Re: Looking for some website which installs spyware on Linux

From: jmh (j_m_h_at_cox.net)
Date: 12/09/03 

Date: Mon, 08 Dec 2003 19:43:14 -0500

NeoSadist wrote:
> SPAM SPAM wrote:

>>Well, in pre-XP days when most people did run 3.1, 95 or 98 there was no
>>security at all, now since XP is getting more widespread there should be
>>a security concept. But why do people still get infected?
>
>
> Because Microsoft has not fixed the ROOT of the problem. It's too easy for
> a normal user to install things. See, here's why. In any operating system
> (or at least any well-designed operating system) all programs that a user
> runs use that person's permissions. If you're not admin/root, things
> shouldn't be allowed to have those permissions. It's a security issue:
> unix/linux is built for security, windows is not (as of yet). I will say
> that windows 2000 is the best windows version put out as of yet, until we
> see windows 2003/longhorn. Anyways, with windows it's still possible for
> the normal user to install things, which is most of which activex allows:
> it allows the installation of programs.

Normal users can install some things but not just anything
but I think that's true of any of the *nix flavors as well.
If you can write to some part of the disk and execute a
progam then a user can install to those directories and
run the program.

I think the reason why it seems like "normal users" can
install on the MS systems is because more places give
the user local admin rights on the machine--so they
have near root level priveleges. I think the points
about separating logins for doing different types of
activity--admin and normal use--and the views about
that are the main thing. That and the general population
using MS doesn't want to know how to deal with setting
something like that up, just douple click and have done.

Relevant Pages

  • Re: Windows Update Error on XP 64bit: update is redirected from v6
    ... In order to enable AHCI without reinstalling windows I had to pull ... under 'Reset the default security provider in Windows XP '. ... was this a clean reinstall of XP or a Repair Install? ... Microsoft Windows 2000 Operating System Group Policy Result tool ...
    (microsoft.public.windowsupdate)
  • Re: Microsoft ME
    ... > I have just found out that the Microsoft ME operating ... > long on security to ME so I can keep people from using our ... How can I force people to use a login ID and password to log into my Windows ... Install all service packs and security fixes from Microsoft and otherwise ...
    (microsoft.public.security)
  • Re: lets vote for better security
    ... : OE-related security vulnerabilities. ... But there is no requirement to install and update every 30 to 60 days on any ... your argument would require every Windows computer to ... and yet WSH is still a threat. ...
    (microsoft.public.security)
  • Re: Safe?
    ... Q1) I got an email from Microsoft about a security update. ... A1) No. Microsoft NEVER sends emails with security update attachments. ... pages where you can access Windows Update, download patches, or request ... Services to install Windows security updates or hotfixes. ...
    (microsoft.public.security)
  • Re: Will 839645 disable this?
    ... Check out the salary for Risk Analysis professionals. ... >> technology that is in those systems, still apply to Windows 2000. ... >> to install a security update in the offchance and likely remote ... Many security updates are NOT remote ...
    (microsoft.public.win2000.general)