VISTA - security issues

[peterb]

Sorry if this old hat, but stumbled across this interesting report

http://www.symantec.com/avcenter/ref...ackSurface.pdf

The report centres on the fact that MS have re-written the IP stack from the ground up. While this could be regarded as a good thing, there is a risk (as with all new and complex code) that new vulnerabilities may be introduced.

Do remember that it was the beta version that was tested, and some of the issues may be fixed in the initial rollout (although I wouldn't bet money on it!) but those using the beta may wish to bear some of the points raised in mind, particularly some of the firewall points, where the true stae of the firewall didn't appear to be consistently reported by different front ends.

The issues are reported to particularly affect home users. (Corporate users may (should!) have other/additional measures in place to proect their networks).

[soundbite]

I'd love to get vista but i might wait a while till all bugs ect are sorted.

[MD]

apparently symantec are finding stuff MS has already fixed - remember the public builds we get are out of date compared to what internal MS usage would be.

[jamin]

OMG! Did you actually read all 42 pages of that report?

The new stack is going to be very closely scrutinised by hackers for a long time to come!! I can see a lot of hotfixes being released to deal with new vulnerabilities for a while after public relese of Vista!

[TheAnimus]

well seeing as vista can patch its tcp/ip stack without needing a reboot, or taking the tcp system offline..... its not that much of a worry!

There was an intresting artical on znet about some rather poor 3rd party firewall company complaining about the new kernel mode protection.

A lot of security firms don't like vista, because it threatens their hudge profits.