Microsoft partner: Vista less secure than XP

Microsoft partner: Vista less secure than XP

Summary: CeBIT: A security company recognised by Microsoft as one of its 'best' partners has said that Vista will be less secure than Windows XP

SHARE:
TOPICS: Security
1

Security company Kaspersky claims that Vista's User Account Control (UAC), the system of user privileges that can be used to restrict users' administrative rights, will be so annoying that users will disable it.

Natalya Kaspersky, the company's chief executive, said that without UAC, Vista will be less secure than Windows XP SP2. "Windows Vista with UAC disabled will be less secure than XP SP2," said Kaspersky, speaking to ZDNet UK at the CeBIT 2007 show in Hanover. "There's a question mark if Vista security has improved, or has really dropped down."

Kaspersky provides one of the scanning engines in ForeFront, Microsoft's business security product.

Arno Edelmann, business security product manager for Microsoft, said that Kaspersky's claims were surprising. "We have a thriving community of partners, and Kasperky is one of our best partners," Edelmann told ZDNet UK. "I find their statements a little strange because they have one of the best insights into Microsoft security products."

After being roundly criticised over its security strategy in the past, Microsoft has done a lot of work to improve its approach and has been touting Vista as its most secure operating system. But Kaspersky confirmed that her analysts had found five ways to bypass Vista's UAC, and that malware writers will find more security holes.

Kaspersky also added her voice to Symantec and McAfee complaints that PatchGuard, designed to protect the Vista kernel, is hindering security companies' work.

"PatchGuard doesn't allow legitimate security vendors to do what we used to do," said Kaspersky.

Symantec has claimed that PatchGuard is hurting security vendors more than it was hurting malware writers. Bruce McCorkendale, a chief engineer at Symantec, said: "There are types of security policies and next-generation security products that can only work through some of the mechanisms that PatchGuard prohibits."

Eugene Kaspersky, the company founder, said on Thursday that while vendors had to interact with Vista legitimately, hackers were under no such constraints.

"Cybercriminals seem not to care about Vista licensing," said Eugene Kaspersky. "They don't need to follow regulations or be certified by Microsoft — antivirus vendors do."

Topic: Security

Tom Espiner

About Tom Espiner

Tom is a technology reporter for ZDNet.com. He covers the security beat, writing about everything from hacking and cybercrime to threats and mitigation. He also focuses on open source and emerging technologies, all the while trying to cut through greenwash.

Kick off your day with ZDNet's daily email newsletter. It's the freshest tech news and opinion, served hot. Get it.

Talkback

1 comment
Log in or register to join the discussion
  • User access refusal

    it is silly to pop up a window in the way UAC does.

    People buying a new pc will want to install their existing hardware and software.
    Not only will UAC annoy them, they shall most likely find out that vista has no built-in driver library for their peripherals.

    The likely result is a massive cry for free downgrades and a move to open source

    Further,
    cabanossi-21666366011136960807907799337173