Advanced

Windows security is a 'myth', claims Linux Community Member

Posted by PaulFerris on · 20 comments
LXer; By Paul (FeriCyde) Ferris
Mail this story
Print this story

A senior Linux community member, speaking exclusively to LXer.com, has dismissed Windows' reputation as a secure platform as a "myth", claiming that the proprietary development process, coupled with a lack of corporate accountability creates fundamental security problems.

Paul Ferris, an IT professional with over a decade of experience using both Windows and Linux platforms said that the myths surrounding the proprietary operating system are rapidly being exploded, and that customers are leaving the Windows platform for free and other proprietary platforms in droves due to it's overly complex nature and lack of mission-critical security.

"The biggest challenge we need to face centers on the myth and reality. There are lots of myths out there as to what Windows can do. One myth we hear all the time from Microsoft executives and public relations shills is that Windows is more secure than Linux. Another is that there are no viruses for Windows," snorted Ferris. "But that one is easy to disprove." he continued. "Simply hook a Windows box to a broadband Internet connection without a firewall for less than an hour, and odds are, it'll become infected within minutes..

"Who is accountable for the security of the Windows operating system? Does Microsoft, for example, take responsibility? It often doesn't -- as a matter of fact, they're making more money recently selling their own anti-virus and spyware removal tools. Talk about short-selling the customer. They sell a shoddy product at one of the highest aquisition costs in the industry, and then they make money on the process that cleans up the mess." Explained Ferris.

"In the Free Software space, users are confident that the community will take responsibility for security patches, and if not, even they themselves can examine the code, not having to be dependent upon one proprietary vendor to supply the fix. They know that they will get their upgrades and patches in a timely fashion."

Ferris went on to claim that another Windows myth centers on the myth that you need a huge complex kernel to get anything meaningful done in a computing environment. In the Free Software world, things are much more theoretically pure, making the securing of the software easier.

"There a myth in the market that you need an army of thousands of programmers located mostly in one geographic location on the planet, coding away like minions to produce a useful product. Linux destroys that myth -- there are programmers located all over the globe that work using the open protocols of the Internet to produce software products that are extensible and easily patched, upgraded and ported to new systems. It's a beautiful thing, actually." he gushed.

"Maybe someday Microsoft products will be based upon more extensible, portable software like the GNU project produces. As of today, to make a windows system more secure and help prevent common exploits, you have to patch it with Free Software like the FireFox web browser. Surfing the web with a browser like IE that allows proprietary insecure protocols like ActiveX is akin to walking down a dark alley with 100 dollar bills hanging out of your pockets." he further warned.

Ferris then argued that Linux marketshare (often a subject of intense scrutiny by Microsoft shills and executives) had very little bearing on it's theoritical security model. "Users of an operating system that are concerned about security should do some simple research to find out how safe it is." he opined. "Maybe just ask a few Windows users how often they get viruses, worms, trojan horses and spyware."

He then added that Windows users that didn't know if they had things like that should probably be educated as to what those items were. "People are often infected and don't even know it."

The credibility of Windows in the enterprise has been suffering for years, and is showing no signs of abatement, according to Ferris, as companies examine their shrinking bottom line and look for simple ways to cut costs and tighten security at the same time.

"A lot of customers have grown tired of the price increases that Microsoft demand -- often for software they have already purchased prior. On top of that, managing a Windows network, especially an enterprise class network can be a nightmare from a security perspective. Patches are constantly being issued for extremely severe vulnerabilities. Simple software updates can easily break the core functionality of the complex and proprietary underpinnings of the operating system. It's a jungle out there in Microsoft land, and customers are tired of it."

"Microsoft has been failing the enterprise for mission-critical computing for years. There are fundamental things missing. For example, there is little adherance to open protocols and development languages. With Linux there tends to be better interoperability between it and all other systems -- Microsoft included. Microsoft has one goal: To get their customers to buy more Microsoft products. They use phrases like "Embrace and Extend" and "Leverage" to describe their customers' choices. Customers like choice, and the heavy handed tactics of a monopolistic organization can do serious damage to a companies bottom line, as choices are removed from the marketplace."


Paul Ferris has been making a mockery of Microsoft's many marketing mistakes for the better part of 5 years now. You can find his musings on the community-based web site LXer.com. Any resemblance between this article and recent musing by Nick McGrath, behind of platform strategy for Microsoft in the UK, is a crying shame...

  Nav
» Read more about: Story Type: LXer Features; Groups: Community, GNU, LXer, Microsoft

» Get new stories by e-mail: nightly or as they are published

« Return to the newswire homepage

  Related stories
» More like this

Comments (20)

Good one, Paul!

DaGoodBoy ·
This is a hoot. It looks like a Microsoft FUDgram run reverse and fact checked. I have to give MS employees some credit; you would have to pay me a serious amount of cash to stand in front of the entire IT industry and make some of the claims they regularly make. You have made them look foolish by just telling it like it is. Hurrah!

DaGoodBoy
devnet ·
No kidding DaGoodBoy. I couldn't stand in front of my peers and tell them a shack is a mansion anyday. Good one Paul! LoL
tuxchick ·
Absolutely hilarious and spot-on. :)

Not quite that simple...

dinotrac ·
Paul, Paul, Paul...

Sometimes focus is a good thing and sometimes it's just tunnel-vision.

Which, of course has nothing to do with your premise: Windows security really is a myth.

It's not a matter of closed v. open, however. Many of the most secure systems in the world run proprietary software born of closed development processes. Not Windows, of course...

Microsoft's problem with Windows is a failure to seriously consider security from the get-go and to infuse their own corporate culture with a belief that security is more than a marketing device.

And, of course, it's not all Microsoft's fault. They play to a pretty stupid crowd. Microsoft tools can make $30,000 programmers impressively productive. Some companies have made the foolish leap to conclude that you therefore need nothing but $30,000 programmers.

On my current assignment, I have encountered Microsoft developers on the other end of our pipeline. They have astonished me with their ignorance of what actually happens on their end, a real pain when trouble-shooting. Worse, they seem unable or (more likely) unwilling to look beneath the covers of Visual Studio to discover how to do simple things like control XML namespaces or the ordering of elements.

Sigh. You get what you pay for.













peragrin ·
Wait your saying that Windows wasn't designed from the begining with such things as user permissions? executable and non-executable files? The ability to seperate out users files and system files? The ability to shutdown, update, and restart services and your web browser without rebooting the entire machine?

Your kidding me right?

Damn to think I was fooled all this time.
dinotrac ·
Peragrin -

Sorry to burst your balloon. Look at the bright side: CP/M didn't have all that stuff, either.
peragrin ·
Hey MSFT has made one GUI that has been secure for network based attacks from the very first installation.

Windows 3.1

Of course Windows 3.1 didn't have any networking abilities but that is beside the point.
tuxchick ·
I would have enjoyed this piece, but for one disturbing aspect: Mr Cyde refers to himself in the third person. Other than that, a most enjoyable analysis.
dinotrac ·
tuxchick -

Don't worry about it. Having spent time with Mr. Cyde, I can assure you that he is about one third a person. Remember: Height isn't everything.
PaulFerris ·
> "You get what you pay for"

Dean, as usual, you talk out of both sides of your mouth at the same time. You act like Free Software is better than proprietary -- although you did qualify some instances, the majority of your discourse indicates otherwise. Then you slip in the jedi mind trick at then end. As usual, you're attempts at obfuscating the issue have not slipped by me.

When did you get the job with Waggon-Wheel-Egg-Storm? Oh, wait, I forgot, you've had it all along.

You bifuricating public-relations hackers are all alike. You crouch in the dust of your boardrooms, nothing but the sound of mulit-media presentations and the smell of cigars to guide your way. You think that you can enter onto a public forum and sway the truth all sly-like -- but I'm onto you and your kind. I can see right through the smoke and spot your tracks a mile away -- and they're shaped like the Dinosaur you've become.

My advice is that you work on a new alias, because this one is toast -- maybe mousetrac or weaseltrac -- Then (THEN!) maybe the LXer reading public will not be able to follow your fancy footwork.

Until then, expect hoards of Trac-spotting LXer types like myself to give you the public flogging you deserve.

I'll go take my meds now ...
PaulFerris ·
tuxchick: I was interviewing myself. It's called the "Ranger Rick mocking style".

A couple of bottles of jack, and you can do anything ;) Even sound like a Microsoft Marketing Droid...

Okay, it wasn't Jack... It was cheap wine.
peragrin ·
Paul are you forgetting something?

Dino's are extinct. So is the old way of working. Maybe he just hasn't yet adapted to his new enviroment yet. Of course the smallest always are the last to know when it snows.

:-) There I just insulted both of you in almost as many sentences.
PaulFerris ·
peragrin: I've been working on growing taller, but so far the audio tapes aren't working for that. Maybe I should try platform shoes?
dinotrac ·
How can I possibly respond to so much unwarranted invective and disrespect when I have tried so hard to keep the conversation on a higher plane?

Well, to be honest, when Paul's around, you can't help but be in a higher plane, but it's only because my back doesn't bend down so well in my old age as it once did.

As to free software better than proprietary -- I don't think you can make a blanket statement unless you're on a blanket. I use free software almost exclusively, but I don't I don't have a problem with proprietary stuff -- so long as it doesn't hold a monopoly.

As to peragrin....

Hey!!!! Who said dinos are extinct? They're not very many any more, but they're easy to find. Most of them work in programming for the major broadcast networks.

tuxchick ·
Mr Cyde, please rest assured that we got it the first time, and were amused.
peragrin ·
Paul, Stop drinking Caffine. that is usually the first place to stop. Then go to a good drywall distributor, and buy a set of their stilts.

As for Dino, I figured most of the current republicans in office were the Dino's.

Hmm.

now I go with Linus's theroy on which software to use. Use what ever is best for the application. If you use one peice of software because of ideals then you are missing out on something.

This coming from the guy who uses a Powerbook with OSX, and Fink installed so he can get the good GPL toys(nmap, snort,etc)
dinotrac ·
Speaking of dinos -- Have you seen Ted Kennedy?
tuxchick ·
But you know what really sux- the dirty buggers are still printing money. Microsoft Earnings Surpass Expectations http://www.eweek.com/article2/0,1759,1756106,00.asp Proof that natural selection is on holiday. :(
AnonymousCoward ·
Paul: one of the best mockeries of motivational tapes I've ever seen is on a kid's video about Jonah by Big Idea one of the characters is a small-enterprise-crazed half-worm half-caterpillar (pictured at http://www.jonahmovie.com/ ) called Haleel who when introduced is listening to tapes saying stuff like "You are a go-getter".

Soon afterwards, the tape affirms "You are a skilled metalworker" and Haleel says "See? I am a skilled metalworker." Pause. "I never knew that!"

BTW, it's not "short", it's "concentrated". (-:
PaulFerris ·
AC: Concentrated! I like that! I'm also "concentrated" about my waistline. I've got to stop dieting, I'm going the wrong way...

Dean is even more concentrated than I am. See this link right here (That's me on the left):

http://linuxtoday.com/special/lweny2001/lwe-community-pannel...

Ever since the publication of that photo, he's attacked my stature something fierce. It's one of those things that happens when you have an axe to grind (he claimed at the time that the photo was edited, of course).

--FeriCyde

Post a comment

A free account is needed to post. Write your comment here first: your text is kept in this browser while you sign up or log in, and is waiting for you when you come back.

Your message:
|||||
10
Markdown: **bold**, *italic*, [text](https://link), - lists, > quotes, $x^2$ for math. Formatting help

Sign up and post (it is free)  or  Log in and post