Re: Microsoft finally acknowledges the security drumbeats

From: Alun Jones (alun@texis.com)
Date: 01/25/02


From: alun@texis.com (Alun Jones)
Date: Fri, 25 Jan 2002 19:46:02 GMT

In article <a2sc4j$gke$1@newbolt.sonic.net>, remove08@sonic.net (this is a
valid address for a limited time) wrote:
>Given that so many users / novice administrators end up administering
>computers, wouldn't it make sense for OS vendors to make all of the
>defaults the high security ones, or at least have an option for a
>"high security" install (for most network connected computers, including
>home computers connected to the internet) and "low security" install
>(only for use on private or protected networks, though even the "low
>security" install should have high security settings for things that
>are commonly allowed through firewalls, such as client web browsing,
>email attachment handling, etc.)?

>From a security standpoint, yes it would. From the view of actually getting
any work done on the system, no it won't, because then you have to have a
knowledgeable systems administrator come in and get rid of those security
settings that aren't appropriate for the customer's environment. Picture
trying to sell a customer a system that they have to then hire a consultant to
help them get into a shape where they can use it.

The flip-side of security is usability - increasing security most often ends
up decreasing usability. And most people care more about getting their job
done (even if that job is "playing space invaders"), than securing their
systems.

Alun.
~~~~

[Note that answers to questions in newsgroups are not generally
invitations to contact me personally for help in the future.]

-- 
Texas Imperial Software   | Try WFTPD, the Windows FTP Server. Find us at
1602 Harvest Moon Place   | http://www.wftpd.com or email alun@texis.com
Cedar Park TX 78613-1419  | VISA/MC accepted.  NT-based sites, be sure to
Fax/Voice +1(512)258-9858 | read details of WFTPD Pro for NT.



Relevant Pages

  • << Small Biz Server news the week of May 2, 2004>>
    ... take the time to test and install MS04-011. ... The security package Microsoft Unified Security Protocol ... gaining control of large networks of computers. ... Committee said new laws were needed to stop the ...
    (microsoft.public.backoffice.smallbiz)
  • << Small Biz Server news the week of May 2, 2004>>
    ... take the time to test and install MS04-011. ... The security package Microsoft Unified Security Protocol ... gaining control of large networks of computers. ... Committee said new laws were needed to stop the ...
    (microsoft.public.backoffice.smallbiz2000)
  • << Small Biz Server news the week of May 2, 2004>>
    ... take the time to test and install MS04-011. ... The security package Microsoft Unified Security Protocol ... gaining control of large networks of computers. ... Committee said new laws were needed to stop the ...
    (microsoft.public.windows.server.sbs)
  • RE: [Full-Disclosure] Insecurity in Finnish parlament (computers)
    ... > It is unlikely that all the computers have the same security ... > (both in TeliaSonera and in our parlament). ... Red herring. ...
    (Full-Disclosure)
  • Re: Basic Security Help
    ... a network is weak or no passwords followed by malicious user on your ... -- Use password policy to enforce strong passwords in the domain by enabling ... -- Be sure that computers are kept current of critical security updates from ... Windows Updates or using a SUS server to authorize and distribute security ...
    (microsoft.public.security)