Microsoft to improve Windows security

**rctempire** · October 10th, 2003, 02:01 PM

Taken from http://www.securityfocus.com/news/7180

Stung by criticism over lax software security, Microsoft Corp. disclosed plans Thursday to update its flagship Windows operating systems early in 2004 to make consumers less vulnerable to hackers.

Microsoft said the changes, announced by chief executive Steve Ballmer during a trade conference in New Orleans, will be offered free in the next "service pack" update to users of Windows XP and Windows Server 2003 software, the company's latest versions for consumers and businesses.

The announcement was aimed at calming Microsoft customers increasingly irritated by the ease with which hackers and others have broken into Windows computers. Adequately protecting an average personal computer can take far more time than many customers are willing to spend.

Microsoft promised to improve the way in which Windows manages computer memory to protect users against commonly exploited software flaws known as buffer overruns, which can trick Windows into accepting dangerous commands. Some of the most damaging attacks in recent months fall under this category.

The company promised to improve its built-in firewall feature, which has drawn criticism in the past because it was not especially strong and was routinely turned off in new copies of Windows. The update will automatically turn on the updated firewall and enable companies to centrally manage each computer's protective settings.

"Our goal is simple," Ballmer said. "Get our customers secure and keep them secure. Our commitment is to protect our customers from the growing wave of criminal attacks."

The changes were designed to improve security even for customers who fail to diligently apply the dozens of repairing software "patches" Microsoft offers each year.

For example, even computer users who did not install a protective patch for the "Blaster" virus this summer would have been protected if they had known to turn on Windows' built-in firewall, said Mike Nash, a vice president for Microsoft's security business unit.

"We can have a shield in place where we can make sure the customer is immune," Nash said.

Critics have said Microsoft releases far too many patches, which frustrate employees responsible for installing them on hundreds of computers throughout companies and which can interfere with other programs already installed.

"Microsoft treats security problems like public-relations problems," said Bruce Schneier, the chief technology officer for Counterpane Internet Security Inc. and a frequent critic of the company. "I hate to be cynical about this but every time Microsoft announces these things, it never gets better."

Microsoft promised to begin distributing these repairing patches monthly, rather than weekly, and making the patches easier to install and to remove when they conflict with existing software. The company said it still would rush out an emergency patch midmonth if it determines hackers were actively breaking into computers using a software flaw it could repair immediately.

It also promised a new Web site for consumers that will determine when patches need to be installed for all other Microsoft products.

------------------------------------

Thank go m$ has relised they have a problem with there oses and constant updates for them

Hopefully it will be good tho

**isus** · October 10th, 2003, 05:28 PM

to say microsoft is going to make their os secure is an oxymoron or somethin... as the most used os, it's gonna be the most attacked. there will always be holes, and there's not much they can really do to stop it since there is the internet and all the weird ass services that we needed.

yes, the little box that pop-ups with 'messenger' info is really important...

**rctempire** · October 10th, 2003, 07:39 PM

I agree isus

windows is the largest used so it will be attacked the most

Plus like internet Explorer more stuff happens to that than say netscape

All down to what most people use

**tMoD** · October 25th, 2003, 11:24 AM

They've said this before, I believe, and it never materialized. :mellow

**RACKnRAIL** · October 25th, 2003, 11:44 AM

Yeah...they'll be more secure after they steal some more source code and call it their own.

**Malicious Intent** · October 25th, 2003, 11:55 AM

Stop your bitching - it's free isn't it?

**notbob** · October 25th, 2003, 11:58 AM

they could make microsoft the most secure os ever

all they have to do is remove all networking and internet functions

they should just send me a big check for that one

**Pebbles100** · October 25th, 2003, 01:18 PM

I wonder if it will be free for 2K users?

**rainbowdemon** · October 25th, 2003, 01:39 PM

Originally Posted by Pebbles100

I wonder if it will be free for 2K users?

It would be nice. But I kind of doubt it. I use 2K also.

**nasrules** · October 25th, 2003, 01:47 PM

Paaaahahahahahahahaha!!!!!!!!!

As if! Anyway, they won't make any major changes until Longhorn comes out in 2005, and that'll be full of DRM, so I certainly won't be obtaining it. At least, it won't be used while my PC is connected to the net! Looks like Windows Server 2003 will be the last Windows I'll use. When Longhorn comes out, exclusive Linux use here I come!

**Shadow Lane** · October 25th, 2003, 01:53 PM

Yeah Nasrules. Even if Microsoft could protect us from the big, bad world, who's going to protect us from Microsoft (DRM, TCPA, WMP spyware, Index.dat, Passport info harvesting and so on forever.)

**Pebbles100** · October 25th, 2003, 02:08 PM

Originally Posted by nasrules

...exclusive Linux use here I come!

!!!DRM!!??? F' that, :finger be right there with ya, lol!

De Bunk · October 25th, 2003, 02:26 PM

lol wtf i dont care lol. windows is the best OS who cares if it is sucky in places. everything runs on it lol

but i guess you need to be secure too so i hope they sort this out lol. i dont wanna get haxxored lmfao.