Fight malware by upgrading to Vista, urges MS
245449
Really fighting fire with fire Microsoft is pushing improved malware defences as a reason to shift over to Vista.â¦
555764
Because of a bug in Windows Vista's antipiracy technology, some users are being told that they need to reactivate the operating system after installing new device drivers or software.
460044
The new antipiracy controls due to be included in Microsoft's forthcoming operating system, Windows Vista, have highlighted the ongoing threat of piracy faced by many software companies.
343018
The new waiting game Comment Vista is a step forward in security, but many businesses will be stuck with Windows XP for years to come, due to the cost of upgrading, the value of existing assets, and compatibility issues that trump security features.â¦
52279
NEW YORK -- Microsoft Corp. took great pains to improve security in its newly released computer operating system, Windows Vista, redesigning it to reduce users' exposure to destructive programs from the Internet. Outside researchers commend the retooled approach -- yet they say the changes won't make online life much safer.
551921
(InfoWorld) - MicrosoftÂ on Thursday released an update to Windows Vista that will shut down unauthorized versions of the OS that allow users to skip the product's activation system. The move comes asÂ pirated copies of Vista are already making the rounds, mere weeks after the product was released to business customers. The update, which Microsoft has dubbed "frankenbuild," detects tampering of Windows Vista code that would allow users of the OS to work around the product's built-in activation system, which requires users to validate their copy of Vista with a product activation key to use the full version of the product after 30 days. Frankenbuild mixes files from various test and final versions of the software. It will require only systems in which it detects specific tampering to go through a validation check for authenticity, according to a posting on the Windows Genuine Advantage blog. If a version of Vista that has used a workaround to avoid product activation is detected, a user of that software will have 30 days before the OS goes into a reduced functionality mode, Microsoft said. In this mode, all users can do is access their existing files and surf the Web for an hour before having to log back on to the software. The pirating of Windows has been a perennial problem for Microsoft, particularly in developing countries. The company began coming down hard against piracy last year withÂ a widely criticized systemÂ it called Windows Genuine Advantage, which initially required users to validate their copies of Windows if they wanted to use Microsoft's update services. Microsoft took its antipiracy campaign one step further with Vista by building the validation system directly into the OS. This system requires a Windows Vista user to validate the software through a product activation key within 30 days of using the OS to avoid having the software go into reduced functionality mode.
440903
Microsoft's Craig Mundie explains why software needs continually to be patched and updated.
300776
'Secure Development Lifecycle' only goes so far Microsoft on Tuesday issued two security updates, one of them rated critical that fixes nasty bugs in Windows Vista that could allow an attacker to gain complete control over a user's machine.â¦
208308
Though Microsoft Corp.'s new security update package is all about protecting systems from worms, viruses, and spyware, it can't do much about what's already on computers -- and that could pose a problem.
607781
Microsoft is fighting back against those attempting to distribute a cracked version of Windows Vista. It has issued an update to detect use of a tampered build which mixed files from test and final versions of the OS.
245292
Description: A new Microsoft upgrade tries to make Windows XP more secure against attack. Service Pack 2 contains a program -- known as a firewall -- that keeps out some destructive computer worms.
190971
Microsoft wants everyone to focus on Vista and forget about whatever may come down the operating system pike.
480097
If you want the &#39;security enhancements&#39; of Windows XP SP2 but you&#39;re running an earlier version of Windows, then you&#39;re going to have to upgrade, Microsoft has been confirming to the public prints this week.
319294
(InfoWorld) - Top executives from the security firm McAfeeÂ went on the offensive Monday against Microsoft, saying Vista will be even less secure for customers than previous versions of Windows. The day after McAfee took out a full-page advertisement in the Financial Times to publicly air its grievances over the security of Vista, McAfee Chairman and Chief Executive Officer (CEO) George Samenuk, Vice President and Chief Scientist George Heron and Chief Security Architect John Viega delivered the same message in person in New York. "We are disturbed by the fact that with Vista, end customers will be less secure," Samenuk said. "Customers trust us ... To erode that trust would hurt all Internet users, all PC users. I don't think Microsoft wants that, nor does McAfee want that." Two security elements in Vista fare chief among McAfee's concerns, executives said. In Vista, Microsoft is locking down the kernel of the OS through a feature called PatchGuard on 64-bit versions. Microsoft's argument is that this will keep miscreants out of the OS and prevent the incidence of attacks, and it is something for which customers have been asking. "Fooling around with the kernel while it's running is like changing the sparkplugs on your car when the engine is running," said Stephen Toulouse, a senior product manager at Microsoft. "It's never been a good thing for users." But McAfee said since PatchGuard also prevents third-party security companies from getting inside the OS, they can't activate crucial security measures in their software to protect the OS from intruders. PatchGuard is not new in Vista, said Bruce McCorkendale, a distinguished engineer with McAfee competitor Symantec Corp., which shares McAfee's consternation over the feature. He said Symantec has been petitioning for Microsoft to change the feature since the company introduced it in its 64-bit version of Windows XP, but the company will not budge. "If you ask any security vendor that offers advanced protection, you'd get the same answer [about PatchGuard]," McCorkendale said. "It's just inhibiting the way security vendors do their jobs." However, according to Jupiter Research, only 5 percent of companies with 100 employees or more are running Windows XP in its 64-bit version, and that adoption is not supposed to ramp up significantly anytime soon, said analyst Joe Wilcox. "If this new [feature] affects 64-bit only and nobody is using 64-bit, what's the problem?" he said. The other big concern with Vista for McAfee lies in a new security interface called Windows Security Center (WSC). Microsoft will not allow this interface to be turned off, so McAfee and other third-party users can't install their own security-management consoles on Vista machines, executives said. McAfee's argument is that third-party security products can better detect potential or existing security problems that Vista inherently can, and unless those can be surfaced through the interface, users will not be alerted to them, Viega said. Some believe security vendors are crying foul over Vista because Microsoft's ability to control security features of the OS is a threat to their livelihood. Companies such as McAfee and Symantec have all but built their businesses on the fact that Windows is inherently insecure, and add-on security software is needed to protect it from intrusion. "Historically, when Microsoft has gotten into a market, the number of competitors goes down," Wilcox said. However, he said there is a legitimate concern, supported by precedence, that not only will vendors be pushed out of the market, but there will be less innovation in Windows security products and more problems will arise. Wilcox cited Internet Explorer as an example of an area in which Microsoft beat competitors, but then did not innovate on the product until it faced competition once again. "Microsoft won the browser war and for years abandoned the territory," Wilcox said. If Microsoft successfully reduces the number of competitors by building security into Windows, it might also become lackadaisical about security improvements, thus opening the OS up to more attacks.
592673
Microsoft urged Windows Vista users to download a new security tool that automatically disables suspicious or malicious "gadgets," the small applets that mimic the "widgets" popular on Mac OS X.Dubbed "Windows Sidebar Protection," the 1MB download was added to Windows Update on Tuesday and classified as a "high-priority" update. Microsoft customers running Vista RTM -- the initial version that launched in late 2006 to businesses and early 2007 to consumers -- saw the update on the list starting Tuesday. The update is optional, but depending on what settings have been selected in Windows' Automatic Updates, it may be downloaded and installed without any additional user interaction.Windows Sidebar is a Vista-only panel that holds the miniature applications known as gadgets -- small single-purpose tools that, for instance, display the time and date or RSS feeds. The Windows gadgets are composed of HTML and various scripts.And there's the rub, said Microsoft."Vista treats gadgets like it treats all executable code," said the advisory that accompanied the update. "Gadgets are written using HTML and script, but this HTML is not located on an arbitrary remote server as Web pages are. HTML content in the gadget is downloaded first as part of a package of resources and configuration files and then executed from the local computer."In other words, gadgets could be dangerous, even malicious. The small applications are crafted not only by Microsoft but also by third-party developers and users; Microsoft distributes gadgets on its Web site, but it doesn't vet them."The update gives us a mechanism to prevent a malicious gadget from being installed first of all, and if it's installed, to block the gadget [from running]," said Austin Wilson, a director in the Windows client product management group. "We're being proactive here. We looked at the [security] landscape and wanted this in place in case a problem arises in the future."There are no known vulnerabilities in any existing gadgets, Wilson claimed, stressing that Microsoft knows of no purposefully malicious gadgets, either.When it detects a flawed, suspicious or malicious gadget, Microsoft will create a "kill bit" file that it will then push to users through Windows Update on the regular once-a-month patch day, said Wilson. Yesterday's update included no kill bit, stressed Wilson, but instead is the tool that generates a unique ID for each gadget, accepts the list from Windows Update and then blocks existing gadgets from running or newly-downloaded gadgets from installing.After a gadget has been identified as bad, its icon gets swapped out with one labeled "Bad Gadget." The icon also can't be dragged, and the tool tip shows it as a security risk.The Sidebar security update is already integrated in the bits that were distributed as Vista Service Pack 1's release candidate last month, said Wilson, and it will be included in the final when that launches in the coming weeks.Microsoft has posted a pair of documents on its support site that go into more detail: KB943411 includes the download links to the 32- and 64-bit versions of the tool; KB941411 walks users through the various dialog boxes they will see when the tool tries to bar or block a gadget.
746767
Windows chief Jim Allchin urges developers to get with the program and build Vista applications.
674795
(InfoWorld) - Itâs not easy being Ben Fathi. As corporate vice president of Microsoftâs Security Technology Unit, Fathi took the place of longtime STU leader Mike Nash in March amid a larger management shake-up just days after Microsoft announced that the shipment date for Vista was slipping yet again. After Nashâs high-profile tenure, Fathiâs charge is more subtle: building what he calls a âtrust ecosystemâ around Vista and its new security features and promoting the companyâs secure development practices. But first he must help get Vista out the door. Fathi sat down to talk with InfoWorld Senior Editor Paul Roberts at the recent Security Standard Conference in Boston about Vistaâs progress, and the world after Vista. InfoWorld: Recently thereâs been some back and forth with Symantec about issues such as Vistaâs Kernel Patch Protection feature for 64-bit systems, as well as some public criticism of Vista code for having security holes. What should enterprise folks make of that? Ben Fathi: First, on the paper Symantec published: We thank them for their input. I think itâs unusual for a partner to go public with a paper like this on a beta product, but they did identify a few issues. To the best of my knowledge, all those were already fixed in more recent beta releases. We love to hear feedback on beta products. Thatâs why weâre in beta. Itâs a test. Weâll fix them as long as they report them to us. As for the kernel patching, we fundamentally believe that the current model of kernel patching is broken and not sustainable. We never recommended it or supported it on any version of our operating systems. As weâve been telling our vendor partners, this is the only chance we have, as 64-bit computing becomes available, to start with a clean architecture and build on top of that. We want to work with you to find ways to extend the kernel functionality by having a clean architecture, APIs, and filters. â¦ instead of patching instructions and data structures in the kernel. In the long term, what we want to do is move a lot of these functionalities to a hypervisor that sits under the kernel to make the kernel even smaller and the trusted computing base even more secure. We still have a window of opportunity here. â¦ and weâre working with two or three vendors in the space to come up with that kind of architecture. One of the other comments thatâs been made is that [Kernel Patch Protection] is anti-trust. That weâll go back in with our own products and get around it. Thatâs absolutely not true. Weâd never do that. IW: You recently patched a beta version of Vista. Is it a bad sign that youâre patching beta Vista? BF: I believe that Vista is significantly more secure than any version of XP or anything else weâve shipped in the past. Just SDL (secure development lifecycle) in general and the process of penetration testing and hardening kernel services. These all created a stronger, defense in depth strategy. What I would say is, Yeah, there will be patches and vulnerabilities as we move forward. What weâre hoping is that by creating these layers of defense, weâre giving customers, especially enterprise customers, a longer time to test and make sure things are not broken. IW: Do you see your job description and responsibilities changing after Vista? BF: There are six different areas that we call âBig Betsâ that have been identified in my division. I will mention two. The first, Application ID, is a way to identify an application that includes an executable, the library it uses, configuration files, registry settings, any patches that are applied to it. So youâll have a cryptographically signed version of the application, and youâll be able to identify that and whitelist or blacklist that. When we talk about a trust ecosystem today, the ability to trust people based on an ID and trust machines based on an ID, we canât do that with applications. If itâs called powerpoint.exe, we go and run it. So having strong IDs based on the application and [making] sure they havenât been tampered with after download is an important investment for us. The second area is isolation. Creating guest operating systems that sit on top of hypervisors allow us to create better isolation mechanisms so that even if malware comes in, it only affects one subset of the machine and not everything else. Weâve done some great work on server hypervisors and server virtualization. We need to extend that to the client. Weâre seeing partners do that already, and so weâre going to invest in that space.