Microsoft says long-awaited Vista offers more security
546253
Microsoft Corp. launched its first new computer operating system in five years yesterday , saying that despite delays, the product's emergence is perfectly timed for PC users who increasingly need to coordinate information from a dizzying array of sources.
58499
(InfoWorld) - When Windows Vista ships next year, customers might have a tougher time getting their security software to work properly, executives from Symantec said Wednesday. At issue are two new features being introduced with Vista: an enhanced Windows Security Center as well as a feature in the 64-bit version of Vista called PatchGuard. Microsoft says it is adding these features to lock down the operating system, but Symantec believes that they will be harmful to customers by making it harder for them to use third-party software. "There's no question that they're leveraging a monopolistic position to limit customer choice," said Chris Paden a Symantec spokesman. While Symantec executives did accuse Microsoft of being more difficult to work with on Vista than with previous operating system introductions, they stopped short of accusing Microsoft of antitrust violations. "It's not anti-competitive behavior, because Vista hasn't even hit the market yet, " Paden said. Security vendors like Symantec are in a state of heightened sensitivity these days as they've begun to compete with Microsoft head-on, and the specter of further antitrust actions looms over Microsoft's every move in the security space. Last week the European Union's spokesman on competition, Jonathan Todd, warned that theÂ market could be threatenedÂ if Microsoft doesn't allow security vendors a fair chance of competing. Symantec and other security vendors dislike PatchGuard because it prevents them from accessing the Windows kernel. They say it will stop them from delivering important features like Symantec's "anti-tampering" technology, which prevents malicious programs from modifying Symantec's own software. PatchGuard will also make it more difficult for security vendors to protect against malicious software that takes advantage of kernel-level bugs, said Eric Sites, vice president of research and development with Sunbelt Software. "There are a lot of new exploits coming out that exploit kernel-level drivers, " he said. "If we're able to get into the kernel, we can watch for things like that, but with what Microsoft is doing we can't do that." Microsoft declined to be interviewed for this article, but in an interview with IDG News last week a Microsoft executive said that PatchGuard was simply an effort toÂ prevent the kernel from being misused. "We think that there's a significant amount of confusion around... certain security features in the product that we think raise the foundation," said Stephen Toulouse a senior product manager in the Security Technology Unit. "What we're doing is we're walling off the kernel from attackers, because the functionality that is currently there was never meant to be used by anybody -- by software vendors or attackers." But PatchGuard is enabled only in the 64-bit version of Windows. Because there are few 64-bit applications written for Vista, most of Vista's initial users are expected to run the operating system in 32-bit mode, and their security software will still be able to access the kernel. A more immediate issue for Symantec is many Vista users will find that both the Windows Security Center and Symantec warnings will pop up simultaneously. This doesn't happen with Windows XP because Symantec's software is able to automatically disable the Windows warnings, but with Vista users will have to turn off the Security Center themselves. This will make things unnecessarily complicated for many customers, said Rowan Trollope, Symantec's vice president of consumer engineering. "Most users can't figure out how to do that," he said. With two warnings popping up, each with different wording, users will be confused at best, and may simply begin ignoring security warnings altogether, said Sites. Some observers have speculated that Symantec may press the EU for action against Microsoft in this matter, but Trollope and Paden wouldn't say what Symantec planned to do to address these problems. "We're looking at all the possibilities now," said Trollope, "And none of them are good for customers."ADVERTISEMENTMAKE SOA REAL WITH IBM WEBSPHERE PODCASTStreamline processes and maximize efficiency within a proven service oriented architecture. Take back control of your business processes with IBM WebSphere.
690725
Stephen Toulouse, senior product manager with Microsoft's security technology unit, argued that the decision to restrict access to the Vista kernel will make the operating system -- and customers -- safer.
699941
Although the much-touted security enhancements in Windows Vista make it safer than earlier versions of Windows, it is still open to attack from malicious code, according to a study by Symantec.
575407
Microsoft will introduce a new system for fighting software piracy with its upcoming Windows Vista and Windows Longhorn Server operating systems, the company said Wednesday.
698032
(InfoWorld) - Microsoft will introduce a new system for fighting software piracy with its upcoming Windows Vista and Windows Longhorn Server operating systems, the company said Wednesday. Called the Microsoft Software Protection Platform, it's a collection of technologies that aims to do better at detecting pirated versions of Windows, and will also force unauthorized versions of its software into a limited-functionality mode, encouraging users to obtain a legal copy. People using unlicensed copies of Vista will be blocked from accessing certain features, including a new interface design called Windows Aero, and software for fighting pop-up advertisements called Windows Defender, Microsoft said. The company has already used a reduced functionality mode with Windows XP. Users with an unlicensed versions of Windows will also see a persistent reminder message in the corner of their screen, reading "This copy of Windows is not genuine." The new software is bound to come under scrutiny. Microsoft's previous attempt to reduce unauthorized use of its software, Windows Genuine Advantage, was partially rolled back after it wasÂ criticized as "spyware"Â for stealthily installing itself on users' PCs and reporting information back to Microsoft. Microsoft said the new technologies are necessary to fight software piracy, and said end-users can also benefit because they are less likely to be exposed to faulty or compromised software. End-users installing pirated Vista copies, or who don't register their software using a product key within 30 days, will have their OS functionality reduced. The product key is an ID number assigned to customers for each purchase of Windows. The company said it will also be able to track more easily when products are activated with product keys that have been stolen from a business. Regardless of the authenticity of their Vista copy, all users will have access to Microsoft security updates, the company said. For businesses that use volume license keys for Vista and Longhorn Server, Microsoft will introduce new, policy-based tools for activating those systems. The new tools, called Microsoft Volume Activation 2.0, won't be linked to Microsoft's software billing systems, the company said. Windows Vista and Windows Server Longhorn -- the code name for the next version of Microsoftâs server software -- will be the first products to ship with the antipiracy technologies, but they'll eventually be used in more of its products. Around 35 percent of all software installed worldwide in 2005 was pirated or unlicensed, Microsoft said, citing a figure from the Business Software Alliance, an industry group. More information isÂ available here.Â
43197
Red tape vs Redmond...the never ending story The European Commission has hit back at suggestions it has got it in for Microsoft over security features built into the heavily-delayed Windows Vista.â¦
300776
'Secure Development Lifecycle' only goes so far Microsoft on Tuesday issued two security updates, one of them rated critical that fixes nasty bugs in Windows Vista that could allow an attacker to gain complete control over a user's machine.â¦
319294
(InfoWorld) - Top executives from the security firm McAfeeÂ went on the offensive Monday against Microsoft, saying Vista will be even less secure for customers than previous versions of Windows. The day after McAfee took out a full-page advertisement in the Financial Times to publicly air its grievances over the security of Vista, McAfee Chairman and Chief Executive Officer (CEO) George Samenuk, Vice President and Chief Scientist George Heron and Chief Security Architect John Viega delivered the same message in person in New York. "We are disturbed by the fact that with Vista, end customers will be less secure," Samenuk said. "Customers trust us ... To erode that trust would hurt all Internet users, all PC users. I don't think Microsoft wants that, nor does McAfee want that." Two security elements in Vista fare chief among McAfee's concerns, executives said. In Vista, Microsoft is locking down the kernel of the OS through a feature called PatchGuard on 64-bit versions. Microsoft's argument is that this will keep miscreants out of the OS and prevent the incidence of attacks, and it is something for which customers have been asking. "Fooling around with the kernel while it's running is like changing the sparkplugs on your car when the engine is running," said Stephen Toulouse, a senior product manager at Microsoft. "It's never been a good thing for users." But McAfee said since PatchGuard also prevents third-party security companies from getting inside the OS, they can't activate crucial security measures in their software to protect the OS from intruders. PatchGuard is not new in Vista, said Bruce McCorkendale, a distinguished engineer with McAfee competitor Symantec Corp., which shares McAfee's consternation over the feature. He said Symantec has been petitioning for Microsoft to change the feature since the company introduced it in its 64-bit version of Windows XP, but the company will not budge. "If you ask any security vendor that offers advanced protection, you'd get the same answer [about PatchGuard]," McCorkendale said. "It's just inhibiting the way security vendors do their jobs." However, according to Jupiter Research, only 5 percent of companies with 100 employees or more are running Windows XP in its 64-bit version, and that adoption is not supposed to ramp up significantly anytime soon, said analyst Joe Wilcox. "If this new [feature] affects 64-bit only and nobody is using 64-bit, what's the problem?" he said. The other big concern with Vista for McAfee lies in a new security interface called Windows Security Center (WSC). Microsoft will not allow this interface to be turned off, so McAfee and other third-party users can't install their own security-management consoles on Vista machines, executives said. McAfee's argument is that third-party security products can better detect potential or existing security problems that Vista inherently can, and unless those can be surfaced through the interface, users will not be alerted to them, Viega said. Some believe security vendors are crying foul over Vista because Microsoft's ability to control security features of the OS is a threat to their livelihood. Companies such as McAfee and Symantec have all but built their businesses on the fact that Windows is inherently insecure, and add-on security software is needed to protect it from intrusion. "Historically, when Microsoft has gotten into a market, the number of competitors goes down," Wilcox said. However, he said there is a legitimate concern, supported by precedence, that not only will vendors be pushed out of the market, but there will be less innovation in Windows security products and more problems will arise. Wilcox cited Internet Explorer as an example of an area in which Microsoft beat competitors, but then did not innovate on the product until it faced competition once again. "Microsoft won the browser war and for years abandoned the territory," Wilcox said. If Microsoft successfully reduces the number of competitors by building security into Windows, it might also become lackadaisical about security improvements, thus opening the OS up to more attacks.
652432
Microsoft rolled out the latest version of its all-conquering Windows operating system for business customers, hoping corporate users will blaze a trail for the new Vista platform.
529035
According to Microsoft&#39;s Trustworthy Computing Group, the software giant&#39;s latest operating system is far more secure than competing platforms -- or even previous Windows iterations.
653823
Microsoft Corp.  said on  Wednesday it plans to release the first major update to its  Windows Vista operating system early next year.
5711
Microsoft Corp. rolled out  Windows Vista at retailers in 70 countries on Tuesday,  delivering a PC operating system that aims to better manage the  explosion of digital media and protect users from the dangers  of the Internet.
157751
Progress can be seen in security enhancements being made to Windows Server 2003, says Microsoft&#39;s CEO. By Associated Press. Microsoft Corp.
361523
Microsoft Corp.  said on  Tuesday it plans to release the first major update to its  Windows Vista operating system early next year.
292262
Microsoftâs description of the Windows Vista operating system is âClear, Confident, Connected.â But a more truthful motto would be âLooks, Locks, Lacks.â
537829
New packages promote promise of improved PC security.