<?xml version="1.0" encoding="UTF-8"?><!-- generator="wordpress/2.3.3" -->
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	>
<channel>
	<title>Comments on: The end of Windows, or a security expert gives up</title>
	<link>http://wolfgang.lonien.de/?p=456</link>
	<description></description>
	<pubDate>Thu, 09 Sep 2010 12:37:47 +0000</pubDate>
	<generator>http://wordpress.org/?v=2.3.3</generator>
		<item>
		<title>By: Wolfgang</title>
		<link>http://wolfgang.lonien.de/?p=456#comment-56841</link>
		<dc:creator>Wolfgang</dc:creator>
		<pubDate>Mon, 08 Oct 2007 11:41:36 +0000</pubDate>
		<guid>http://wolfgang.lonien.de/?p=456#comment-56841</guid>
		<description>Sigh... I'm sick and tired of explaining it again and again, and way too lazy sometimes.

Look at the server market for instance, where Microsoft doesn't even have 35 or so percent. If all these other systems were designed as weak as that M$ crap, then we would have a hell of a scary place already - or a heaven for haxxors.

Of course a clueless person could turn his or her Linux box into something which could be attacked. Possible, yes.

But remember when my sysadmin colleague and I put two boxes onto the internet without a firewall and such? We actually created a honeypot, because we were monitoring what's going on, and: &lt;strong&gt;The Windows box was 0wned within less than 2 minutes.&lt;/strong&gt; I guess now it would take seconds to become infected.

That is what I call "bad by design". Take that and the first user comment on that Technocrat posting, which shows that Bill is washing his hands in innocence with an EULA like: "Whatever you do, we are not responsible if our systems break", and there are reasons why I say that Windows is inferior compared to other systems, if not dangerous.

A couple more opinions? How about one from Bill himself? He is quoted by &lt;a href="http://lists.ffii.org/pipermail/news/2002-April/000092.html" rel="nofollow"&gt;Alexander Stohr&lt;/a&gt;.

Or read what two years ago Microsoft said about &lt;a href="http://it.slashdot.org/article.pl?sid=05/04/28/1237249&#038;threshold=4&#038;tid=109&#038;tid=201&#038;tid=218" rel="nofollow"&gt;their implementation of TCP/IP&lt;/a&gt;, answering to nmap's author Fyodor. As always, read the readers' comments as well.

There are so many places that I really cannot count and cite them all here. Just search the internet for topics like "bad by design" and such - that could be an eye-opener.

Oh, and that server market I mentioned above is far more attractice to hackers than your home-based Windoze machine - these servers have lots more bandwidth than you, right?</description>
		<content:encoded><![CDATA[<p>Sigh&#8230; I&#8217;m sick and tired of explaining it again and again, and way too lazy sometimes.</p>
<p>Look at the server market for instance, where Microsoft doesn&#8217;t even have 35 or so percent. If all these other systems were designed as weak as that M$ crap, then we would have a hell of a scary place already - or a heaven for haxxors.</p>
<p>Of course a clueless person could turn his or her Linux box into something which could be attacked. Possible, yes.</p>
<p>But remember when my sysadmin colleague and I put two boxes onto the internet without a firewall and such? We actually created a honeypot, because we were monitoring what&#8217;s going on, and: <strong>The Windows box was 0wned within less than 2 minutes.</strong> I guess now it would take seconds to become infected.</p>
<p>That is what I call &#8220;bad by design&#8221;. Take that and the first user comment on that Technocrat posting, which shows that Bill is washing his hands in innocence with an EULA like: &#8220;Whatever you do, we are not responsible if our systems break&#8221;, and there are reasons why I say that Windows is inferior compared to other systems, if not dangerous.</p>
<p>A couple more opinions? How about one from Bill himself? He is quoted by <a href="http://lists.ffii.org/pipermail/news/2002-April/000092.html" rel="nofollow">Alexander Stohr</a>.</p>
<p>Or read what two years ago Microsoft said about <a href="http://it.slashdot.org/article.pl?sid=05/04/28/1237249&#038;threshold=4&#038;tid=109&#038;tid=201&#038;tid=218" rel="nofollow">their implementation of TCP/IP</a>, answering to nmap&#8217;s author Fyodor. As always, read the readers&#8217; comments as well.</p>
<p>There are so many places that I really cannot count and cite them all here. Just search the internet for topics like &#8220;bad by design&#8221; and such - that could be an eye-opener.</p>
<p>Oh, and that server market I mentioned above is far more attractice to hackers than your home-based Windoze machine - these servers have lots more bandwidth than you, right?</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: sparta</title>
		<link>http://wolfgang.lonien.de/?p=456#comment-56822</link>
		<dc:creator>sparta</dc:creator>
		<pubDate>Mon, 08 Oct 2007 06:18:27 +0000</pubDate>
		<guid>http://wolfgang.lonien.de/?p=456#comment-56822</guid>
		<description>&#62; No, it’s *not* the market share. I heat that argument over and over 
&#62; again, but in this case it’s really a question of bad design.

Any discussion is at an end when statements like 'is is as I say' replace arguments. It becomes a dogmatic slanging match, when 'the truth' is invoked.

I rest my case.</description>
		<content:encoded><![CDATA[<p>&gt; No, it’s *not* the market share. I heat that argument over and over<br />
&gt; again, but in this case it’s really a question of bad design.</p>
<p>Any discussion is at an end when statements like &#8216;is is as I say&#8217; replace arguments. It becomes a dogmatic slanging match, when &#8216;the truth&#8217; is invoked.</p>
<p>I rest my case.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: wjl</title>
		<link>http://wolfgang.lonien.de/?p=456#comment-56796</link>
		<dc:creator>wjl</dc:creator>
		<pubDate>Sun, 07 Oct 2007 21:14:04 +0000</pubDate>
		<guid>http://wolfgang.lonien.de/?p=456#comment-56796</guid>
		<description>No, it's *not* the market share. I heat that argument over and over again, but in this case it's really a question of bad design.

Plus the "enthusiasm of Linux and Mac users" is not enough to solve it - people need to get the idea that one day they might be *responsible* for what they do or don't. I just put another link to the article above, which has some good arguments from readers about if/how we need full-blown computers anyway, or if something like &lt;a href="http://www.zonbu.com/home/index.htm" rel="nofollow"&gt;this&lt;/a&gt;, together with rented online storage, wouldn't be much better for most of us.

Please don't repeat that old "market share song" - it's simply not true.</description>
		<content:encoded><![CDATA[<p>No, it&#8217;s *not* the market share. I heat that argument over and over again, but in this case it&#8217;s really a question of bad design.</p>
<p>Plus the &#8220;enthusiasm of Linux and Mac users&#8221; is not enough to solve it - people need to get the idea that one day they might be *responsible* for what they do or don&#8217;t. I just put another link to the article above, which has some good arguments from readers about if/how we need full-blown computers anyway, or if something like <a href="http://www.zonbu.com/home/index.htm" rel="nofollow">this</a>, together with rented online storage, wouldn&#8217;t be much better for most of us.</p>
<p>Please don&#8217;t repeat that old &#8220;market share song&#8221; - it&#8217;s simply not true.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: sparta</title>
		<link>http://wolfgang.lonien.de/?p=456#comment-56702</link>
		<dc:creator>sparta</dc:creator>
		<pubDate>Sat, 06 Oct 2007 07:00:16 +0000</pubDate>
		<guid>http://wolfgang.lonien.de/?p=456#comment-56702</guid>
		<description>Well, thanks anyway for the "bigger picture"-allegation *gg* 
I do well see it, having enough experience in the own family and having worked with Windows PCs in some companies.

In business terms as a sysadmin you have completely different means: May the people want to click on everything, when "everything" is not there, you cannot click on it...

The problem is not Windows, the market-share of Windows is the "problem". Hackers and criminals go well for the big picture and are not interested in Linux or Mac systems, since they would not gain recognition from doing harm to a (in worldwide terms) just a few machines...

I fully understand the enthusiasm of Linux or Mac users, however, it is a bit pathetic to claim 'the end of Windows', while this system enjoys a comfortable market share and will stay with us for a damn long time, whether we like it or not...

Cheers
sparta</description>
		<content:encoded><![CDATA[<p>Well, thanks anyway for the &#8220;bigger picture&#8221;-allegation *gg*<br />
I do well see it, having enough experience in the own family and having worked with Windows PCs in some companies.</p>
<p>In business terms as a sysadmin you have completely different means: May the people want to click on everything, when &#8220;everything&#8221; is not there, you cannot click on it&#8230;</p>
<p>The problem is not Windows, the market-share of Windows is the &#8220;problem&#8221;. Hackers and criminals go well for the big picture and are not interested in Linux or Mac systems, since they would not gain recognition from doing harm to a (in worldwide terms) just a few machines&#8230;</p>
<p>I fully understand the enthusiasm of Linux or Mac users, however, it is a bit pathetic to claim &#8216;the end of Windows&#8217;, while this system enjoys a comfortable market share and will stay with us for a damn long time, whether we like it or not&#8230;</p>
<p>Cheers<br />
sparta</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Wolfgang</title>
		<link>http://wolfgang.lonien.de/?p=456#comment-56646</link>
		<dc:creator>Wolfgang</dc:creator>
		<pubDate>Fri, 05 Oct 2007 13:50:52 +0000</pubDate>
		<guid>http://wolfgang.lonien.de/?p=456#comment-56646</guid>
		<description>That's ok if you see only your own machine, and I know you are intelligent enough to not click on any unknown things.

But it is so that the spammers and other "bad boys" are constantly getting better. They send mails which really seem to be interesting, so you do have to do a lot of research before even opening them (in Outlook, a preview can be enough to become infected).

For me, I saw no reason anymore to protect the use of a not-so-secure system against reasons other than "but I'm used to it". I made the switch years ago, and tho it was a bit weird for Mitchie at the beginning, she now also doesn't look back.

If you see "the bigger picture", and not only your own 2-3 PCs, then things become more complicated. As Bruce says in his article, people *do* click on everything; you simply cannot prevent that. And with that system from Redmond, and from a sysadmin's point of view, this is simply a nightmare.

Only solution if you *have to* use that system further: virtualize it - at least you get backups of your complete systems within a reasonable time. Or run it remotely on a Xen or VMware ESX machine. That works pretty well from my own experience.</description>
		<content:encoded><![CDATA[<p>That&#8217;s ok if you see only your own machine, and I know you are intelligent enough to not click on any unknown things.</p>
<p>But it is so that the spammers and other &#8220;bad boys&#8221; are constantly getting better. They send mails which really seem to be interesting, so you do have to do a lot of research before even opening them (in Outlook, a preview can be enough to become infected).</p>
<p>For me, I saw no reason anymore to protect the use of a not-so-secure system against reasons other than &#8220;but I&#8217;m used to it&#8221;. I made the switch years ago, and tho it was a bit weird for Mitchie at the beginning, she now also doesn&#8217;t look back.</p>
<p>If you see &#8220;the bigger picture&#8221;, and not only your own 2-3 PCs, then things become more complicated. As Bruce says in his article, people *do* click on everything; you simply cannot prevent that. And with that system from Redmond, and from a sysadmin&#8217;s point of view, this is simply a nightmare.</p>
<p>Only solution if you *have to* use that system further: virtualize it - at least you get backups of your complete systems within a reasonable time. Or run it remotely on a Xen or VMware ESX machine. That works pretty well from my own experience.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: sparta</title>
		<link>http://wolfgang.lonien.de/?p=456#comment-56633</link>
		<dc:creator>sparta</dc:creator>
		<pubDate>Fri, 05 Oct 2007 10:39:48 +0000</pubDate>
		<guid>http://wolfgang.lonien.de/?p=456#comment-56633</guid>
		<description>Don't open attachments from unknown sources.

That's all.

Cheers
sparta, immune to hysteria ;-)</description>
		<content:encoded><![CDATA[<p>Don&#8217;t open attachments from unknown sources.</p>
<p>That&#8217;s all.</p>
<p>Cheers<br />
sparta, immune to hysteria <img src='http://wolfgang.lonien.de/wp-includes/images/smilies/icon_wink.gif' alt=';-)' class='wp-smiley' /></p>
]]></content:encoded>
	</item>
</channel>
</rss>
