boolean rantMode = true;
if (rantMode = true)
{
Windows XP can be taken over simply by being connected to the Internet. This story is just breaking and making the rounds all over the place. Good. Windows security is an oxymoronic joke and the more exposure it gets the better.
This recent problem is one in a literal daily barage of Microsoft security related flaws in virtually all of the software it produces (OS, productivity, email, development, etc.) This one has actually been acknowledged by Microsoft (which is NOT always the case) as the linked Washitngton Post article points out:
A Microsoft official acknowledged that the risk to consumers was unprecedented because the glitches allow hackers to seize control of all Windows XP operating system software without requiring a computer user to do anything except connect to the Internet.
This comes from a company that purports to take security seriously. Either the Microsoft security stance is a load of bullshit or they are totally incompetent. Either way security is not getting done at Microsoft and either way consumers and companies are paying the price (literally and figuratively.) On Microsofts own security site (http://www.microsoft.com/security/) they make the statement "Microsoft is committed to doing everything possible to make certain that every customer can work, communicate, and do business securely over the Internet." (Oh, we didnt mean THAT Internet silly!) They go on later to point to a link and say "learn more about the impetus for the security initiative and the steps Microsoft is taking to protect its customers from Internet threats and system vulnerabilities." I dont know if they know what "impetus" means, or if they meant "incompetentus" but this is the kind of thing Microsoft is famous for, total and blatant marketese nonsense that is 180 degreess from reality. If there was ANY impetus AT ALL on security then the problems would not be as rampant. Spin yes, security no.
All operating systems and computer programs inherently have vulnerabilities. More people use Microsoft operating systems than any other and that makes them more prone to exploitation.
These are the main arguments that people use to actually defend Microsoft on the security front. Both are invalid excuses for eschewing security, especially on an OS level. Microsoft has far more security problems of a far more debilitating nature than any other software vendor in history (that I am aware of.) The ratio of all to MS is not reflective of the mean. And the fact that more people use Microsoft software is a reflection on the effectiveness of Microsoft marketing (and business tactics that are not always "pleasant") but NOT an indication of how secure or non secure it should be. These arguments are both crap.
Whether you are a Microsoft proponent or not, they suck at security, no debate is even warranted. I have said this before, and Microsoft only keeps reinforcing it, use Windows if you want but NEVER put it directly on a public network (ie the Internet.)
I am not sure this latest issue is either "monumental" or "unprecendented" in context with the plethora of past Microsoft issues, but I am glad they are getting the exposure they deserve.
For more on this XP flaw, check any news or security site and or the linked Washington Post article.
Comments
Re:
You think this is what bin Laden's people slipped into the XP code :P
al Qaeda
You think this is what bin Laden's people slipped into the XP codebase? :P
Re: al Qaeda
Eureka! Evidence of tampering, oh wait, we dont need that evidence stuff anymore, nevermind.