<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	>
<channel>
	<title>Comments on: Microsoft Practically Admits Vista Sucks</title>
	<atom:link href="http://dangerousintersection.org/2009/09/13/microsoft-practically-admits-vista-sucks/feed/" rel="self" type="application/rss+xml" />
	<link>http://dangerousintersection.org/2009/09/13/microsoft-practically-admits-vista-sucks/</link>
	<description>Human Animals at the Crossroads of Culture, Science, Religion and Media</description>
	<pubDate>Mon, 22 Mar 2010 01:38:28 +0000</pubDate>
	<generator>http://wordpress.org/?v=2.7.1</generator>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
		<item>
		<title>By: Dan Klarmann</title>
		<link>http://dangerousintersection.org/2009/09/13/microsoft-practically-admits-vista-sucks/comment-page-1/#comment-53956</link>
		<dc:creator>Dan Klarmann</dc:creator>
		<pubDate>Mon, 26 Oct 2009 00:32:42 +0000</pubDate>
		<guid isPermaLink="false">http://dangerousintersection.org/?p=9090#comment-53956</guid>
		<description>In my experience, the default install on most systems includes an anti-virus suite that stops most malware attacks via email.
Also, the last few versions of MSOffice defaulted to not-run scripts in any document unless individually approved.

It take active neglect to disable standard safety features. Unfortunately, our nanny-state culture trains us to disable all those annoying safeguards as a matter of course. Tired of the nagging "Time to Upgrade" warnings? The simplest way to shut it up is to remove your safety suite.

But this doesn't have to do with the OS, but with the ignorance of users. A Word script can conquer a Mac as easily as a PC.</description>
		<content:encoded><![CDATA[<p>In my experience, the default install on most systems includes an anti-virus suite that stops most malware attacks via email.<br />
Also, the last few versions of MSOffice defaulted to not-run scripts in any document unless individually approved.</p>
<p>It take active neglect to disable standard safety features. Unfortunately, our nanny-state culture trains us to disable all those annoying safeguards as a matter of course. Tired of the nagging &#8220;Time to Upgrade&#8221; warnings? The simplest way to shut it up is to remove your safety suite.</p>
<p>But this doesn&#8217;t have to do with the OS, but with the ignorance of users. A Word script can conquer a Mac as easily as a PC.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: NIklaus Pfirsig</title>
		<link>http://dangerousintersection.org/2009/09/13/microsoft-practically-admits-vista-sucks/comment-page-1/#comment-53945</link>
		<dc:creator>NIklaus Pfirsig</dc:creator>
		<pubDate>Sun, 25 Oct 2009 12:55:31 +0000</pubDate>
		<guid isPermaLink="false">http://dangerousintersection.org/?p=9090#comment-53945</guid>
		<description>For any piece of malware to cause problems, it must be executed on the target system. On a default windows install, You can get a spam mail with a spoofed sender name that looks like someone you know. You open it and it contains a MS-word attachment that opens automatically by default. When the attachment opens the malware, that is bound to the \"on open\" event executes, first harvesting your email address book, forwarding itself to all your contacts, then dropping its payload, often spyware that can be used to collect passwords, and other sensitive data and send it to a hacked server where the cracker can retrieve the info and sell it.
 Most of the apple malware is in the form of trojan files.</description>
		<content:encoded><![CDATA[<p>For any piece of malware to cause problems, it must be executed on the target system. On a default windows install, You can get a spam mail with a spoofed sender name that looks like someone you know. You open it and it contains a MS-word attachment that opens automatically by default. When the attachment opens the malware, that is bound to the \&#8221;on open\&#8221; event executes, first harvesting your email address book, forwarding itself to all your contacts, then dropping its payload, often spyware that can be used to collect passwords, and other sensitive data and send it to a hacked server where the cracker can retrieve the info and sell it.<br />
 Most of the apple malware is in the form of trojan files.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Planeten Paultje</title>
		<link>http://dangerousintersection.org/2009/09/13/microsoft-practically-admits-vista-sucks/comment-page-1/#comment-53922</link>
		<dc:creator>Planeten Paultje</dc:creator>
		<pubDate>Fri, 23 Oct 2009 18:33:39 +0000</pubDate>
		<guid isPermaLink="false">http://dangerousintersection.org/?p=9090#comment-53922</guid>
		<description>&gt; What money?

The money people are willing to spend on their computers. Apple concentrates its efforts on those who are willing to pay a premium up front for their gear and is clearly succeeding, even in the current economic dip. So it would stand to reason for criminals to go after that market segment more vigorously, but that doesn't seem to happen, at the contrary.</description>
		<content:encoded><![CDATA[<p>&gt; What money?</p>
<p>The money people are willing to spend on their computers. Apple concentrates its efforts on those who are willing to pay a premium up front for their gear and is clearly succeeding, even in the current economic dip. So it would stand to reason for criminals to go after that market segment more vigorously, but that doesn&#8217;t seem to happen, at the contrary.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Dan Klarmann</title>
		<link>http://dangerousintersection.org/2009/09/13/microsoft-practically-admits-vista-sucks/comment-page-1/#comment-53882</link>
		<dc:creator>Dan Klarmann</dc:creator>
		<pubDate>Thu, 22 Oct 2009 05:18:12 +0000</pubDate>
		<guid isPermaLink="false">http://dangerousintersection.org/?p=9090#comment-53882</guid>
		<description>Paultje: Please expand on "OSX’s 10% market share is where most of the money is." What money?

Malware is profitable in its ability to mass attack through spam or DDOS or other mechanisms. As far as malware authors go, the profit is in finding the most machines that can be hit with a single tool.

Frinstance: Conficker variations are still spreading, even though any Windows machines that has been patched in the last 8 months is immune. Maybe 10% of the Windows machines out there are vulnerable. It is not worth creating a similar robot for Mac because 10% of its 10% would cost as much to try to infect as 10% of the 90% Windows share.</description>
		<content:encoded><![CDATA[<p>Paultje: Please expand on &#8220;OSX’s 10% market share is where most of the money is.&#8221; What money?</p>
<p>Malware is profitable in its ability to mass attack through spam or DDOS or other mechanisms. As far as malware authors go, the profit is in finding the most machines that can be hit with a single tool.</p>
<p>Frinstance: Conficker variations are still spreading, even though any Windows machines that has been patched in the last 8 months is immune. Maybe 10% of the Windows machines out there are vulnerable. It is not worth creating a similar robot for Mac because 10% of its 10% would cost as much to try to infect as 10% of the 90% Windows share.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Planeten Paultje</title>
		<link>http://dangerousintersection.org/2009/09/13/microsoft-practically-admits-vista-sucks/comment-page-1/#comment-53867</link>
		<dc:creator>Planeten Paultje</dc:creator>
		<pubDate>Wed, 21 Oct 2009 17:04:03 +0000</pubDate>
		<guid isPermaLink="false">http://dangerousintersection.org/?p=9090#comment-53867</guid>
		<description>&gt; at least 30 pieces of OSX malware

As far as I know I have never encountered any of them, lots of phishing scams though. And I believe none of those 30 are viruses. 

Also, OSX's 10% market share is where most of the money is. So one would expect a more than proportional interest on the part of  malware authors for that segment.</description>
		<content:encoded><![CDATA[<p>&gt; at least 30 pieces of OSX malware</p>
<p>As far as I know I have never encountered any of them, lots of phishing scams though. And I believe none of those 30 are viruses. </p>
<p>Also, OSX&#8217;s 10% market share is where most of the money is. So one would expect a more than proportional interest on the part of  malware authors for that segment.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Niklaus Pfirsig</title>
		<link>http://dangerousintersection.org/2009/09/13/microsoft-practically-admits-vista-sucks/comment-page-1/#comment-53859</link>
		<dc:creator>Niklaus Pfirsig</dc:creator>
		<pubDate>Wed, 21 Oct 2009 06:30:47 +0000</pubDate>
		<guid isPermaLink="false">http://dangerousintersection.org/?p=9090#comment-53859</guid>
		<description>Uh, Dan...

 I forgot to mention that the Windows 7 ad seems to imply that a 4 or 5 year old child who can barely read can easily create a multimedia work of art. 

  My younger son, who is 12 years old, has been using linux since he was seven and is now started learning on his own how to develop PSP games under linux.  He took the computer literacy class at school and found the computer class now consists of teaching children how to use Microsoft software. The last thing the class did was to create two slideshow multimedia presentations with Movie Maker. One was done with family photos and the other was done with photos taken in Russia. I ask him why he didn't use one of the Ljube (a Russian band) songs from my cd collection, and he said he didn't think of it.</description>
		<content:encoded><![CDATA[<p>Uh, Dan&#8230;</p>
<p> I forgot to mention that the Windows 7 ad seems to imply that a 4 or 5 year old child who can barely read can easily create a multimedia work of art. </p>
<p>  My younger son, who is 12 years old, has been using linux since he was seven and is now started learning on his own how to develop PSP games under linux.  He took the computer literacy class at school and found the computer class now consists of teaching children how to use Microsoft software. The last thing the class did was to create two slideshow multimedia presentations with Movie Maker. One was done with family photos and the other was done with photos taken in Russia. I ask him why he didn&#8217;t use one of the Ljube (a Russian band) songs from my cd collection, and he said he didn&#8217;t think of it.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Niklaus Pfirsig</title>
		<link>http://dangerousintersection.org/2009/09/13/microsoft-practically-admits-vista-sucks/comment-page-1/#comment-53858</link>
		<dc:creator>Niklaus Pfirsig</dc:creator>
		<pubDate>Wed, 21 Oct 2009 06:08:35 +0000</pubDate>
		<guid isPermaLink="false">http://dangerousintersection.org/?p=9090#comment-53858</guid>
		<description>Dan, the Windows market share argument doesn't hold up.  

   Windows originated as a graphic shell that sat on top of MS_DOS, which was never designed with networking in mind and as such relied on a simplistic security model that is easily circumvented. On of the most ridiculously simple MS-DOS was the ANSI bomb which used a specially coded data file to re-map some or all of the keys on the keyboard to send a format c: command instead of the actual key value.
 Windows versions up through 98 were all GUI shells that used MS-DOS for file management and even with version 3.1.1 which added networking, still used the underlying MS-Dos file system.
  Windows NT however was built around a kernel developed under contract by the team that created RSTS-E for digital equipment corporation as an OS for the PDP 11/70 mini computer. RSTS-E had some serious flaws in handling ungraceful program exits, often saving workspace images to the wrong user account. NT had the same problems.
  NT incorporated  the multitasking functions into the kernel, and revamped the file system to be more compatible with multitasking, multi-user security, but used access control lists (ACLs) extensively and corruption of an ACL could either make a file inaccessible by anyone, or accessible to everyone. 
 Another problem with NT was in the extensive use of remote procedure calls (RPCs) to local library functions. RPCs make it very easy to elevate the calling program to administrative rights. Many Windows wxploits work by using an RPC to invoke an instance of a system service, the passing system commands as out-of-band data. 

 So in short, it is easy to write malware for Windows. 

  Apple, however, was not quick to adopt multiuser/multitasking into MacOS, Multasking abilities were added around version 8 with the multifinder and multiuser capabilities were added with an upgrade to the filesystem. Also the functionality if the kernel in pre OSX versions of Macos was much more inclusive that the Windows NT kernel, allowing for very simple hardware divers and applications, since most software consisted mainly of local procedure calls.

The also Allowed software that followed Apples interface standards to be portable between different versions of the OS. It also made it difficult for malware to work across different versions as the malware did not follow the published API standards. So each version of MacOS before OSX generally had fewer than 100 malware programs written for it. As I recall, MacOS 9 has something like 2 dozen viruses. 

 By contrast, most Windows malware are work programs written as Visual Basic for Applications macros in MS office files, and rely on the seamless integration of the Microsoft applications for dissemination.

  Since OSX, Apple has been using a kernel derived from BSD-UNIX, however there are at least 30 pieces of OSX malware with Macs at nearly 10 percent market share.

 Linux is under represented in the market share calculation since market share counts only include known deployments of commercial Linux distributions. No one really knows how many systems are really running linux with non-commercial installations, and embedded Linux installations on consumer devices such as the Sony e-book reader and the Archos PMP devices are not counted as they are locked down and usually do not support software installation.

  However the security model used by Linux is quite simple, but effective. System services are not run with administrative privilege, but as non-privileged users. 
   Basically, Linux is a malware hostile environment. While this doesn't prevent the development of linux malware, it reduces the damage that can be caused by malware, and makes it more difficult to create the malware in the first place.</description>
		<content:encoded><![CDATA[<p>Dan, the Windows market share argument doesn&#8217;t hold up.  </p>
<p>   Windows originated as a graphic shell that sat on top of MS_DOS, which was never designed with networking in mind and as such relied on a simplistic security model that is easily circumvented. On of the most ridiculously simple MS-DOS was the ANSI bomb which used a specially coded data file to re-map some or all of the keys on the keyboard to send a format c: command instead of the actual key value.<br />
 Windows versions up through 98 were all GUI shells that used MS-DOS for file management and even with version 3.1.1 which added networking, still used the underlying MS-Dos file system.<br />
  Windows NT however was built around a kernel developed under contract by the team that created RSTS-E for digital equipment corporation as an OS for the PDP 11/70 mini computer. RSTS-E had some serious flaws in handling ungraceful program exits, often saving workspace images to the wrong user account. NT had the same problems.<br />
  NT incorporated  the multitasking functions into the kernel, and revamped the file system to be more compatible with multitasking, multi-user security, but used access control lists (ACLs) extensively and corruption of an ACL could either make a file inaccessible by anyone, or accessible to everyone.<br />
 Another problem with NT was in the extensive use of remote procedure calls (RPCs) to local library functions. RPCs make it very easy to elevate the calling program to administrative rights. Many Windows wxploits work by using an RPC to invoke an instance of a system service, the passing system commands as out-of-band data. </p>
<p> So in short, it is easy to write malware for Windows. </p>
<p>  Apple, however, was not quick to adopt multiuser/multitasking into MacOS, Multasking abilities were added around version 8 with the multifinder and multiuser capabilities were added with an upgrade to the filesystem. Also the functionality if the kernel in pre OSX versions of Macos was much more inclusive that the Windows NT kernel, allowing for very simple hardware divers and applications, since most software consisted mainly of local procedure calls.</p>
<p>The also Allowed software that followed Apples interface standards to be portable between different versions of the OS. It also made it difficult for malware to work across different versions as the malware did not follow the published API standards. So each version of MacOS before OSX generally had fewer than 100 malware programs written for it. As I recall, MacOS 9 has something like 2 dozen viruses. </p>
<p> By contrast, most Windows malware are work programs written as Visual Basic for Applications macros in MS office files, and rely on the seamless integration of the Microsoft applications for dissemination.</p>
<p>  Since OSX, Apple has been using a kernel derived from BSD-UNIX, however there are at least 30 pieces of OSX malware with Macs at nearly 10 percent market share.</p>
<p> Linux is under represented in the market share calculation since market share counts only include known deployments of commercial Linux distributions. No one really knows how many systems are really running linux with non-commercial installations, and embedded Linux installations on consumer devices such as the Sony e-book reader and the Archos PMP devices are not counted as they are locked down and usually do not support software installation.</p>
<p>  However the security model used by Linux is quite simple, but effective. System services are not run with administrative privilege, but as non-privileged users.<br />
   Basically, Linux is a malware hostile environment. While this doesn&#8217;t prevent the development of linux malware, it reduces the damage that can be caused by malware, and makes it more difficult to create the malware in the first place.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Dan Klarmann</title>
		<link>http://dangerousintersection.org/2009/09/13/microsoft-practically-admits-vista-sucks/comment-page-1/#comment-53833</link>
		<dc:creator>Dan Klarmann</dc:creator>
		<pubDate>Tue, 20 Oct 2009 08:28:11 +0000</pubDate>
		<guid isPermaLink="false">http://dangerousintersection.org/?p=9090#comment-53833</guid>
		<description>Grumpy - If Windows hadn't emerged and firmly held market share against Mac, then most of the malware would target Mac and its suite of security holes. The big dog draws the most fleas.

And as Lao Tzu well knew, penetrator technology always outstrips defenses. Any usable interface will necessarily have chinks in its armor.

And Mac users know as many irritations from their GUI as those of us who are stuck with Lose-dohs. &lt;a href="http://www.youtube.com/watch?v=Uqh-3xBVHYA" target="_blank" title="Mac Killed my Inner Child" rel="nofollow"&gt;Remember this video&lt;/a&gt;?</description>
		<content:encoded><![CDATA[<p>Grumpy - If Windows hadn&#8217;t emerged and firmly held market share against Mac, then most of the malware would target Mac and its suite of security holes. The big dog draws the most fleas.</p>
<p>And as Lao Tzu well knew, penetrator technology always outstrips defenses. Any usable interface will necessarily have chinks in its armor.</p>
<p>And Mac users know as many irritations from their GUI as those of us who are stuck with Lose-dohs. <a href="http://www.youtube.com/watch?v=Uqh-3xBVHYA" target="_blank" title="Mac Killed my Inner Child" rel="nofollow">Remember this video</a>?</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: grumpypilgrim</title>
		<link>http://dangerousintersection.org/2009/09/13/microsoft-practically-admits-vista-sucks/comment-page-1/#comment-53831</link>
		<dc:creator>grumpypilgrim</dc:creator>
		<pubDate>Tue, 20 Oct 2009 05:09:55 +0000</pubDate>
		<guid isPermaLink="false">http://dangerousintersection.org/?p=9090#comment-53831</guid>
		<description>I don't think Micro$oft has ever made a good GUI OS.  Ever since their first attempt twenty years ago, their Windows operating systems have been unstable resource hogs.  Plus, the many security holes in their products have managed to single-handedly spawn the entire industry of anti-malware products.  Bottom line:  the success of M$ seems more to do with predatory business practices than with anything their engineers have produced.</description>
		<content:encoded><![CDATA[<p>I don&#8217;t think Micro$oft has ever made a good GUI OS.  Ever since their first attempt twenty years ago, their Windows operating systems have been unstable resource hogs.  Plus, the many security holes in their products have managed to single-handedly spawn the entire industry of anti-malware products.  Bottom line:  the success of M$ seems more to do with predatory business practices than with anything their engineers have produced.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Dan Klarmann</title>
		<link>http://dangerousintersection.org/2009/09/13/microsoft-practically-admits-vista-sucks/comment-page-1/#comment-51254</link>
		<dc:creator>Dan Klarmann</dc:creator>
		<pubDate>Tue, 15 Sep 2009 12:26:25 +0000</pubDate>
		<guid isPermaLink="false">http://dangerousintersection.org/?p=9090#comment-51254</guid>
		<description>I use Windows because I support clients' legacy apps that apparently won't run otherwise. When I find out that SqlServer, IIS, and cetrtain custom vertical market apps written for Windows can run under Linux, Ubuntu, BSD, or another Open or Free O/S, then I may switch.

I do use and promote &lt;a href="http://getfirefox.com" target="_blank" rel="nofollow"&gt;FireFox&lt;/a&gt; and &lt;a href="http://openoffice.org" target="_blank" rel="nofollow"&gt;OpenOffice&lt;/a&gt;.</description>
		<content:encoded><![CDATA[<p>I use Windows because I support clients&#8217; legacy apps that apparently won&#8217;t run otherwise. When I find out that SqlServer, IIS, and cetrtain custom vertical market apps written for Windows can run under Linux, Ubuntu, BSD, or another Open or Free O/S, then I may switch.</p>
<p>I do use and promote <a href="http://getfirefox.com" target="_blank" rel="nofollow">FireFox</a> and <a href="http://openoffice.org" target="_blank" rel="nofollow">OpenOffice</a>.</p>
]]></content:encoded>
	</item>
</channel>
</rss>
