iGuilty before charged

Summary: Microsoft is still spinning and lying to the press, whereas Apple ensures that it has 100% control over the user

THIS month has been an horrific one for Windows security, potentially breaking records. Over at IDG there's some Microsoft spin about Vista changing things for the better. Well, it doesn't explain why Vista and Vista 7 are still so damn vulnerable. To give some examples of serious Vista 7 vulnerabilities (it has been less than a year since the official release):

• Vista 7 Cracked Again
• Trend Micro: Vista 7 Less Secure Than Vista
• Vista 7 Less Secure Than Predecessors? Remote BSoD Now Possible!
• Cybercrime Rises and Vista 7 is Already Open to Hijackers
• Vista 7: Broken Apart Before Arrival
• Department of Homeland Security 'Poisoned' by Microsoft; Vista 7 is Open to Hijackers Again
• Vista 7 Security “Cannot be Fixed. It's a Design Problem.”
• Why Vista 7 Could be the Least Secure Operating System Ever
• Journalists Suggest Banning Windows, Maybe Suing Microsoft Over DDoS Attacks
• Vista 7 Vulnerable to Latest “Critical” Flaws
• Vista 7 Seemingly Affected by Several More “Critical” Flaws This Month
• Reason #1 to Avoid Vista 7: Insecurity
• Vista 7 Left Hijackable Again (Almost a Monthly Recurrence)
• Out-of-Cycle Patches for Vista 7 (Not Stable), Security Issues Noted by Google
• Microsoft Lied About Vista for Several Years and It is Now Lying About Vista 7

According to this new article from The Register, Zeus continues to cause a lot of Windows trouble this month [1, 2, 3].

More details have emerged of how security researchers tracked down a Zeus-based botnet that raided more than $1m from 3,000 compromised UK online banking accounts.

Bradley Anstis, vice president of technical strategy for M86 Security which discovered the attack, said hackers began the assault by loading compromised third-party sites with a battery of exploits designed to infect visiting PCs with variants of the Zeus banking Trojan.

The Register also writes about Apple flaws which Apple finally fixes (it took a while), but Apple also issues a patch that attacks the customer: [via]

iOS4.0.2 plugs the security hole exploited by the iPhone Dev Team to allow pain-free jailbreaking of the iPhone 4 and its manifold siblings as well as... actually, that's about it.

Apple's 'control freak' problem is one that may also extend beyond computing and into culture. Steve Jobs himself has infamous vested interests in the funding sources of MPAA|RIAA, which makes Apple doubly worrisome and also a direct threat to Linux. ⬆