The Active Network
ActiveWin Anonymous | Create a User | Reviews | News | Forums | Advertise | VBA in Excel | Users Online: 0  
 

neowin.net

Amazon.com

  *  

  Security Watch Special: Windows XP SP2 Security Center Spoofing Threat
Time: 00:24 EST/05:24 GMT | News Source: PC Magazine | Posted By: Robert Stein

Windows XP Service Pack 2 promises to raise the security bar for the sometimes beleaguered operating system. Unfortunately, one of the new features could be spoofed so that it reports misleading information about system security, or worse, lets a malicious program watch for an opportunity to do damage without being detected. The feature is the Windows Security Center (WSC), which displays the status ( (Figure 1) )of the key elements of your defenses: Firewall, Updates, and Antivirus. If your firewall has been disabled, or your antivirus is out of date, that news will display here. The information is stored in an internal database managed by the Windows Management Instrumentation (WMI) subsystem built into Windows.

Read Only Comments
Return to News
  Displaying Comments 1 through 3 of 3
  This is an archived static copy of ActiveWin.com.
#1 By 23275 (68.17.42.38) at Friday, August 27, 2004 09:19:14 AM
#1 and #2 are both very valid posts.

Couple things we see....

1) More attention needs to be paid to the real bad elements in all of this - the people writing exploits for whatever reason.
2) PC users, like automobile drivers, need some kind of training to basic standards - when one considers the damage an underprotected PC can do to many people and systems, it seems to make at least some sense that users be provided some kind of basic user training and held to account for the function of their systems.

If the threats to systems persist, I do not see it being long before laws require basic operator compliance before a system can be connected to the public networks. Scary I know, but an 8 years old "can" lawfully own a car - they just can't drive it on the public roadways until they conform to basic standards.

I know this implies all kinds of unwanted regulation and intrusions to our lives, but this is where we come back to 1) above. None of this would enter into our discussions if people would not do harmful things. Let's say we had a group of bank robbers who stole 300 billion dollars from a group of banks at gunpoint...how many people do you think would be after them? Probably thousands. We need to look at cyber-criminals the same way and promptly place them "under" the jail. Regardless of platform choices, this is one area we all need to set our differences aside and work together on, or we're all going to face both a lot more costs and a lot less freedom of choice.

#2 By 2332 (65.221.182.2) at Friday, August 27, 2004 12:54:12 PM
Sigh... what complete BS.

Guess what people! If you're running a piece of software as admin it can do ANYTHING on your machine! ANYTHING.

This is no different than ANY OTHER OS OUT THERE.

If bad code is running as admin on your machine it's already way too late.

#3 By 2231 (68.98.165.58) at Friday, August 27, 2004 02:21:57 PM
Limited accounts for home users is not realistic:

http://www.winnetmag.com/Windows/Article/ArticleID/43064/43064.html

half way down on this one ...
http://www.winnetmag.net/WindowsSecurity/Article/ArticleID/43136/WindowsSecurity_43136.html



 

  *  
  *   *
 
replica watches