Originally posted by: Lord Evermore
mechBgon: Just because the crackers haven't yet gotten on a roll doesn't mean they won't. OH WOW, malware designed for XP doesn't work in Vista, it must be so secure they'll never be able to hack it.
I could spend the rest of my morning replying to this
Suffice it to say, after being responsible for computer security on a fleet of about 65-75 systems for years, studying malware infection methods, reading many thousands of detailed malware descriptions to learn their MO, and reading about a dozen security blogs daily, I see great value in the additional safeguards that Vista has and XP doesn't.
The bad guys will still find holes, but with the inherent damage-containment value of UAC, WIC, services hardening and other Vista enhancements, they're still going to get only non-Admin powers with most of them, and they'll still be up against the new Windows Integrity Control layer of protection too, Any exploit they did manage at the Admin level would be tiptoeing among the tripwires of the services restrictions that watch for a Windows service to do something out of character. Uh oh, I am making good on my threat to spend the rest of my morning on this
Anyway, you can form your own conclusions, but I've based mine on a fair amount of study, not just anecdotal guesswork. My prediction is that the bad guys will focus harder on simply suckering the users with Trojans, so user education is going to become more important.
Facebook
Twitter