Re: Security and the User experience



I agree... I don't see this as Microsoft saying "that's just the way it is,"
because Microsoft resisted putting outbound filtering in the Windows
Firewall. This optional functionality is being added at the request of
Windows users. If you don't like it, I'm sure you can disable it. Or you
can subscribe to Microsoft's OneCare, where Microsoft manages your Windows
Firewall for you. But don't ask Microsoft to remove a useful option from
Windows just because you personally don't like that option.

Like most security countermeasures, outbound firewall filtering generally
increases your security, but it can inhibit some functionality and takes
some administrative effort to maintain if you choose to enable it.

No OS can totally be secured by the manufacturer, just as no car can be made
totally safe by the manufacturer. Computers are a tool, and the user must
take at least some responsibility for the use and configuration of that
tool, or delegate that responsibility to a paid service, a paid consultant,
or to no one. There are some risks to the latter.


"Roger Abell [MVP]" <mvpNoSpam@xxxxxxx> wrote in message
news:edLQ%232FsGHA.4752@xxxxxxxxxxxxxxxxxxxxxxx
Thoughtful analysis and interesting proposal, but I doubt it would fly.

I watched as MS at the end of the beta for XP trimmed down the firewall
capability so that it allowed any outbound traffic. They received much
harsh
feedback for this, but basically said, amongst other things, that the user
experience with other firewalls from "popup notices" etc. was not at all
good,
etc. and that they were avoiding that. A little time passed and we are
now
back over on the other side.

If there were a central authority such as you suggest, then who funds it,
how do I know that I should actually trust it, how much does it cost me
to verify to it that what I want registered should be registered, etc..??

"Rob R. Ainscough" <robains@xxxxxxxxxxx> wrote in message
news:OV2maQAsGHA.4004@xxxxxxxxxxxxxxxxxxxxxxx

I think Microsoft really need to smell the coffee here, because their
path of "that's just the way it is" does nothing for anyone involved in
the business of PC's and software development.


.



Relevant Pages

  • Re: help me rid this virus please
    ... Either SASSER or BLASTER.. ... the Microsoft provided information on the matter can be ... ** You MUST have Windows XP SP1a installed FIRST! ... You should at least turn on the built in firewall. ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Worm blaster remover program.
    ... the Microsoft provided information on the matter can be ... ** You MUST have Windows XP SP1a installed FIRST! ... After enabling the Internet Connection Firewall or creating the read-only ... install the MS04-011 patch from the MS04-011 download link for the affected ...
    (microsoft.public.windowsupdate)
  • Re: 3 problems in XP
    ... Tell Microsoft about this problem... ... ** You MUST have Windows XP SP1a installed FIRST! ... UPDATES and PATCHES ... You should at least turn on the built in firewall. ...
    (microsoft.public.windowsxp.configuration_manage)
  • Re: 3 problems in XP
    ... Tell Microsoft about this problem... ... ** You MUST have Windows XP SP1a installed FIRST! ... UPDATES and PATCHES ... You should at least turn on the built in firewall. ...
    (microsoft.public.windowsxp.customize)
  • Re: SP2 problem connecting to web after instal
    ... > I've just installed SP2 after downloading all Windows updates first. ... > installed from CD after checking with Microsoft that I didn't have any ... > As soon as it finished installing, I disabled their firewall, as I ... > I've checked my Internet settings which seem OK. ...
    (microsoft.public.windowsxp.general)