08.13.09
Eye on Microsoft: Security Synopsis
Summary: Failures and cover-ups (sponsored by Microsoft)
I often point out that Windows is insecure. It’s so insecure, in fact, that I, in all seriousness, propose that ISPs (Internet Service Providers) should start forcing users to secure Windows-since neither users or Microsoft will do the job, Windows PCs should be banned from the Internet. That said, nothing, and I mean nothing is really secure.
[...]
It doesn’t work that way. Security is a process, it’s not a product. Some systems are more secure than others. Linux, as anyone who pays any attention to security news knows, is a lot more secure than Windows. If we were talking cars, Linux would be an Audi A4, the Mac, BMW 330 and Windows would be a mid-70s Ford “Hit here to blow up” Pinto.
• Microsoft: 2 year response to critical 0-day hole (Vista 7 too is suffering from the same symptoms)
It turns out Microsoft has known about the critical security vulnerability in its Office Web Components (OWC), which was fixed last patch day, for more than two years. Only since it has been actively exploited has the behemoth sprung into life and, within a month, released a patch.
• Microsoft IE 8 shines in Web browser security test (emphasis in red is ours)
Microsoft’s Internet Explorer 8 rated tops among five browsers tested by NSS Labs for effectiveness in protecting against malware and phishing attacks—though NSS Labs acknowledges Microsoft paid for the tests.
• Virus arms race primes malware numbers surge
The amount of catalogued malware by Panda was 18 million in the 20 years from the firm’s foundation until the end of 2008. This figure increased 60 per cent in just seven months to reach 30 million by 31 July 2009.
• Twitter briefly knocked offline by hackers (again) (Microsoft Windows is a culprit [1, 2, 3, 4, 5, 6])
Twitter suffered from yet more security jitters on Tuesday night, after another attack left the site briefly unavailable.
• Aussie arrested in botnet allegation (74,000 down, ~319,926,000 to go)
Inspector Blue Knacker of the Adelaide Yard claims that the 20 year old is also suspected of having developed software capable of launching virus attacks on 74,000 computers worldwide.
• [Microsoft Wordpad is Vulnerable, Exploit Available]
