05.20.10

Disable Aero in Vista 7

Posted in Microsoft, Security, Vista 7, Windows at 5:36 am by Dr. Roy Schestowitz

Aero

Summary: Resource-hungry visual effects become a security threat to Windows

YET another security problem is found in Vista 7, which begs for the question, “how on Earth does the GUI/presentation layer pose a risk to the entire operating system?”

Microsoft on Tuesday warned users of a vulnerability in 64-bit versions of Windows 7 and Windows Server 2008 R2 that could expose users to malware attacks.

[...]

Bryant said a patch would be forthcoming, but didn’t say when. In the meantime, users can prevent attacks by disabling the Windows Aero Theme. To turn it off, choose Start > Control Panel and click on Appearance and Personalization. Then click on Change the Theme. Then select one of the Basic and High Contrast Themes.

Vista 7 — like its predecessors — is not secure. Also see:

Did anyone really think that Vista 7 would improve security? Some say that Vista 7 is less secure than Vista. What’s even more perplexing:

People who paid for Vista do not feel they should pay again for “7″. Folks who sell defective cars should expect no more custom. Consumers may find “7″ acceptable but business wants to be free of the burden of that other OS. Some businesses and organizations will go with “7″ as the line of least resistance but GNU/Linux really looks good to users and administrators who have kept XP going for years. My users are asking for something fast that runs on our hardware. “7″ is not happening. We even were given some brand new machines with 3gB RAM, and, to my surprise, find they shipped with XP… That says something about this notion that customers are demanding “7″. Why would an OEM ship us XP if that were the case?

Best of Windows is not the best operating system.

Share in other sites/networks: These icons link to social bookmarking sites where readers can share and discover new web pages.
  • Reddit
  • email

This post is also available in Gemini over at:

gemini://gemini.techrights.org/2010/05/20/aero-as-security-threat/

If you liked this post, consider subscribing to the RSS feed or join us now at the IRC channels.

Pages that cross-reference this one

14 Comments

  1. your_friend said,

    May 20, 2010 at 12:57 pm

    Gravatar

    Vista 7 is pretty? It’s one of the ugliest and least efficient interfaces inflicted on users. Virtual desktops are still rudimentary and the flip view is useless for anything but advertising to the ignorant. Microsoft’s ribbon interface is a confusing change for prior users that wastes screen space in the more limited direction of most LCDs, forcing people to bow their heads and scroll a lot. The looks themselves are a step backwards from previous less cluttered versions of Windows. The proportions are even worse, being more complicated and less coherent than others that were forced by technical limitations. The overall result is something that is more cluttered and bewildering than the electronic games section of a casino but twice as crass.

  2. Yuhong Bao said,

    May 20, 2010 at 8:08 pm

    Gravatar

    “Vista 7 — like its predecessors — is not secure. Also see:”
    I already rebut some of them, particularly bad is the “Vista 7 Security “Cannot be Fixed. It’s a Design Problem.”” one (see the IRC logs).

    your_friend Reply:

    A dozen cases of complete failure can be rebutted? After 25 years of the worst kinds of software insecurity you still think Windows can be used for anything but non networked games or toys? What amazing faith you have.

    Yuhong Bao Reply:

    I was rebutting the evidence used. See old IRC logs.

    Dr. Roy Schestowitz Reply:

    Microsoft will need to rebuild Windows. It still lacks security features that are found in UNIX/Linux.

    Marketing hype campaigns about “security” and UAC restrictions are not enough.

    Yuhong Bao Reply:

    It still lacks security features that are found in UNIX/Linux.
    What features? UAC is a pretty close clone of sudo, for example.

    Dr. Roy Schestowitz Reply:

    Repositories for starters. I can’t give you a complete list right now. See http://www.theregister.co.uk/2004/10/22/linux_v_windows_security/

    Yuhong Bao Reply:

    Yea, I have read this. Let me try to rebut some of them. The first one “Windows has only recently evolved from a single-user design to a multi-user model” is just plainly not true. NT has existed since 1993, even before Windows 95! On RPC, I know (I have seen Blaster, for example), but that is not easy to change even if Windows is rewritten since it is a network protocol, for God’s sake. And yes MS has been trying to make Windows more modular, see Windows Server 2008, for example, which was released after the article.

    Yuhong Bao Reply:

    Now 95 indeed ended up more popular than NT, which led to for example a lot of Win32 applications written without the NT security model in mind.

    Dr. Roy Schestowitz Reply:

    Yea, I have read this. Let me try to rebut some of them. The first one “Windows has only recently evolved from a single-user design to a multi-user model” is just plainly not true. NT has existed since 1993, even before Windows 95! On RPC, I know (I have seen Blaster, for example), but that is not easy to change even if Windows is rewritten since it is a network protocol, for God’s sake. And yes MS has been trying to make Windows more modular, see Windows Server 2008, for example, which was released after the article.

    Please provide me with proof that it’s more modular. Microsoft patented a modular O/S, but it does not mean this was properly implemented (or that Microsoft invented it).

    Now 95 indeed ended up more popular than NT, which led to for example a lot of Win32 applications written without the NT security model in mind.

    The article is not from early NT days. It’s just several years old. I think you are nitpicking.

    Yuhong Bao Reply:

    Please provide me with proof that it’s more modular. Microsoft patented a modular O/S, but it does not mean this was properly implemented (or that Microsoft invented it).
    Windows Server 2008, with it’s Server Core support, should be proof that MS is at least trying to make it more modular.

    Dr. Roy Schestowitz Reply:

    Please provide me with proof that it’s more modular. Microsoft patented a modular O/S, but it does not mean this was properly implemented (or that Microsoft invented it).

    Windows Server 2008, with it’s Server Core support, should be proof that MS is at least trying to make it more modular.

    Trying. It’s still not there. For a truly modular architecture see how Linux/GNU/X can be decoupled.

  3. Yuhong Bao said,

    May 21, 2010 at 3:51 pm

    Gravatar

    “The article is not from early NT days. It’s just several years old. ”
    Which only makes the claim that “Windows has only recently evolved from a single-user design to a multi-user model” even less true. NT has existed for more than a decade by then.

    Dr. Roy Schestowitz Reply:

    That’s just a distraction really. It’s not the ‘meat’ of the article.

What Else is New


  1. All EPO Articles Are Available Over Gemini Protocol

    For lighter and more privacy-preserving access to Techrights use the Gemini capsule instead of the Web site



  2. Judge and JURI

    The Committee on Legal Affairs, a.k.a JURI, meets the EPO tomorrow (in 24 hours); will abuses by António Campinos and Benoît Battistelli be brought up?



  3. EPOLeaks on Misleading the Bundestag -- Part 13: The Failed Promise of a “Good Governance” Guru…

    Before becoming an absent-minded Vice-President of António Campinos Christoph Ernst was posing as the very opposite of what he would become



  4. Gemini Gateways for IPFS

    The World Wide Web is fine for a lot of things, but for controversial publications and publications that invoke the 'wrath' of corporations/states/plutocracy we must look beyond the traditional protocols, choosing decentralised means and self-hosted means of publication (instead or at the very least in conjunction)



  5. Challenging Times for EPO Management

    A discussion of the status quo at Europe's second-largest (but scarcely-understood) institution, subjected to a JURI hearing tomorrow afternoon



  6. “The Fighters of Freedom”

    Some anime fans have made this video about recent events



  7. IRC Proceedings: Saturday, April 10, 2021

    IRC logs for Saturday, April 10, 2021



  8. [Meme] Bundestagate Series Spoiler

    The chain of command/s at the EPO typically leads to major tragedy



  9. Breaking News: Campinos to Appear Before the Legals Affairs Committee of the European Parliament on Monday 12 April

    "Some MEPs have been briefed about ongoing governance deficits at the EPO, in particular the lack of GDPR compliance and the sell-out of "digital sovereignty" to Microsoft, but it remains to be seen whether or not they will dare to bring these issues up during the hearing."



  10. Pro-FSF Petition (“An Open Letter in Support of Richard Matthew Stallman Being Reinstated by the Free Software Foundation”) Tops 6,200 Signatures

    Monopolies and their media, along with their NGOs, have spoken and incited based on falsehoods; people now respond so the hate letter has a real crisis



  11. Links 10/4/2021: osbuild 28, KDE Frameworks 5.81.0

    Links for the day



  12. EPOLeaks on Misleading the Bundestag -- Part 12: A Worthy Successor to His Mentor?

    We examine the role of Christoph Ernst in EPO management, both in the Benoît Battistelli era and the António Campinos era (plenty to hide)



  13. USPTO for Monopolies, Keeping GNU/Linux in the Dark

    Growing evidence of gross discrimination against GNU/Linux (or Free software, even BSD/UNIX) users at the USPTO is too hard to ignore; some people out there challenge the Office over this travesty



  14. Accessibility and Availability First

    To make Techrights more widely accessible and more difficult to block/censor we've been making further changes, including self-hosting where possible



  15. Self-Hosting Videos With Free Formats and Animated Previews, Watermarks/Logos and Translucency

    We examine the power of video editing with ffmpeg, chained with command-line scripting and HTML5 features



  16. Links 10/4/2021: Linux on M1, Wine 6.6, ClamAV 0.103.2

    Links for the day



  17. Lunduke: On Mob Justice in the Tech Industry

    A new video from the former Microsofter who fears the phenomenon that’s adopted by companies like IBM



  18. IRC Proceedings: Friday, April 09, 2021

    IRC logs for Friday, April 09, 2021



  19. EPOLeaks on Misleading the Bundestag — Appendix (Benoît Battistelli's Vichy Syndrome): Georges Henri Léon Battistelli and Charles Robert Battistelli

    Local copies with evidence of or something concrete about Benoît Battistelli’s connection to unsavoury — and by today’s standards outright fascistic — politics



  20. IBM Doubles Down on Masters Being an Acceptable Word in the Context of Technology

    3 days after this post which disproves IBM's stance or shows its double standards it once again says “Masters” in its official blog (won’t that offend and alienate some people as they insist?)



  21. Hate Letter Against Richard Matthew Stallman (RMS) Backfired So Spectacularly That Signers Asked to Revoke Their Own Signatures and the List Was Then Frozen Permanently (Updated)

    "An open letter in support of Richard Matthew Stallman being reinstated by the Free Software Foundation" tops 6,100 signatures (graph generated just moments ago)



  22. EPOLeaks on Misleading the Bundestag -- Part 11: The BMJV's Tweedledee: Dr Christoph Ernst

    The right-hand man of António Campinos plays a role similar to that of Herr Lutz before him



  23. Links 9/4/2021: Tanglet 1.6.0 and HPVM 1.0

    Links for the day



  24. The Libel Against Richard Stallman Did Not Age Well

    Almost 2 years down the line libel about the founder of the FSF remains online, uncorrected (in sites funded by Microsoft and IBM)



  25. The Letter in Support of the FSF and Richard Stallman is Backed by the International Community, Not American Monopolies and Nationalistic Elements

    Free software is for everybody to use, internationally, it is not the asset of a bunch of current and old monopolists (connected to the US military) that also control the media; the nature of the signatures says that out loud



  26. Gemini Over IPFS (Decentralised Web, Accessed Over Gemini Protocol)

    The Gemini protocol (gemini://) can already be used to fetch (at the back end) and present objects from a P2P-like network; we're currently exploring practical use cases and possibilities



  27. News Sites That Talk About Patents Have Become Shameless Self-Promotion 'Plugs' by Law Firms (and Sometimes Outright 'Spam' for Litigation)

    The sources of news about patent affairs have dried up; sites that actually used to investigate and report facts have since then shut down or defected to the Public Relations/marketing industry



  28. Links 9/4/2021: Kubernetes 1.21 and FFmpeg 4.4 Released

    Links for the day



  29. IRC Proceedings: Thursday, April 08, 2021

    IRC logs for Thursday, April 08, 2021



  30. [Meme] Self-styled Judges

    To suit a recurring theme at the EPO we hereby present Roland Lutz, a self-styled judge


RSS 64x64RSS Feed: subscribe to the RSS feed for regular updates

Home iconSite Wiki: You can improve this site by helping the extension of the site's content

Home iconSite Home: Background about the site and some key features in the front page

Chat iconIRC Channel: Come and chat with us in real time

Recent Posts