Feeds

Longhorn following Unix on security?

Curbs your enthusiasm

  • alert
  • submit to reddit

Intelligent flash storage arrays

Microsoft's delayed Longhorn operating system appears to be taking a page from the Unix management book by curbing user's administration rights.

Mike Nash, Microsoft's security business and technology unit corporate vice president, has said Longhorn would accord end-users certain rights and privileges apparently ending the concept that everyone using their PC is also the PC's administrator.

Speaking at Microsoft's Worldwide partner conference on Sunday, Nash indicated the architectural change is part of a move to improve security of desktop systems by limiting the ability for end-users to install applications or for malware to take control of a machine, turning it into a zombie.

The move mirrors techniques used in versions of Unix and Linux to create more limited variations of "the God user" or root account. This account provides a single user with total control of, and access to, an entire system's resources. Sun Microsystems, in particular, has touted very sophisticated user access controls - borrowed from Trusted Solaris - with its new Solaris 10 operating system. These controls let government agencies, for example, store information of different classifications on the same computer, as the OS governs who is authorized to see the data.

"In October 2003 someone asked: 'How come, when I go to a Windows machine, everyone has to be an administrator?'," Nash told conference delegates, referring to an incident at Microsoft's partner conference two years ago.

Nash said a key Longhorn feature would be increased "granularity" in administration capabilities "so people need a lower level of privilege to install applications and printers. When a higher level of privilege is required, we can elevate that. You can use Longhorn in a very effective way without being an admin."

Nash also used his presentation to try to disparage claims the open source method of software development produced more secure systems than Windows. "There's a big theory that with open source and more people looking at the source, this will lead to more secure products. We think our approach delivers more benefits," Nash said.

Among those benefits, according to Nash, is Windows XP Service Pack (SP) 2 which he said means users are up to 15 times less likely to become infected by malware than if they simply use XP SP 1 or Windows 2000 professional. Nash said 281m copies of XP 2 have been distributed during the year since launch.

Nash also trotted out figures from the Microsoft-sponsored Security Innovation study published in June that claimed Windows Server 2003 running SQL Server 2000 SP 3 is more secure than Red Hat's Enterprise Linux 3.0 running MySQL and Red Hat Enterprise Linux 3.0 running the Oracle 10g database.

The study, part of Microsoft's "Get the facts" campaign, claims SQL Server had zero vulnerabilities over the course of the year compared to seven for MySQL and 30 for Oracle 10g.

In a reference to Oracle's "Unbreakable Linux" advertising campaign, Nash said dryly: "Unbreakable? I think not."®

Related stories

Now Microsoft 'decouples' Longhorn from .NET
Indigo not so open as .NET Framework?
Microsoft running late in virtualization
Microsoft sharpens Longhorn for SMEs
Sun plays hide and seek with key Solaris 10 goodies
Sun burns Solaris and Linux staffers
Sun stares down Red Hat with Solaris 10
Security Report: Windows vs Linux

Top 5 reasons to deploy VMware with Tegile

More from The Register

next story
Netscape Navigator - the browser that started it all - turns 20
It was 20 years ago today, Marc Andreeesen taught the band to play
Sign off my IT project or I’ll PHONE your MUM
Honestly, it’s a piece of piss
Return of the Jedi – Apache reclaims web server crown
.london, .hamburg and .公司 - that's .com in Chinese - storm the web server charts
Chrome 38's new HTML tag support makes fatties FIT and SKINNIER
First browser to protect networks' bandwith using official spec
Admins! Never mind POODLE, there're NEW OpenSSL bugs to splat
Four new patches for open-source crypto libraries
Torvalds CONFESSES: 'I'm pretty good at alienating devs'
Admits to 'a metric ****load' of mistakes during work with Linux collaborators
Ploppr: The #VultureTRENDING App of the Now
This organic crowd sourced viro- social fertiliser just got REAL
prev story

Whitepapers

Forging a new future with identity relationship management
Learn about ForgeRock's next generation IRM platform and how it is designed to empower CEOS's and enterprises to engage with consumers.
Cloud and hybrid-cloud data protection for VMware
Learn how quick and easy it is to configure backups and perform restores for VMware environments.
Three 1TB solid state scorchers up for grabs
Big SSDs can be expensive but think big and think free because you could be the lucky winner of one of three 1TB Samsung SSD 840 EVO drives that we’re giving away worth over £300 apiece.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.
Security for virtualized datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.