Discussion on:
View:
Show:
How effective do you think service hardening will be in protecting your systems? What's your overall opinion of Vista's new security mechanisms?
My brain keeps saying "Ring 0", "Ring 1" when I read stuff like this...
This sounds very nice. The features comprised in this technology seems to make systems safer. However, I guess it also leads to strange errors when the credentials are set up wrong.
Reminds me a bit of SELinux which was developed by NSA. http://www.nsa.gov/selinux/info/
SELinux was integrated in RedHat Linux/Fedora Core 2 in 2003.
Reminds me a bit of SELinux which was developed by NSA. http://www.nsa.gov/selinux/info/
SELinux was integrated in RedHat Linux/Fedora Core 2 in 2003.
I think service hardening will be very effective in protecting our systems. My general opinion of Vista's new security mechanisms is very positive.
While no security is perfect, this should go a long way to cutting of an attack vector on Windows computers. It's about time that Microsoft addresses this issue.
If a Vista Service has it's own SID, then why does it need to run as an account at all? (LocalSystem, LocalService, NetworkService) Wouldn't it make sense to create LocalSystem, LocalService, NetworkService as local groups and assign the appropriate membership to the services? In the same way, a service that requires network resources could be a member of the appropriate domain group.
Sounds like Microsoft wanted to isolate the administration of the services from the administration of group policies. This leaves the determination of the assignment of SID to the program developers, and allows network administrators to continue doing what they already do. The weakness I see in the system is that a good hacker will gain access to the methods used to assign the SID and develop their attack program using these methods.
See Peter Gutmann's article on his website at www.//auckland.ac.nz/~pgut001/vista_cost.text - Lists many adverse features of Vista which would add many more points to the list of 'things you should know about Vists'
Link doesn't work.
But see Vista's features on Microsoft website at http://www.microsoft.com/windowsvista/features/default.mspx - lists many great *real* features of Vista which add many more points to the list of "*real* things you should know about Vista (so you don't talk ignorantly about it)".
But see Vista's features on Microsoft website at http://www.microsoft.com/windowsvista/features/default.mspx - lists many great *real* features of Vista which add many more points to the list of "*real* things you should know about Vista (so you don't talk ignorantly about it)".
http://www.cs.auckland.ac.nz/~pgut001/pubs/vista_cost.txt
will get the correct text file for the above referal.
will get the correct text file for the above referal.
- Keyboard Shortcuts:
- Prev
- Next
- Toggle
