The Register® — Biting the hand that feeds IT

Feeds

Microsoft picks over Google's Windows exit strategy

Microsoft responded to yesterday’s report that Google was internally ditching the company’s operating system in favour of Linux, Mac OS X Chrome OS by telling anyone that would listen that the Mountain View Chocolate Factory wasn’t exactly immune to occasional security gaffes. Redmond blogger Brandon LeBlanc felt obliged to, in …

This topic is closed for new posts.

Page:

"Android stripped to it's bra and knickers."

You know, I always did have my suspicions about the way C-3PO's voice sounded...

FAIL

Yeah, Yeah

Yawn, the same old misinformation. Don't you just love it when people wheel out 5 year old boilerplate myths.

Windows 7 comes with a firewall and if it weren't for all the antitrust issues they would have included their own antivirus / antispyware too. As it is you can download MS Security essentials which is more than adequate for general purpose use.

Besides, a bog standard (NAT) home router blocks out 99.9% of all attacks almost out of the box. The only thing that really left is trojans and phising which other OSs are equally prone to.

I have a great respect for Linux. In fact if things were different I might have gone that route but it's not the operating system that make Windows what it is, it's the apps and frankly, most Linux apps are second rate. I've spent over 20 years in IT and I've tried a couple of times to move over to Linux but I'm always brought back because a) the Linux apps just don't work as well and b) because I've built up a heck of a lot of knowledge on Windows apps and I'm, not going to ditch all that and start again.

I also think Android is a great smartphone OS and whilst I can imagine owning an Android Tablet to mooch around the house on, but I still can't imagine it on my main desktop at home. It's far too limiting. Chrome by all accounts will be even more restrictive in features and require an internet connection.

I support small businesses running PCs of all sorts (Windows, Macs & Linux) and the number one issue they have is due to internet problems of one sort or another. I would not want to be in a situation where I couldn't even type out a letter, run an accounts package or do some spreadsheet work if the connection suddenly went down.

Chrome may be getting ready for the internet but the internet is certainly not ready for Chrome.

Google are going back to the 'mainframe'. Chrome OS is basically nothing more than a thin client OS. Google has the servers onsite so going the Chrome OS route inhouse makes total sense. I'm just not sure there will be enough flexibility in the system for all the small & medium sized businesses out there.

I'm worried about Chrome OS as a philosophy too. If you take thing to the logical end, this will mean Google will own all your apps and hold all your data. Where does the application developer fit into this? If you were a developer be happy with one outfit controlling what you could or could not distribute?

Lastly, If you thought Microsoft's monopoly was bad, just wait five years and see how bad it's going to get when Google, Apple (and Microsoft) really start locking things down. They all talk of 'standards' but they're all trying to differentiate, through fair means and foul and I believe there's going to be a massive issue of top level fragmentation which is going to hurt businesss and especially small developers. The web is about to be chopped into pieces and Business will end up having to pay three times (or more) to make sure they're connected to everything.

:D

(not one for sticking to a point and much prefers a good ol ramble)

Same switching issue here

I had the same issue with trying to switch from Windows to Linux - some of the apps I need weren't there and/or I couldn't convert due to invested time/data creation or usability issues - gui design is seldom best done by devs.

So I just switched to a Mac instead as it got me closer to Linux and still had the apps I needed. Never been happier with my machine. I'd have preferred to use Linux as I like it, but you go with what fits the bill.

Anonymous Coward
Jobs Halo

Hardly a big swing IMO

everyone I've seen working for google was using a MBP anyway.

Boffin

OK in the Googleplex maybe

As far as I'm aware, Chrome OS depends on a fully networked environment, which I have no doubt the Googleplex has in spades. It runs web apps exclusively.

Also, it runs only on very specific hardware - which presumably Google has its desktop estate in this format already, or its a very expensive hardware refresh required.

I'm not saying Chrome OS doesn't have its place, but out here in the real world my ability to store documents on my hardware and available independently of a good enough network connetion and/or cloud is my priority.

Wasn't there a reason we moved away from green screen terminals??

Anonymous Coward
Anonymous Coward

eating their own dogfood

it'll be interesting to see how well Google get on at eating their own dogfood.

At least if they were going to OSX they would still have a tried and tested operating platform - sure, not as widespread and with the rich application eco-system Windows has... but it does have a version of Office so you're not stuck with Open Office for off-line use

If they really are switching wholesale to ChromeOS and Docs to run their business I wish them all the best

I can't imagine that their real motivation is security concerns... if it was they wouldn't be running a decade old OS and browser without decent security, they would have trained their employees to not click random links in IM messenger windows and they'd provide some backing for their reasons ... this is about scoring a cheap shot at Microsoft in the press because it makes them feel cool.

Paris Hilton

decades old OS and browser?

FYI, Windows XP is still a supported corporate OS and IIRC Internet Explorer v6 was part of the OS and had been getting updates. And I suppose they should have been running Microsoft's Windows Vista or maybe thrown away the hardware and purchased new hardware which would run Windows 7?

FYI, there has not been a very good upgrade path from Microsoft for businesses to follow for the past 20 years except rip and replace. Each time they have said that the latest new OS is the best ever but always shown to be less than expected and costing more and more each time. Google already uses alot of Linux based software inhouse via Goobuntu but since securing Windows is like a dog chasing its tail, that breakin via Windows PCs was probably the last straw.

I guess Microsoft should have let Linux own the netbook segment and let Windows XP die but in their brilliance they shipped Windows Vista and had nothing to use but their "old OS" and even then, the netbook vendors needed to bump up the hardware to run it. In my eyes, every OS Microsoft ships is an "old OS".

Paris because no matter how old she gets, her picture stays the same.

FAIL

Fail

My shiny new MacBook Air comes with the firewall off _by default_ - a situation not seen in the Windows world since XPSP2.

As for:

"Does anybody dare to connect a fully patched windows install to the internet, without it running

1) a firewall

2) antivirus

3) antispyware"

That's a load of crap, you'd have to deliberately disable the firewall first anyway and I doubt there are that many known unpatched remote execution and elevation exploits out there for this to be possible.

What you are actually doing is quoting ~5 year old anti-MS propaganda where someone would use a pre SP1 disk with no patches half a decade after release and then be all surprised when they got rooted in 5 minutes.

Do try to keep up.

Re: Fail

"My shiny new MacBook Air comes with the firewall off _by default_ - a situation not seen in the Windows world since XPSP2."

Does your shiny MacBook Air have any ports open by default? (I suspect yes, but the question needs to be asked). Ubuntu catches grief since it doesn't have a firewall turned on by default, but it also doesn't have any ports open by default either.

Also, the end game isn't necessarily everything running on Google's servers. I'm guessing they have a plan to sell folks standalone Google service clouds that you can roll into your own data center.

FAIL

Internet Explorer 8 is tip-top secure?

IE8 is still NOT secure. Try http://crashbrowser.j38.eu/ and leave it for 1 minute. It will crash the browser.

Now, try it on a Chrome browser...

FAIL

re: crash != insecure

You do know don't you, that crashing a browser doesn't make it insecure? Have just tried that website on FF, and yes, very clever, it recursively produces iFrames and fills up a lot of memory - my FF gets to about 500MB.

Just checked IE8 - it doesn't crash either. Presumably if it gets big enough (judging by the code, it can vary) it can run into memory exceptions. If (and only if) it spills its data into a protected kernel space, then yes, it's insecure. If it just craps out and closes, then I find that quite acceptable.

Anonymous Coward
FAIL

Windows Security

As others have pointed out, it is possible to lock down a Windows machine into a quite secure state. (Using a firewall, using IE8, not running as an Admin for normal use)

The issue is that MS consciously installs the default user as the admin user when running the Windows 7 installation. Probably "normal users can't be bothered with the idea of a normal user versus an Admin user". Apple and Linux don't do this and that means WINDOWS => FAIL.

Also, Linux and BSD have very strong sandbox mechanisms (LSM, chroot(), SE Linux etc) built into the OS. Microsoft has none of that. That means WINDOWS => FAIL.

Sometimes I think MS still lives in the MS-DOS mindset; that is the only way I can explain these things and stuff like ActiveX.

Or, also very nice, their Windows Update Servers. If you are serious about security and would like to lock down your firewall, you have to allow nice URLs like

windowsupdate.c653467.acmecorpNotRelatedToMS.com

windowsupdate.afpusher77.acmecorptRelatedToMS.com

windowsupdate.c653467.microsoft.com

And these URLs change weekly. All part of the Good Windows Update System !

WINDOWS IS A BIG FAT FAIL. Can somebody return Steve B. to the Redmond Zoo ?

Gates Halo

Failure is relative

Windows is commercially successful and in a capitalist world, that's NOT a FAIL.

Coffee/keyboard

That's the standard?

re: "Windows is commercially successful and in a capitalist world, that's NOT a FAIL."

So was Cocaine and Morphine at one time. Your point?

Thing is, commercial success has nothing to do with technical merit.

Anonymous Coward
FAIL

RE: Failure is relative

You forgot to mention that the BeeGees were once commercially successful as was the "music" created by Pete Waterman...

I didn't buy either because there was better stuff available. Same applies to Windows.

Default admin on Win/ Linux

Mostly agree, but -

"The issue is that MS consciously installs the default user as the admin user when running the Windows 7 installation. Probably "normal users can't be bothered with the idea of a normal user versus an Admin user". Apple and Linux don't do this and that means WINDOWS => FAIL."

Unfortunately that is exactly what Ubuntu desktop does by default (at least as of 8.04 LTS). Also the user access control is Win is a little more fine grained and easier to setup than the corresponding one in Unix, no need to mess around with chown, user groups etc... Had to struggle a bit to setup a normal user id with the requisite permissions in 8.04, hope this is fixed in 10.04 LTS...

@j38

Secure has nothing to do with Stable. Plus that site of yours locks up Firefox too - I fail to see your point.

At the end of the day...

M$'s main biz is selling software licences. Google's is selling my personal data to advertisers (and anyone else who turns up with a wallet/warrant). Of the two, I'll take M$ every time.

The idea of running everything in the cloud -effectively giving someone else veto over whether you can access your stuff- fuck that with something pointy. I can see how it would appeal to big biz to offload a lot of the server/tech/maintenance costs, but it definitely doesn't do it for me.

MacOS- walled garden. Someone else with veto over what you can/not do on your own kit.

Linux would be the obvious choice were I starting again; but all the shiny stuff is written for Windoze and I can get the job (whatever it happens to be) done with it. (Insert obligatory Wine comment here). I've already done the 'locking down Windoze' research and -as for me computers are a tool rather than a lifestyle- it'll do. Sure; there's flaws. Big ones. But you can get stuff done with it, and that's the point.

Anonymous Coward
Anonymous Coward

Walled Garden

Currently, this only applies to iPad and iPhone. You can run any MacOS app on a Mac; no approval by King Steve necessary.

Anonymous Coward
Anonymous Coward

Not really your day.....

Since when is MacOS a walled garden? I'm running mostly open source software - there are no problems there. If you are talking iPhone OS which is, admittedly a subset of MacOS then yes that is walled (have iPod & iPad - don't have a problem with the control in that context plus I knew what I was getting when I made the purchases).

And @38 - damned Safari - still going after 10 minutes....

Walls schmalls

"Since when is MacOS a walled garden?"

Since it couldn't be installed on anything else other than "one apple-branded computer" without supposedly breaking an EULA.

Different wall, different garden, but still...

Anonymous Coward
Go

Leading Indicators

I did a little googleing and looked at the page number estimator:

"+job posting +gtk +c++" -> about 13.000

"+job posting +qt +c++" -> about 97000

"+job posting +mfc +c++" -> about 62000

"+job posting +wxwidgets +c++" -> about 3200

This seems to indicate that there are quite a few apps in the pipeline which can easily be ported to some non-Windows operating system.

Gates Horns

Could happen

"Windows is known for being vulnerable to attacks by hackers and more susceptible to computer viruses than other operating system"

...but there's a crack team of Microsoft developers just waiting to put that right just as soon as Chrome OS gets released!

FAIL

Fail

Let me get this straight, Google, who's entire backbone is built on linux, its mobile OS and its up and coming desktop OS, all built on linux, everything that is holy to them is built on linux, got hacked by the chineese, and they're blaming it on microsoft.

sounds to me like the people buying in to this googlish spin need be riding on a little yellow bus while wearing a football helmet, because you're fucking retarded...

FAIL

Yes, get it straight

The hackers got in by exploiting Windows machines in use on desktops in Google's network.

Not the servers.

Not the mobile OS.

Not the upcoming desktop Chrome OS.

Got that straight now?

Google have noted that most attacks are made against Windows machines because of their high numbers. Moving to away from that OS to less used/attacked ones is roughly the same as parking your car somewhere that has low rates of car crime rather than somewhere that has high rates. It won't improve the inherent security of the actual vehicle, but it reduces the number of potential attacks; it's about improving your odds.

"our focus and investment continues to surpass others"

Of course it does ! When you build a sieve to hold water, you're gonna need a lot more hole-patching funding than the guy who builds a proper bucket.

Not impressed.

Alert

Fools And Their Opinions

I hate to break it to the supposed security conscious "experts" out there, but you can connect a COMPLETELY UNPATCHED Windows 2000 box to the internet, no firewall, no nothing, forever and have it secure.

As I've always said and will continue to say, the great secret is very simple. Do not leave ports open. Disable by default, use APPLICATIONS that are patched because THAT is where your open port vulnerabilities lie when a box is only running what you needed. Besides, what is the point of leaving code listening on a port if you are going to firewall it away also?

It is the equivalent of saying don't lock the bank vault door, put a guard dog next to a stack of cash in the parking lot.

Anonymous Coward
WTF?

RE: Fools And Their Opinions

Umm. Let me get this straight...

Are you suggesting that I connect the computer but close down the firewall so no traffic can get through?

Why bother connecting it at all?

If on the other hand, you're suggesting closing all ports except those required to view web sites. Well, we know that isn't very secure on Windows machines anyway...

If you really want to connect an elderly machine to the internet then I suggest a ZX Spectrum. There are no internet viruses for those...

Gates Horns

Remember "Trustworthy Computing"?

And www.trustworthycomputing.com?

That is all.

that was yet another 'the next version will be better' skits

And that was when Windows XP came out. We'd already had at least 5 years of the public having Internet connected computers and security was just starting to become a focus for Microsoft. I forget how many virus infections had already shut down businesses and services by this point. Wasn't the great east cost blackout due to an energy company network being flooded with Windows virus messages so the computer sending grid status couldn't get through? Trustworthy Computing... ha, it's all just PR blah blah from Microsoft and with every word from their mouths, the phrase I keep hearing about Microsoft being a marketing company and not a technology company sounds about right.

FAIL

Google PR spin

Windows is fine, I think the problem lies with Google's geeks - they let them install any OS they like.

Great when your a linux geek, but when the admin or PR noobs install an old version of windows and don't patch it, don't update anything, probably don't install AV, maybe turn off the Firewall (if their crummy version even had it in the first place).

Well, you can see where it goes.

If Google had strict IT governance instead of pandering to their geeks nobody would have been running IE6 in the first place.

Dumping Windows will help, but it's just sticking a plaster over the wound, not a cure.

Anonymous Coward
FAIL

RE: Google PR spin

"If Google had strict IT governance instead of pandering to their geeks nobody would have been running IE6 in the first place."

Come on, you know as well as I do why they had machines with IE6. It's because they're still VERY commonplace. Every client my employer has sent me to recently is on XP with IE6 and they're not planning to upgrade soon.

Paris Hilton

heh! heh!

"I have done so for over 10 years without being penetrated" - heh! heh!

Paris - because, well, she hasn't.

Flame

Sue them...

"LeBlanc grumbled that the assertion of the Financial Times (which wrote the report) that “Windows is known for being vulnerable to attacks by hackers and more susceptible to computer viruses than other operating system” could not be supported by the facts."

Come on Microsoft, if you're so certain the FT are wrong then sue. Then we can all look forwards to finding out who the liars are.

I'll believe it when I see it.

I've said it before, and I'll say it again.

Though I grant that Windows' biggest security flaw is, well, most of its userbase, that only accounts for such events as people logging in as Administrator and clicking dodgy e-mail attachments. It does not account for the things that don't require any logging in or any attachment-clicking, and there's never a shortage of those. It should certainly not account for quotes from military personnel such as "USB devices pose a unique threat to our warfighting system."

An OS isn't secure because some analyst said it is or because the people who write it promise to have finally caught up with the last decade's state of the art. You learn an OS is secure when it has withstood attack for years and, thereafter, not become widely known in an industry as being everybody's bitch. Has any Windows yet managed this?

Anonymous Coward
Jobs Horns

LOL Microsoft - Bahhhh Humbug.

I hate Microsoft with a passion - partly for it's dumbarse management and a complete lack of innovating thinking....

But mostly for it's shit software.......

In a nutshell:

Microsoft gave me all the reasons to ditch them and their products;

And the competition gave me every reason to keep using theirs.....

Anonymous Coward
Gates Horns

turn about

Microsoft relied on AS400s for many years after they began bashing IBM's 'dinosaur' systems.

...falling victim to the trolls

Jlocke puts down Microsoft because the *first* account you create on Win7, during installation, has admin rights. But every subsequent account is minimum privilege by default and recommends a strong password. This doesn't seem all that different to me to the process used for installing Linux or MacOS.

Sure, it is easy to bash Microsoft but these days it is getting increasingly lazy to do so. Most of the anti-MS sentiment seems to be based on decade-old products. Is there no allowance for rehabilitation or improvement?

And incidentally I'd say to Random_Walk that both cocaine and morphine still seem to be very successful. Even being made illegal hasn't managed to destroy the market for cocaine and the medical profession don't seem to have stopped using morphine.

Anonymous Coward
Stop

RE: ...falling victim to the trolls

"Sure, it is easy to bash Microsoft but these days it is getting increasingly lazy to do so."

Last I looked, "easy" was spelt with an "e". That word you used was "lazy".

...but you're right. Even the lazy can bash Microsoft. You don't have to look hard for ammunition or stories to use against them. Their OS is and always has been a mess of security holes. They seriously need to start again from the ground up and write a new OS.

'They seriously need to start again from the ground up and write a new OS.'

They did - cost $5 billion - was called Vista.

It was so bloated it wouldn't even fit in to a single code repository.

"They seriously need to start again from the ground up and write a new OS"

I couldn't agree more & long overdue

Also need to get rid of the registry & all the other crufty stuff they've bodged and worked around over the years

FAIL

Vista is *not* Longhorn

"They did - cost $5 billion - was called Vista."

You couldn't be more wrong if you tried.

Microsoft *tried* to rewrite Windows, it was called "Longhorn" and it was huge Epic Fail.

They gave up after 5 years and spent another year doing a slapdash face lift to Server2K3 in order to get something, *anything*, out the door in an effort to stem the rising levels of derision and ridicule being sent in their direction from the rest of the IT industry.

Anonymous Coward
Anonymous Coward

the "Windows exit strategy"

Is that where you shout "boom goes the dynamite" before kicking your partner out of the car and driving off in a cloud of wheel spin?

Anonymous Coward
Thumb Down

It's easy to play catch up.

"When it comes to security, even hackers admit we’re doing a better job making our products more secure than anyone else. And it’s not just the hackers; third party influentials [sic] and industry leaders like Cisco tell us regularly that our focus and investment continues to surpass others"

It is easy to surpass others when they are already doing it. They can't go back and resecure their browers and software if it is already secure, can they? So Microsoft has all the ground to cover to catch up. So have to invest, have to put their money into making secure what their less than great developers came up with in the first place.

Vista wasn't new????? Come on guys, anyone that developed something new and yet still managed to cram all that XP stuff in is blinkered. It wasn't new or if it was we need to see Redmonds dictionary defiinition of 'New'.

Windows 7 isn't new, it is the crud vista had with yet more glossy stuff and some altered screens. Then thrown in are some linux widgets from Ubuntu and Mandriva to make it look different.

WTF?

@jlocke

Windows 7 asks you to create users during the install process. It only defaults to the admin account if you choose to skip this step, so if that's the case on your machine it's your own fault. By default windows does have it right on this point.

no way, users on Windows?

well then, welcome to the 1980s Microsoft. What took you so long, have your customers not been asking you for this feature? Yup, it is 2010.

@ Matthew 3 ...falling victim to the trolls #

I'm fairly sure most linux distros still ask you for a root password and then insist on creating a standard user account as well. (Debian for a start)

Some of the more cuddly distros don't operate in that way, requesting your user password again when you try to do any actions requiring root access, but it is at least a positive action you need to take. (Windows 7 has UAC of course, which will give you a yes/no)

Fibbing

"LeBlanc grumbled that the assertion... could not be supported by the facts."

Someone's telling outright porkies, and for once it isn't the journalist from the Financial Times.

Page:

This topic is closed for new posts.