<?xml version="1.0" encoding="utf-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: Vista&#8217;s Security Hobbled By Microsoft&#8217;s Own Insecure Past</title>
	<atom:link href="http://danielmiessler.com/blog/vistas-security-hobbled-by-microsofts-own-insecure-past/feed" rel="self" type="application/rss+xml" />
	<link>http://danielmiessler.com/blog/vistas-security-hobbled-by-microsofts-own-insecure-past</link>
	<description>grep understanding</description>
	<lastBuildDate>Fri, 25 May 2012 02:15:50 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.2</generator>
	<item>
		<title>By: Alan</title>
		<link>http://danielmiessler.com/blog/vistas-security-hobbled-by-microsofts-own-insecure-past/comment-page-1#comment-29326</link>
		<dc:creator>Alan</dc:creator>
		<pubDate>Fri, 16 Feb 2007 15:08:43 +0000</pubDate>
		<guid isPermaLink="false">http://dmiessler.com/archives/1143#comment-29326</guid>
		<description>&lt;p&gt;A better solution would be to allow those programs to be installed in virtual machines (or something like a chroot jail).  That would probably still prevent some apps from working unless Microsoft also provided a way to authorize these isolated processes to communicate with one another.&lt;/p&gt;

&lt;p&gt;But Vista was late as it is, and this would have made it later.  And would have brought a lot of flack for the extra complexity (and probably the user experience).&lt;/p&gt;
</description>
		<content:encoded><![CDATA[<p>A better solution would be to allow those programs to be installed in virtual machines (or something like a chroot jail).  That would probably still prevent some apps from working unless Microsoft also provided a way to authorize these isolated processes to communicate with one another.</p>

<p>But Vista was late as it is, and this would have made it later.  And would have brought a lot of flack for the extra complexity (and probably the user experience).</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Alan</title>
		<link>http://danielmiessler.com/blog/vistas-security-hobbled-by-microsofts-own-insecure-past/comment-page-1#comment-247016</link>
		<dc:creator>Alan</dc:creator>
		<pubDate>Fri, 16 Feb 2007 15:08:00 +0000</pubDate>
		<guid isPermaLink="false">http://dmiessler.com/archives/1143#comment-247016</guid>
		<description>&lt;p&gt;A better solution would be to allow those programs to be installed in virtual machines (or something like a chroot jail).  That would probably still prevent some apps from working unless Microsoft also provided a way to authorize these isolated processes to communicate with one another.&lt;/p&gt;

&lt;p&gt;But Vista was late as it is, and this would have made it later.  And would have brought a lot of flack for the extra complexity (and probably the user experience).&lt;/p&gt;
</description>
		<content:encoded><![CDATA[<p>A better solution would be to allow those programs to be installed in virtual machines (or something like a chroot jail).  That would probably still prevent some apps from working unless Microsoft also provided a way to authorize these isolated processes to communicate with one another.</p>

<p>But Vista was late as it is, and this would have made it later.  And would have brought a lot of flack for the extra complexity (and probably the user experience).</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Richard King</title>
		<link>http://danielmiessler.com/blog/vistas-security-hobbled-by-microsofts-own-insecure-past/comment-page-1#comment-29322</link>
		<dc:creator>Richard King</dc:creator>
		<pubDate>Fri, 16 Feb 2007 14:54:09 +0000</pubDate>
		<guid isPermaLink="false">http://dmiessler.com/archives/1143#comment-29322</guid>
		<description>&lt;p&gt;Can&#039;t speak for Linux, but I install apps on OS X as a non-privileged user all the time.  Very few OS X apps actually even have installs, typically you drag the application to where you want to install it and you&#039;re done.&lt;/p&gt;

&lt;p&gt;Each user has their own ~/Applications folder which, by default, they can do whatever they like in.   I think, by default the root Applications folder is only writable with admin privileges, but it in no way precludes you from &#039;installing&#039; and running stuff in any directory you do have write permissions for.&lt;/p&gt;
</description>
		<content:encoded><![CDATA[<p>Can&#8217;t speak for Linux, but I install apps on OS X as a non-privileged user all the time.  Very few OS X apps actually even have installs, typically you drag the application to where you want to install it and you&#8217;re done.</p>

<p>Each user has their own ~/Applications folder which, by default, they can do whatever they like in.   I think, by default the root Applications folder is only writable with admin privileges, but it in no way precludes you from &#8216;installing&#8217; and running stuff in any directory you do have write permissions for.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Richard King</title>
		<link>http://danielmiessler.com/blog/vistas-security-hobbled-by-microsofts-own-insecure-past/comment-page-1#comment-247015</link>
		<dc:creator>Richard King</dc:creator>
		<pubDate>Fri, 16 Feb 2007 14:54:00 +0000</pubDate>
		<guid isPermaLink="false">http://dmiessler.com/archives/1143#comment-247015</guid>
		<description>&lt;p&gt;Can&#039;t speak for Linux, but I install apps on OS X as a non-privileged user all the time.  Very few OS X apps actually even have installs, typically you drag the application to where you want to install it and you&#039;re done.&lt;/p&gt;

&lt;p&gt;Each user has their own ~/Applications folder which, by default, they can do whatever they like in.   I think, by default the root Applications folder is only writable with admin privileges, but it in no way precludes you from &#039;installing&#039; and running stuff in any directory you do have write permissions for.&lt;/p&gt;
</description>
		<content:encoded><![CDATA[<p>Can&#8217;t speak for Linux, but I install apps on OS X as a non-privileged user all the time.  Very few OS X apps actually even have installs, typically you drag the application to where you want to install it and you&#8217;re done.</p>

<p>Each user has their own ~/Applications folder which, by default, they can do whatever they like in.   I think, by default the root Applications folder is only writable with admin privileges, but it in no way precludes you from &#8216;installing&#8217; and running stuff in any directory you do have write permissions for.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: maht</title>
		<link>http://danielmiessler.com/blog/vistas-security-hobbled-by-microsofts-own-insecure-past/comment-page-1#comment-29318</link>
		<dc:creator>maht</dc:creator>
		<pubDate>Fri, 16 Feb 2007 14:39:47 +0000</pubDate>
		<guid isPermaLink="false">http://dmiessler.com/archives/1143#comment-29318</guid>
		<description>&lt;p&gt;What use a sandbox and virtualized drives?
It wouldn&#039;t be that difficult to intercept system calls and avoid the situation.
Windows just sucks, whichever way you slice it.&lt;/p&gt;
</description>
		<content:encoded><![CDATA[<p>What use a sandbox and virtualized drives?
It wouldn&#8217;t be that difficult to intercept system calls and avoid the situation.
Windows just sucks, whichever way you slice it.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: maht</title>
		<link>http://danielmiessler.com/blog/vistas-security-hobbled-by-microsofts-own-insecure-past/comment-page-1#comment-247014</link>
		<dc:creator>maht</dc:creator>
		<pubDate>Fri, 16 Feb 2007 14:39:00 +0000</pubDate>
		<guid isPermaLink="false">http://dmiessler.com/archives/1143#comment-247014</guid>
		<description>&lt;p&gt;What use a sandbox and virtualized drives?
It wouldn&#039;t be that difficult to intercept system calls and avoid the situation.
Windows just sucks, whichever way you slice it.&lt;/p&gt;
</description>
		<content:encoded><![CDATA[<p>What use a sandbox and virtualized drives?
It wouldn&#8217;t be that difficult to intercept system calls and avoid the situation.
Windows just sucks, whichever way you slice it.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Tim</title>
		<link>http://danielmiessler.com/blog/vistas-security-hobbled-by-microsofts-own-insecure-past/comment-page-1#comment-29172</link>
		<dc:creator>Tim</dc:creator>
		<pubDate>Fri, 16 Feb 2007 03:34:07 +0000</pubDate>
		<guid isPermaLink="false">http://dmiessler.com/archives/1143#comment-29172</guid>
		<description>&lt;p&gt;Perhaps I&#039;ll play the devil&#039;s advocate here.  Did anyone read the &lt;a href=&quot;http://cmars.wordpress.com/2007/02/14/why-is-linux-more-secure-than-vista/&quot; rel=&quot;nofollow&quot;&gt;pingback article&lt;/a&gt; on &lt;a href=&quot;http://dmiessler.com/archives/1141&quot; rel=&quot;nofollow&quot;&gt;Daniel&#039;s last Vista security post&lt;/a&gt;?&lt;/p&gt;

&lt;p&gt;I think the author of that pingback post had a point.  How often do you install a piece of software in linux without elevated privileges?  What about Macs?&lt;/p&gt;

&lt;p&gt;Granted, usually with linux you&#039;re more aware of what you&#039;re doing (it&#039;s not as simple as pressing a button), but the point still stands.  Almost &lt;em&gt;any&lt;/em&gt; application you install on &lt;em&gt;any&lt;/em&gt; OS will need elevated privileges.&lt;/p&gt;
</description>
		<content:encoded><![CDATA[<p>Perhaps I&#8217;ll play the devil&#8217;s advocate here.  Did anyone read the <a href="http://cmars.wordpress.com/2007/02/14/why-is-linux-more-secure-than-vista/" rel="nofollow">pingback article</a> on <a href="http://dmiessler.com/archives/1141" rel="nofollow">Daniel&#8217;s last Vista security post</a>?</p>

<p>I think the author of that pingback post had a point.  How often do you install a piece of software in linux without elevated privileges?  What about Macs?</p>

<p>Granted, usually with linux you&#8217;re more aware of what you&#8217;re doing (it&#8217;s not as simple as pressing a button), but the point still stands.  Almost <em>any</em> application you install on <em>any</em> OS will need elevated privileges.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Tim</title>
		<link>http://danielmiessler.com/blog/vistas-security-hobbled-by-microsofts-own-insecure-past/comment-page-1#comment-247013</link>
		<dc:creator>Tim</dc:creator>
		<pubDate>Fri, 16 Feb 2007 03:34:00 +0000</pubDate>
		<guid isPermaLink="false">http://dmiessler.com/archives/1143#comment-247013</guid>
		<description>&lt;p&gt;Perhaps I&#039;ll play the devil&#039;s advocate here.  Did anyone read the &lt;a href=&quot;http://cmars.wordpress.com/2007/02/14/why-is-linux-more-secure-than-vista/&quot; rel=&quot;nofollow&quot;&gt;pingback article&lt;/a&gt; on &lt;a href=&quot;http://dmiessler.com/archives/1141&quot; rel=&quot;nofollow&quot;&gt;Daniel&#039;s last Vista security post&lt;/a&gt;?&lt;/p&gt;

&lt;p&gt;I think the author of that pingback post had a point.  How often do you install a piece of software in linux without elevated privileges?  What about Macs?&lt;/p&gt;

&lt;p&gt;Granted, usually with linux you&#039;re more aware of what you&#039;re doing (it&#039;s not as simple as pressing a button), but the point still stands.  Almost &lt;em&gt;any&lt;/em&gt; application you install on &lt;em&gt;any&lt;/em&gt; OS will need elevated privileges.&lt;/p&gt;
</description>
		<content:encoded><![CDATA[<p>Perhaps I&#8217;ll play the devil&#8217;s advocate here.  Did anyone read the <a href="http://cmars.wordpress.com/2007/02/14/why-is-linux-more-secure-than-vista/" rel="nofollow">pingback article</a> on <a href="http://dmiessler.com/archives/1141" rel="nofollow">Daniel&#8217;s last Vista security post</a>?</p>

<p>I think the author of that pingback post had a point.  How often do you install a piece of software in linux without elevated privileges?  What about Macs?</p>

<p>Granted, usually with linux you&#8217;re more aware of what you&#8217;re doing (it&#8217;s not as simple as pressing a button), but the point still stands.  Almost <em>any</em> application you install on <em>any</em> OS will need elevated privileges.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Rick</title>
		<link>http://danielmiessler.com/blog/vistas-security-hobbled-by-microsofts-own-insecure-past/comment-page-1#comment-29078</link>
		<dc:creator>Rick</dc:creator>
		<pubDate>Thu, 15 Feb 2007 20:37:17 +0000</pubDate>
		<guid isPermaLink="false">http://dmiessler.com/archives/1143#comment-29078</guid>
		<description>&lt;p&gt;Simple solution... do not run it.
While it sounds like a pleasant fantasy, why can we simply not move away.  Sure there are things that we can not, but where we can... why don&#039;t we.  People do not because they are afraid to learn new things or be outside of their comfort zone, so M$ power will remain for another few years until enough of the younger generations move up and start to show the highlights and safeties of the alternatives.  Then Mac&#039;s market share will have a chance to flourish.&lt;/p&gt;
</description>
		<content:encoded><![CDATA[<p>Simple solution&#8230; do not run it.
While it sounds like a pleasant fantasy, why can we simply not move away.  Sure there are things that we can not, but where we can&#8230; why don&#8217;t we.  People do not because they are afraid to learn new things or be outside of their comfort zone, so M$ power will remain for another few years until enough of the younger generations move up and start to show the highlights and safeties of the alternatives.  Then Mac&#8217;s market share will have a chance to flourish.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Rick</title>
		<link>http://danielmiessler.com/blog/vistas-security-hobbled-by-microsofts-own-insecure-past/comment-page-1#comment-247012</link>
		<dc:creator>Rick</dc:creator>
		<pubDate>Thu, 15 Feb 2007 20:37:00 +0000</pubDate>
		<guid isPermaLink="false">http://dmiessler.com/archives/1143#comment-247012</guid>
		<description>&lt;p&gt;Simple solution... do not run it.
While it sounds like a pleasant fantasy, why can we simply not move away.  Sure there are things that we can not, but where we can... why don&#039;t we.  People do not because they are afraid to learn new things or be outside of their comfort zone, so M$ power will remain for another few years until enough of the younger generations move up and start to show the highlights and safeties of the alternatives.  Then Mac&#039;s market share will have a chance to flourish.&lt;/p&gt;
</description>
		<content:encoded><![CDATA[<p>Simple solution&#8230; do not run it.
While it sounds like a pleasant fantasy, why can we simply not move away.  Sure there are things that we can not, but where we can&#8230; why don&#8217;t we.  People do not because they are afraid to learn new things or be outside of their comfort zone, so M$ power will remain for another few years until enough of the younger generations move up and start to show the highlights and safeties of the alternatives.  Then Mac&#8217;s market share will have a chance to flourish.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Riley</title>
		<link>http://danielmiessler.com/blog/vistas-security-hobbled-by-microsofts-own-insecure-past/comment-page-1#comment-29075</link>
		<dc:creator>Riley</dc:creator>
		<pubDate>Thu, 15 Feb 2007 20:17:47 +0000</pubDate>
		<guid isPermaLink="false">http://dmiessler.com/archives/1143#comment-29075</guid>
		<description>&lt;p&gt;If Vista was not today available, would anyone care?  When Vista&#039;s release was delayed, did anyone care?&lt;/p&gt;

&lt;p&gt;Vista solves no compelling user needs that can&#039;t be, indeed are being, solved by other third-party products.  On the other hand, Vista creates many new user problems, including shifting control of the computer from the user to Redmond.&lt;/p&gt;

&lt;p&gt;One way to consider the problem is to imagine that Microsoft was a Japanese or German company.  If it was, do you think that business would allow it to assume such profound control over a given company&#039;s data and desktops?  No, there&#039;d be an outcry for protective legislation.&lt;/p&gt;

&lt;p&gt;But Microsoft has enormous lobbying power and so today continues to get away with operating as an entirely self-serving monopoly that only grudgingly responds to customer needs.&lt;/p&gt;
</description>
		<content:encoded><![CDATA[<p>If Vista was not today available, would anyone care?  When Vista&#8217;s release was delayed, did anyone care?</p>

<p>Vista solves no compelling user needs that can&#8217;t be, indeed are being, solved by other third-party products.  On the other hand, Vista creates many new user problems, including shifting control of the computer from the user to Redmond.</p>

<p>One way to consider the problem is to imagine that Microsoft was a Japanese or German company.  If it was, do you think that business would allow it to assume such profound control over a given company&#8217;s data and desktops?  No, there&#8217;d be an outcry for protective legislation.</p>

<p>But Microsoft has enormous lobbying power and so today continues to get away with operating as an entirely self-serving monopoly that only grudgingly responds to customer needs.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Riley</title>
		<link>http://danielmiessler.com/blog/vistas-security-hobbled-by-microsofts-own-insecure-past/comment-page-1#comment-247011</link>
		<dc:creator>Riley</dc:creator>
		<pubDate>Thu, 15 Feb 2007 20:17:00 +0000</pubDate>
		<guid isPermaLink="false">http://dmiessler.com/archives/1143#comment-247011</guid>
		<description>&lt;p&gt;If Vista was not today available, would anyone care?  When Vista&#039;s release was delayed, did anyone care?&lt;/p&gt;

&lt;p&gt;Vista solves no compelling user needs that can&#039;t be, indeed are being, solved by other third-party products.  On the other hand, Vista creates many new user problems, including shifting control of the computer from the user to Redmond.&lt;/p&gt;

&lt;p&gt;One way to consider the problem is to imagine that Microsoft was a Japanese or German company.  If it was, do you think that business would allow it to assume such profound control over a given company&#039;s data and desktops?  No, there&#039;d be an outcry for protective legislation.&lt;/p&gt;

&lt;p&gt;But Microsoft has enormous lobbying power and so today continues to get away with operating as an entirely self-serving monopoly that only grudgingly responds to customer needs.&lt;/p&gt;
</description>
		<content:encoded><![CDATA[<p>If Vista was not today available, would anyone care?  When Vista&#8217;s release was delayed, did anyone care?</p>

<p>Vista solves no compelling user needs that can&#8217;t be, indeed are being, solved by other third-party products.  On the other hand, Vista creates many new user problems, including shifting control of the computer from the user to Redmond.</p>

<p>One way to consider the problem is to imagine that Microsoft was a Japanese or German company.  If it was, do you think that business would allow it to assume such profound control over a given company&#8217;s data and desktops?  No, there&#8217;d be an outcry for protective legislation.</p>

<p>But Microsoft has enormous lobbying power and so today continues to get away with operating as an entirely self-serving monopoly that only grudgingly responds to customer needs.</p>
]]></content:encoded>
	</item>
</channel>
</rss>

