Vista is a dud IMHO

[Edward Ray]

I see little improvment secuirty wise over XP SP2. I this is the best
Microsoft can do they deserve to lose some market share.

 

[deebs]

How's about we earmark this post, flag as returnable one year hence and
see if the prediction holds in the real world?

 

[Hal9000]

If they do more, customers will complain about being too limited.
I think vista has made great improvements security-wise.
If you would have read the reviews, the technical documents and tried
yourself seriously you would know...
hal

<DIV>&quot;Edward Ray&quot; &lt;[email protected]&gt; wrote in message

 

[MICHAEL]

Please, elaborate as to the tests you have preformed
in reaching such an enlightened opinion.

-Michael

 

[Peter M]

yeah but he's got a lot of acronyms under his name. As my grandfather used
to say "if they spout a lot of titles and no facts they have more BS than a
herd of cows".

 

[deebs]

There are some points though.

The "in yer face" UAC/UAP

I am sure this is satisfying many people but whether those people are
front line users or not remains to be seen.

I am sure most user like security of UAC/UAP but does it need to be so
"Look! I'm here"?

 

[Chaucer]

It only appears when a program tries to run that needs administrative
priviledges. If it did not ask you for permission, a malicious program could
run in the background and you would never know it.

 

[deebs]

True. But OS X handles the same thing with far greater dignity in my
opinion

 

[Peter M]

True.. and it can be annoying though it's not as bad as beta2 was. I'm just
baffled by his "it's no better than XP" without any explanation why. For
such a security expert with all his acronyms you'd think he'd be pleased
they've hardened the network stack, sandboxed IE, implemented a semi-admin
accout for those that run as admin etc., but no we just get "vista is a
dud". <shrug>

 

[Jeff]

Sandboxing IE is a pain; if ppl would just scan their install execute
first;sandboxing wouldnt be neccesary
Just an observation.
Jeff

 

[Jeff]

Funny too;
When Office 2007 first came out;and IE7 was sandboxing;and chking for
valid digital signatures; guess what program went -POOF-
Office 2007-LMAO-didn't have a valid digital dignature-LOL
Jeff

 

[deebs]

Bearing in mind that Windows is the most popular operating system in the
known universe I think a modicum of consideration should be given to
fluid workflow from a user perspective.

In the early stages of Vista I'd imagine that most financial authorities
will be thrilled to bits with UAC/UAP and security hardening but the
same things can be handled elegantly and tastefully with equal rigour
(in my opinion)

 

[deebs]

In many ways, previous versions of Windows seemed shocked full of holes.

For example an extremely rigorous registry.

It, to me, seems like a strong outer door built into a barn full of holes.

What say you?

Vista seems to be going in a good direction for sure.

 

[jwardl]

Perhaps...

If so, you might want to use it instead.

 

[Edward Ray]

I went to Blackhat, saw the daylong presentation. My original comment
stands.

In one year, if IE exploits still provide 0wnership of Windows Vista, my
point will have been made.

 

[Edward Ray]

I saw nothing enlightening at the Blackhat persentations in Vegas, and
nothing so far in RC1 to sway my opinion. The Security enhancements you
speak of required me to uninstall my Anti-Virus and Software firewalls.
Until I am able to reinstall them Vista will be less secure than my XP SP2.
Hopefully RC2/RTM will allow me to do this.


--
Edward Ray
CCIE Security, CISSP, GCIA Gold, GCIH Gold, MCSE+Security, PE

Please, elaborate as to the tests you have preformed
in reaching such an enlightened opinion.

-Michael

 

[Edward Ray]

yeah but he's got a lot of acronyms under his name. As my grandfather used
to say "if they spout a lot of titles and no facts they have more BS than
a herd of cows".

And earn much more than you.

 

[Edward Ray]

True.. and it can be annoying though it's not as bad as beta2 was. I'm
just baffled by his "it's no better than XP" without any explanation why.
For such a security expert with all his acronyms you'd think he'd be
pleased they've hardened the network stack, sandboxed IE, implemented a
semi-admin accout for those that run as admin etc., but no we just get
"vista is a dud". <shrug>

IE sandbox still has to be proven tome, and the fact that IE in Vista needed
to be patched last month for the same exploit in XP does not inspire
confidence.

If hardening the network stack meand that my third party AV and software
firewall will not work, I'll take the old stack. IPv6 compatiiblity was the
main reason for stack change anyway.

Check out Paul Thurrott's comment on Vista RC1 at
http://www.winsuppersite.com His views closely parallel mine.

 

[Edward Ray]

If they do more, customers will complain about being too limited.
I think vista has made great improvements security-wise.
If you would have read the reviews, the technical documents and tried
yourself seriously you would know...
hal

XP SP2 provided many security enhancements. To be honest the day-long
Blackhat presentations did little to sway me of majoe improvements. I
suppose having more processes runnning as non-admin/SYSTEM is something I
guess. Vista had same vulnerability in IE as XP last month, so the jury is
still out on improved security...

 

[Jeff]

Now how would you assume that Ray?
A tad testy?
Jeff