Why can’t Microsoft make a more secure Windows OS?

Secure Operating SystemHave you had enough with cleaning up your Windows OS after some security exploit?

Tired of hearing gripes from your users, proclaiming that all they did was surf what they thought was a perfectly innocent Web site before their PC crashed and burned?

So why can’t Microsoft make a more secure version of Windows to protect us all from these situations?

Give them points for trying: At least Vista and IE v7 attempt to lock things down more than what was possible with XP, something that’s finding lots of appeal with IT managers who are considering these upgrades.

But still. Look at what Microsoft did with Vista’s firewall. The firewall available on XP (and only with Service Pack 2) didn’t block outbound connections, which made it easier for the bad guys to turn your PC into a spam-creating zombie.

Vista includes this ability, but it’s so difficult to set up and too obscure to configure that you’re still better off with a third-party firewall.

Just think of the entire software infrastructure Microsoft could eliminate overnight if Windows were more resilient. Anti-spyware, antivirus, personal firewall, anti-phishing tools would all be unnecessary. Nice to dream about, even for just a moment.

Instead, the harsh reality is that corporate IT managers have had to develop elaborate schemes for locking down their Windows desktops, eliminating security weaknesses and curtailing numerous options that are part of the Windows OS.

Too bad there isn’t a more secure desktop OS readily available.

Actually, I was just playing. I can think of two secure desktop Operating System’s right off the top of my head:

Too bad that most corporate IT shops can’t use them for their bread-and-butter applications. One day my friends, one day.

If you want to find out all the latest news on tech why not subscribe to our RSS feed?

10 Comments

  1. Jason Cole
    July 8, 2007 at 9:35 pm

    If you want security and stability, wouldn’t Debian be the first distribution to look at? The stable version is not exactly feature-laden, but nothing ever crashes, and nothing ever breaks.

  2. Sean
    July 8, 2007 at 10:19 pm

    Hi Jason.

    Debian is nice, so is Ubuntu but I prefer Fedora and also Slackware.

    As for nothing breaking on your Debian install, let me have at it for a while, I’m sure I can crash something :)

  3. Dylan
    July 9, 2007 at 6:46 pm

    As far as Fedora-based GNU/Linux operating systems, why not go 100% Free Software? BLAG is working on their Fedora 7 spin, and it looks nice.

    I’d encourage everyone to test the FC7 beta version of BLAG and perform bug tests, feature requests, etc.

  4. Vitaliy
    July 10, 2007 at 7:27 am

    Mac OS X is not based on FreeBSD, and legally you can not call FreeBSD UNIX. Mac OS X is based on Mach microkernel, BSD subsystem is in the same memory space as the kernel handling TCP/IP stack, basic security measures (such as user id), POSIX API, and all kinds of other goodies. Anyway, FreeBSD is a big part of it but it is not based on FreeBSD.

    There are a number of companies deploying OS X and Linux clients while whatever old proprietary applications are being virtualized in VMware, Parallels, or Xen. It is also popular to stick VMware Server (which is free) on the server and virtualize a whole Windows Server with Exchange.

    Jason Cole, Debian offers no support for any of the commercial software that is being deployed in the real server environment leaving it with only basic router/firewall functionality. Perhaps Ubuntu as a desktop but then again an IT manager would want something more stable.

    Anyway, sorry for going all nerdy on you. :)

  5. Sean
    July 10, 2007 at 8:57 am

    @Dylan: I am perfectly happy with my Fedora and Slackware installs but thank you for the suggestions.

    I’m sure some of my readers might be interested in your suggestions.

  6. Sean
    July 10, 2007 at 9:01 am

    @Vitaliy: I would like to direct your attention to the following link on the Apple website:

    http://www.apple.com/macosx/features/unix/

    You will see multiple mentions of FreeBSD, FreeBSD services and “BSD environment that underlies Mac OS X.”

    I won’t get into the legalities of what you can and can not call UNIX. Someone else will need to chime in on that one.

  7. Vitaliy
    July 10, 2007 at 7:10 pm

    @Sean: There are a number of mentions of FreeBSD because they use a lot of the code in the kernel space. As stated before for things like TCP/IP stack and file system. Basically when they were developing OS X everything that was slow under the Mach microkernel was replaced with BSD code instead. Check out this link for more details on the implementation.

    BSD can not be legally called UNIX because of the lawsuits Unix System Laboratories that took place in 1994. More info at http://en.wikipedia.org/wiki/USL_v._BSDi

  8. Dylan
    July 10, 2007 at 7:24 pm

    OS X also implements a lot of neat stuff from OpenBSD, just like GNU/Linux and Solaris do. They do a lot of code interchange.

  9. Sean
    July 10, 2007 at 11:18 pm

    @Vitaliy: Apple mentions FreeBSD because some parts of the OS X code are based on it. Even you admit that in your comment.

    If any program has even a little part of something else, it’s technically based on that. At least that’s how I see it.

    Even WordPress itself was originally a fork from b2, so it’s safe to say WordPress was based on b2.

  10. George
    July 11, 2007 at 8:02 am

    Good points all except the point about Anti-Phishing tools not being necessary with a more secure OS. The only way to really effective way to defeat Phishing schemes is to educate users.

Leave a Reply

Tags: ,