View Single Post
Old 20-08-2004, 09:27   #15
Stuart
-
 
Stuart's Avatar
 
Join Date: Jun 2003
Location: Somewhere
Services: Virgin for TV and Internet, BT for phone
Posts: 26,546
Stuart has a lot of silver blingStuart has a lot of silver blingStuart has a lot of silver blingStuart has a lot of silver blingStuart has a lot of silver bling
Stuart has a lot of silver blingStuart has a lot of silver blingStuart has a lot of silver blingStuart has a lot of silver blingStuart has a lot of silver blingStuart has a lot of silver blingStuart has a lot of silver blingStuart has a lot of silver bling
Re: Warning unpatched PCs compromised in 20 minutes

First, I should say that ALL operating systems are vulnerable to attack. Anyone who say's their OS is invulnerable is likely to get hacked.

Microsoft have made some stupid decisions in the past which have helped attackers, but they do seem to be taking security more seriously now. Especially with XP SP2 and Windows Server 2003. One particular problem is that in the past, the default install of Windows has turned everything on (I have lost count of the amount of times I have had to disable IIS while installing Windows Server 2000). Server 2K3 disables virtually everything, and asks the Administrator to turn on what they need. Far better idea. XPSP2 also turns on Automatic Updates by default, and nags you every 20 minutes if you disable it. Another good idea.

As Bifta says (above), I suspect the main reason that Windows is the most compromised operating system is not because it is inherantly any less secure than any other OS, but simply because it is the most popular.

Still, one thing that buys more time for patching. Install a good firewall.
Stuart is offline   Reply With Quote