Feeds

Allchin backs away from Vista anti-virus claims

Child's play

Internet Security Threat Report 2014

Outgoing Windows development chief Jim Allchin has apologised for the confusion he created in comments taken to mean Vista was so secure it might be possible to run the software without any anti-virus installed.

Responding to questions from reporters about whether Vista would be more secure than Windows XP SP2, Allchin said his seven-year-old son runs a Vista PC (locked down with parental controls and no IM or email) without anti-virus protection.

The comments were taken to mean that Allchin reckoned that improved security features in Vista - such as Patchguard and ASLR (Address Space Layout Randomisation, a feature that means the system kernel is loaded differently on each Vista machine - would make anti-virus protection obsolete.

Not so.

Allchin said his comments, which if true would decimate the software security market and make Microsoft's own OneCare service redundant, had been taken out of context and misinterpreted.

"After reading the transcript, I could certainly see that what I said wasn't as clear as it could have been, and I'm sorry for that. However, it is also clear from the transcript that I didn't say that users shouldn't run anti-virus software with Windows Vista! In fact, later in the call, I explicitly made this point again, because I had realised I wasn't as clear as I should have been," Allchin writes in a posting to the Windows Vista blog.

Allchin returns to the standard Microsoft line that even though XP Vista is the most secure operating system Redmond has ever produced, users would still need additional security software.

"Most users will use some form of anti-virus software, and that will be appropriate for their scenarios," he writes. ®

Internet Security Threat Report 2014

More from The Register

next story
Knock Knock tool makes a joke of Mac AV
Yes, we know Macs 'don't get viruses', but when they do this code'll spot 'em
Feds seek potential 'second Snowden' gov doc leaker – report
Hang on, Ed wasn't here when we compiled THIS document
Why weasel words might not work for Whisper
CEO suspends editor but privacy questions remain
DEATH by PowerPoint: Microsoft warns of 0-day attack hidden in slides
Might put out patch in update, might chuck it out sooner
BlackEnergy crimeware coursing through US control systems
US CERT says three flavours of control kit are under attack
prev story

Whitepapers

Cloud and hybrid-cloud data protection for VMware
Learn how quick and easy it is to configure backups and perform restores for VMware environments.
Getting started with customer-focused identity management
Learn why identity is a fundamental requirement to digital growth, and how without it there is no way to identify and engage customers in a meaningful way.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?
Storage capacity and performance optimization at Mizuno USA
Mizuno USA turn to Tegile storage technology to solve both their SAN and backup issues.
Protecting against web application threats using SSL
SSL encryption can protect server‐to‐server communications, client devices, cloud resources, and other endpoints in order to help prevent the risk of data loss and losing customer trust.