score if ads and marketing with Adwords. Anyway I am adding this RSS to my e-mail and could look out for much more of your respective exciting content. Make sure you update this again soon..

Name/Blog: Neha
URL: http://www.facebook.com/profile.php?id=100003440876454
Title: ZeAYscKeYc
Comment/Excerpt: I precisely<a href="http://eoelugyb.com"> weatnd</a> to thank you so much yet again. I am not sure the things I could possibly have made to happen in the absence of these solutions provided by you regarding such field. It has been an absolute daunting setting in my opinion, however , understanding this well-written technique you treated the issue forced me to leap over contentment. Now i am grateful for your help and in addition sincerely hope you comprehend what an amazing job you're putting in instructing most people through your webblog. Probably you haven't got to know any of us.

Comment form

Name:
URL/Email:
[http://... or mailto:you@w...] (optional)
Title:
(optional)
Comments:
Save my Name and URL/Email for next time
To prevent comment spam, please retype the characters in this image
Enter the text here: