Re: Did Microsoft just issue a new patch?

Tech-Archive recommends: Fix windows errors by optimizing your registry

From: Ken Gardner (KenGardner_at_discussions.microsoft.com)
Date: 02/23/05 

Date: Wed, 23 Feb 2005 14:07:01 -0800

"Ad" wrote:

> > Just curious: how many times has security actually been compromised on any
> > of your computers using Windows? Once? Twice? Three times? More than
 
> None really as far as I know, apart from the odd virus, whihc is delt
> with quickly. Anyspyware is also delt with, so do not get much chance to
> send anything home.

Well, that's my point. Virtually all security threats I know of involve
situations in which the user initiates the downloading and installation of
crudware on their machines. Obviously you know better, and so do other
responsible users. Microsoft is constantly updating its software to make
their software more secure -- as do many other software vendors as well --
but ultimately it is up to users to practice safe and secure computing
instead of downloading and installing crudware and then blaming Microsoft and
other software vendors for the resulting problems.
 
> I also do not use Internet Exploder or Inlook Express, so that helps
> with security.

I do use Internet Explorer and have had never had a problem related to
privacy or security. It is simply a matter of knowing how to configure it
properly, a task that got even easier with SP2 but wasn't exactly rocket
science even prior to SP2. I use Outlook rather than Outlook Express, but
both programs also enable the user to configure them in a particular way for
added security. I have never had a privacy or security problem with these
two programs either.
 
> But the point is that there is still loads of holes in windows and
> people like myself who is on a fixed I.P are at risk.

There is no such thing as perfect security, either in life or in computing.
The bottom line is that the user must take primary responsibiltiy for
computer security. He shouldn't download and install crudware and then whine
that Microsoft didn't do enough to protect him against himself. If he does
everything reasonably possible to secure his machine and is still compromised
through no fault of his own, then he has a valid complaint. Not until then.

Ken

Relevant Pages

  • Re: Windows XP Security Update agent - API?
    ... IIRC MS has offered to established software vendors ... Since you are specifically speaking of mobile devices ... Microsoft MVP (Windows Server System: Security) ...
    (microsoft.public.windowsxp.security_admin)
  • Re: [Full-Disclosure] FW: Security in a Connected World
    ... security in its top products Windows, Office, SQL ... But if you take a look at other Microsoft ... >> As a leader in the computing industry, ...
    (Full-Disclosure)
  • IJCSIS 2009-2010 Publications
    ... International Journal of Computer Science and Information Security ... Ubiquitous Computing Security, Virtualization security, VoIP security, ... in E-Commerce, Security and Privacy in Wireless Networks, Secure ... applications of computer communications, networks and services. ...
    (comp.protocols.misc)
  • Re: IE URL obfuscation
    ... > because the bug allows an attacker to forge the information in the ... Suppose that the bank/online services scammers ... due to "improved security procedures unless you ...". ... Computing on the scale and with the breadth of reach and impact ...
    (NT-Bugtraq)
  • CFP - International Journal of Computer Science and Information Security (IJCSIS)
    ... International Journal of Computer Science and Information Security ... Networks ... Ubiquitous Computing Security, Pervasive Computing and Emerging ... End-to-end IP multimedia services over wireless networks ...
    (sci.image.processing)