ie8 fix
madison

Zero Day

Ryan Naraine, Emil Protalinski and Dancho Danchev

Microsoft plays defense against Google Windows migration report

By | June 2, 2010, 7:29am PDT

Summary: With news swirling that Google is ditching the internal use of Windows over security concerns, Microsoft moved swiftly to counter-attack and defend the security posture of its flagship operating system.

With news swirling that Google is ditching the internal use of Windows over security concerns, Microsoft moved swiftly to counter-attack and defend the security posture of its flagship operating system.

Even as security experts questioned the wisdom of such a drastic Google move, Microsoft’s Brandon LeBlanc found irony in the issue, pointing to a report that Yale University had halted their move to Gmail (and their move to Google’s Google Apps for Education package) citing both security and privacy concerns.

[ SEE: Google ditching Windows over security makes little sense ]

follow Ryan Naraine on twitter
Here’s LeBlanc on the Windows security posture:

When it comes to security, even hackers admit we’re doing a better job making our products more secure than anyone else. And it’s not just the hackers; third party influentials and industry leaders like Cisco tell us regularly that our focus and investment continues to surpass others….Microsoft makes the security of our customers a huge priority.

LeBlanc also posted a list of Windows security highlights:

  • We ship software and security updates to our customers as soon as possible through Windows Update and Microsoft Update to keep our customers safe. We highly recommend our customers enable Automatic Update to ensure they are protected from attacks.
  • With Windows 7, we added improvements to BitLocker for disc encryption (we also introduced BitLocker-to-Go for external USB devices), and added enhancements to the built in Windows Firewall for better protection.
  • Windows 7 has Parental Controls built in that can be combined with Windows Live Family Safety to create a safer experience on the PC for children.Windows 7 comes with Internet Explorer 8 which includes SmartScreen Filter which has proven its success time and time again.
  • And Windows 7 also uses Address Space Layout Randomization (ASLR) as well by randomizing data in memory.

Readers following this topic should also take a look at Steve Manzuik’s post: Operating System Choice Does Not Equal Security and Costin Raiu’s point that Windows isn’t to blame for the Aurora attack on Google.

Kick off your day with ZDNet's daily e-mail newsletter. It's the freshest tech news and opinion, served hot. Get it.

Topics

Ryan Naraine is a journalist and social media enthusiast specializing in Internet and computer security issues.

Disclosure

Ryan Naraine

The most important disclosure is of my employment with Kaspersky Lab as a member of the global research and analysis team. Kaspersky Lab is a global company specializing in anti-malware and secure content management technologies. I do not own stocks or other investments in any technology company.

Biography

Ryan Naraine

Ryan Naraine is a journalist and social media enthusiast specializing in Internet and computer security issues. He is currently security evangelist at Kaspersky Lab, an anti-malware company with operations around the globe. He is taking a leadership role in developing the company's online community initiative around secure content management technologies.

Prior to joining Kaspersky Lab, Ryan was Editor-at-Large/Security at eWEEK, leading the magazine's and Web site's coverage of Internet and computer security issues and managing the popular SecurityWatch blog, covering the daily threats, vulnerabilities and IT security technologies. He also covered IT security, hacker attacks and secure content management topics for Jupiter Media's internetnetnews.com.

Ryan can be reached at naraine SHIFT 2 gmail.com. For daily updates on Ryan's activities, follow him on Twitter.

Related Discussions on TechRepublic

Did you know you can take part in these discussions with your ZDNet membership?
70
Comments

Join the conversation!

Just In

RE: Microsoft plays defense against Google Windows migration report
efsane Updated - 9th Apr 2011
Great!!! thanks for sharing this information to us!
sesli sohbet sesli chat
0 Votes
+ -
"Prepare to enter Damage Control Mode."
OS Reload Updated - 2nd Jun 2010
These were the words most heard in Redmond yesterday. This article is a mere consequence of those words.

A warning. When the fecal matter collides with the rapidly spinning blades you'll have a very hard time keeping the windows brand clean.
0 Votes
+ -
Of course they do
itguy08 2nd Jun 2010
Once 1 high profile company proves you can do without Windows MS knows they are F'ed.

And this may be the catalyst to drive people away from Windows.

And that's a good thing. Whether they go Mac, go Linux, etc it's a good thing to see MS's dominance go away.
0 Votes
+ -
Go ahead Google, and make our day
LBiege Updated - 2nd Jun 2010
I hope Google stops developing those Windows spyware AKA Chrome and so on as well so that my privacy will not be forwarded to CIA by Google.

Oh btw don't forget to encrypt your WiFi when Google gets anywhere close to where you live.
@LBiege

Hmm Maybe Microsoft should say that Windows can do without the intrusive google toolbar or the resource hogging google desktop or any of it's "We collect data to use against you" applications.
0 Votes
+ -
Google has come close to where I live
HollywoodDog 2nd Jun 2010
@LBiege and when they did my front door was locked, the blinds were down, and my wifi was encrypted. Like always.
0 Votes
+ -
Showing Your Ignorance.... Fool!
i2fun@... 2nd Jun 2010
@LBiege Now it's Google's fault they had their Windows machines hacked by the Chinese the same that everyone else did. Who are so brave as to come out in the open and admit it!

First off Google isn't a Microsoft Hater as you'd all like to believe. They are aware that 70 to 80% of their own search customers use it. When they say they are inclusive, that's exactly what they mean. Including Windows and it's users!

....and if you actually believe that crap, then maybe you should move to China to see what real loss of freedom is all about!!!
  • Flagged
otherwise it wouldn't be scaring the pants off of you as it obviouslly does.
Though I would image what scares you even more is the fact that alot of companies are finding out that it's Google they don't need, all the while upgrading to Windoiws 7.

Too bad for you.
0 Votes
+ -
I'm no MS fan, but
becabill Updated - 2nd Jun 2010
@itguy08
I fear the consequences of losing the OS which is best supported by available software. I use Linux most of the time myself, but I've found that code writers lean toward the largest market for the wares, and open source or not, the Windows user is the targeted customer - it's where the profits are. If MS were somehow to lose a significant portion of the market, the variety of available software will be diminished.
@itguy08 I'm no Microsoft fan, but I do use their products along with Linux!

Anyway.... IBM after around 5 yrs ago decided they wouldn't be renewing their Windows Licenses in connection with MS's backdoor funding SCO's Lawsuit against them. They also decided to distance themselves further from Microsoft Products, by selling their PC division to Lenovo.

Consequently, there was a big fracas over the fact that Windows was going to die because of this and yes MS stock took a dive. But in the end, Lenovo is still using Windows Products and Microsoft Windows has it's best OS out to date!

So no way is Microsoft going anywhere soon!!!
0 Votes
+ -
Poor windoze
ubiquitous one 2nd Jun 2010
Gee, and I thought everybody loved them too....

silly
or Linux, according to the statistics shown here the other day!
happy
0 Votes
+ -
That's old news, John
ubiquitous one 2nd Jun 2010
This isn't good news for Micro$oft no matter how you play it.

I think it's great. happy
0 Votes
+ -
How so, ubiquitous one
John Zern 2nd Jun 2010
Windows still far far in the lead, Google docs doing nothing against MS Office, Apple selling iPods and iPads, with their computer sales slowing, and Chrome OS to be a niche product.

MS is looking to be in a pretty good position today, as opposed to 12 months ago, you would have to agree.
@John Zern

It's the same old monopoly, John. The ecosystem's in M$'s favor and that's called a "success".

Now John, obviously Google doesn't agree with you. Now why is that? Aren't they supposed to be loved by the whole wide big world? No?

silly
@ubiquitous one

Shows you how awesome they are when it comes to privacy issues.
Nicholas, that has nothing to do with Google throwing M$ out on it's ear. Marked as spam.
  • Flagged
Google is just DonnieBoyed and are spreading FUD.
--Ram--
0 Votes
+ -
Google is being silly
P. Douglas 2nd Jun 2010
Windows 7 is more secure than the Mac and Linux. Now if someone specifically wants to hack into Google computers, they will have an easier time than if Google upgraded its PCs to Windows 7. It is true that there are lots more malware targeting Windows computers, but the issue Google cited for the computer switch was hacking, which is easier to do on Mac and Linux PCs than on Windows 7 machines. Therefore Google is now making its computers less safe than computes at companies, which have been upgraded to Windows 7.
@P. Douglas Are you serious? Windows 7 started as NT in the days when security was a non-issue. Security's just a bolt on afterthought. The O/S is and always will be inherently insecure.

Linux and its filing systems were designed from day one to be secure, when was the last time you heard about a vulnerability in Linux? Examples please. A new vulnerability appears in Windows or something that plugs into it about twice a month.
0 Votes
+ -
Sarcasm?
Earthling2 2nd Jun 2010
@AndyPagin Are you being sarcastic? secunia.com has a list of vulnerabilities for both Windows 7 and Ubuntu. Then there are Trojans and phishing.
0 Votes
+ -
RE: Microsoft plays defense against Google Windows migration report
de-void-21165590650301806002836337787023 2nd Jun 2010
@AndyPagin - sorry, but you're soooo wrong.

NT was designed from the outset to be highly secure, should the PC operator choose to make their machine secure. NT's security model isn't just a user-mode bolt-on as you claim - it permeates all the way to the kernel. Every kernel object & user-mode OS object (files, network sockets, pipes, etc.) are securable with ACL's. Using these ACL's you can secure the heck out of your box should you so wish.

By comparison, Linux's security model is far less comprehensive than Windows' is. How does one secure *N*X's TCP and named pipe port creation & access API's? How does one secure portions of any random config file from read/write access? One doesn't and can't ... unless one is running Windows.

I am sure that DTS is about to post a reply claiming that *N*X's AppArmor protects the OS from any and all malware and intrusions. Alas, AppArmor is also a bolt-on protection mechanism which can be pretty easily worked around if one has admin rights to the machine ...

The one big benefit that *N*X has over Windows is that too many Windows users have an account that has full admin rights and thus run all apps with full admin rights. Even malware. Especially malware! Thus, on XP and prior versions of Windows, users were completely at the mercy of malware authors who took advantage of users' gullibility (hey, install this "codec" and you can view that video of " doing with " to install any malware they like with full admin rights.

Vista introduced User Account Control (UAC) and removed users' admin rights by default (even if the user was a member of the admin group) unless the user provided credentials and/or permission to allow an app to run under "elevated" admin rights. This is essentially SUDO.

So, today, Vista & Win7 users are running under a very similar security model as *N*X but atop an OS with FAR deeper and more thoroughly engineered security infrastructure than *N*X.
..with or even better than Linux and the *BSDs then, huh!? Sorry, but no. Just, no. Sorry. Still a long ways to go. And MS patenting sudo (which existed before they did) doesn't change that.
@AzuMao unlike devoid all you can say to substantiate your claim is "no". Seriously?! What a nice counter argument.... Did you participate in a special debate club to learn it?
@AndyPagin Security of any OS is soley based on the size of consumer base. Larger the installation base, more is the motivation for hackers to find vulnerabilities as it is profitable. Known vulnerabilities of Linux are few because hackers aren't motivated enough to find them because of it's small installation base.
@AndyPagin ... and Linux was born yesterday...?! Nope, the Linux file system goes back a little ways and has many things in common to the Unix file system... which got its start in the late 1960's. Not exactly internet territory at the time either. The "security" in the file system built into linux has NOTHING to do with internet security. It has more to do with data redundancy and an expectation of data corruption - 'cause, you know, like the punch reader might skip a beat or two when it's reading in code (hopefully you don't have a punch reader at home anymore). "from day one to be secure"... ya. Day one was around 1992?! Again, how many systems were linked to the internet at the time? That's even before AOL!!! Yikes! How much "cybercrime" was reported in 1992?! Come on, if you're gonna put up something on a pedestal, at least be honest and truthful about the whole thing. Don't twist facts.
@AndyPagin Well I have heard about a few over the years, but they are targeted at servers. The reason that the issues don't become as public is because Linux has a 1% market share. Simply saying, nobody gives a FK about what happens to linux users. And most of its users are techies anyway and don't need security reports on the evening news to tell them how to lock down their machines. So stop spreading FUD.
..cause everything else to suddenly not matter anymore.
@Earthling2

I Checked those links in your post.
The malicious screensaver can only be installed on Linux by the administrator, it can't be 'hacked' on to the machine.
Can't comment on Mac as I've never used it.
secunia.com just appears to list the regular Ubuntu updates. Not sure what this has to do with security?

Bottom line is that in Linux its impossible (as far as I know) to install anything unless you know the administrator password, and its impossible for code to raise its privileges to admin. In the windows world there appear to be countless ways in which this can and does happen, correct me if I'm wrong but isn't the raising of privileges in Windows essential for some stuff to work at all?
@AndyPagin: The malicious screensaver can only be installed on Linux by the administrator, it can't be 'hacked' on to the machine.

...qualified to discuss as the same applies to Windows. UNIX and Windows are no different in this respect.

Bottom line is that in Linux its impossible (as far as I know) to install anything unless you know the administrator password, and its impossible for code to raise its privileges to admin.

http://blog.cr0.org/2009/08/linux-null-pointer-dereference-due-to.html

While the link is approaching a year in age I thought it important to reference because it mentions a privilege escalation that existed in the Linux kernel since 2001. Thus, using a privilege escalation vulnerability it is possible to raise privileges on a Linux system.

In the windows world there appear to be countless ways in which this can and does happen, correct me if I'm wrong but isn't the raising of privileges in Windows essential for some stuff to work at all?

As the above link demonstrates it happens in Linux too. As for being required for essential stuff to work can you define what "essential stuff" is?
  • Flagged
@AndyPagin Sure, it's right in the sidebar in the article you linked:

iPhone, Safari, IE8, Firefox all fall on day one of Pwn2Own
http://www.computerworld.com/s/article/9174078/iPhone_Safari_IE8_Firefox_all_fall_on_day_one_of_Pwn2Own
@P. Douglas
Thanks, confirms what I said, Windows 7 IE 8 was hacked in 2 minutes.
0 Votes
+ -
I do not want to hurt you, but...
Solid Water 2nd Jun 2010
@P. Douglas
"But the very fact that Microsoft felt the need to wheel out its top Windows flack in an effort to bat away some of the bad press the software vendor received suggests that the Redmond high command felt a little wounded by the level of ink the Google story scored yesterday."
(ttp://www.theregister.co.uk/2010/06/02/google_microsoft_security_grumbles/)
Once again Microsoft is right on the money. This whole Google moving away from Windows thing is going to come back and haunt them. They need Microsoft Windows for their apps. I still can't figure out how they are rumored to be the best and brightest but can't secure Microsoft Windows. This whole deal makes Google look bad, really really bad. And I'm sitting here laughing at them the whole time.
0 Votes
+ -
m$ is finally dying
Linux Geek 2nd Jun 2010
at the hands of FOSS.
The end is near!
@Linux Geek

Do you stand on the side of the road or on busy streets holding that sign. Maybe you should because then someone might pick you up and take you to a place where you can get help for your mental illness.
@bobiroc
Well it bothered you enough that you had to respond to him.

Consider yourself pwned by the Linux Geek.
@ubiquitous one

and you responded to bobiroc... does that mean you were 'pwned' by bobiroc? and if we follow that out, I by you? of course if you respond to this post, you'll have been 'pwned' by me?

oy...
@badgered
But the difference is I didn't question bobrock's sanity. Maybe I should have.

wink
  • Flagged
@Linux Geek Hold your breath waiting for it. please?
@rtk

I tried to get him to do that like a year ago... obviously it didn't work.
..forever and ever. Only geeks could ever possibly have any kind of problem with that. Right.
0 Votes
+ -
Gotta Love MS Idiots
ctunk 2nd Jun 2010
You are right...you are all smarter than the folks at Google.

Enjoy your MS crap OS!!
0 Votes
+ -
Gotta Love MS Idiots
ubiquitous one 2nd Jun 2010
Yes, they're sooo much smarter they can't answer why Bing hasn't overtaken Google yet.

Doesn't everybody love Bing?

lol... grin
0 Votes
+ -
Wake up call for MS
Maarek 2nd Jun 2010
Again, why wait for Microsoft to fix problems. With Linux, Google can update their own systems at their own leisure. also, their OS and Android run on Linux. Why not make the development change as well?

Google board probably got fed up with the latest attacks and said that why not change the playing field by adding options that deture the attackers rather then building bigger walls that still crumble. Also, give me something that Google makes that ONLY runs on Windows? Nothing, everything can run on any OS out there. So the switch can occur.
@Maarek
Are you sleeping? Who has larget desktop base currently? hint 9 out 10 PCs run using Windows. Googles decision to me seems a death on their side, AFAIK. Who used Google Earth, Google Toolbar, Chrome browser, Picasa etc. tools, which run on desktop computer locally? hint: largest desktop OS is still Windows. That means are they going to stop developing for Windows all their tools. If they have guts, they should. But they won't, because they don't have the balls to throw that avenue of collecting information silently from the desktop users.
--Ram--
I'm holding out for Steve Ballmer's press conference. I cannot wait to see him sweating and frothing at the mouth; Oh the thought of that makes me grin with glee......
customers a huge priority."

HAHAHAHA!!!!! WHAT A JOKE.
0 Votes
+ -
Institutional shareholders own this company and eventually even they are going to say enough is enough.
This incompetent idiot has run a once proud company in to the ground.
Stevie - do you hear that? It's the sound of no one applauding. Get used to it.
From the Costin Raiu link you posted: First of all, Google didn't get broken into because they were running Windows. They got hacked because they used IE6, a product that is 9 years old.

Please tell me this is not the REAL reason they're abandoning Windows. If it is, I may never use Google again. I'd prefer they just said 'we really don't like MS, they're big meanies'.
Great!!! thanks for sharing this information to us!
sesli sohbet sesli chat

Join the conversation!

Formatting +
BB Codes - Note: HTML is not supported in forums
  • [b] Bold [/b]
  • [i] Italic [/i]
  • [u] Underline [/u]
  • [s] Strikethrough [/s]
  • [q] "Quote" [/q]
  • [ol][*] 1. Ordered List [/ol]
  • [ul][*] · Unordered List [/ul]
  • [pre] Preformat [/pre]
  • [quote] "Blockquote" [/quote]
ie8 fix
Click Here
ie8 fix

The best of ZDNet, delivered

ZDNet Newsletters

Get the best of ZDNet delivered straight to your inbox

Facebook Activity

White Papers, Webcasts, & Resources
ie8 fix
ie8 fix