[Eug-lug] Network Computing Newsletter- Monday, February 26, 2007

[Ben Barrett]

For general-purpose computers (ie, PCs), I don't see how this can be
avoided, really.
I'm thinking of physical access, where someone could run a debugger on the
OS --
not the classic MS example of an IIS/SQL server in the closet handling
transactions,
which of course they should be held liable for :)

I'm surprised I haven't been hearing about Vista mobile, I was sure they'd
make something
like Vista CE, and also give it a mutated sibling to make lots of old PC's
into thin clients.
Looks like they're letting that market go in favor of fresh silicon.

Joke's on them, for now.

ben



On 2/26/07, Michael Miller <mike.mikemiller at gmail.com> wrote:
>
> More and more people are not happy with Micro$oft.  I think this may
> be the beginning of the end.  Or at least a major restructuring.  I'm
> waiting for more malware and viruses to spread from.  Windows devices
> which include Windows Desktop ( 98, Me, XP and Vista ) Windows CE,
> Windows Embedded ( ATM machines and Voting machines I think are biased
> on Windows Embedded ) and Dashboard ( X-Box and X-Box 360 ).
> Dashboard on the 360 may not be the Windows 2000 kernel anymore.  I'm
> sure they used all the same API's and or code from Windows.
>
> I think the other funny thing is all the new code Microsoft is
> sticking into XP, Vista and Office.  They may fix issues with new
> code.  It just means you should make sure you audit the code as well.
> There are all so compromises Microsoft is making with User Account
> Control (UCA) along with Address Space Layout Randomization (ASLR).
> These are good steps in the right direction.  I'm sure everyone has
> read the stuff on UCA.  Did you hear that ASLR was only compiled on MS
> code.  So if you have a 3rd party application that did not enable ASLR
> at compile time.  Guess what, you get to read everything in the memory
> address space.
>
> -Miller
> _______________________________________________
> EUGLUG mailing list
> euglug at euglug.org
> http://www.euglug.org/mailman/listinfo/euglug
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://euglug.org/pipermail/euglug/attachments/20070226/3ad2a0e6/attac=
hment.htm