Allchin defends Vista's security

By Colin Barker, ZDNet UK
Tuesday, December 26, 2006 09:48 AM

The argument between Sophos and Microsoft over the security of Windows Vista took another turn on Tuesday when Microsoft co-president Jim Allchin stepped in to try and calm things down.

The dispute was started at the end of November when security software vendor Sophos published its "top 10 threats" for the coming year, and included three potential threats to Vista--the internet worms labelled Stratio-Zip, Netsky-D and MyDoom-O.

According to Sophos, while companies running wholly Microsoft environments--Vista with other Microsoft software on top--would be secure, companies running third-party software would be vulnerable. Most organizations fall into that category, such as companies choosing to run IBM/Lotus Notes, instead of Microsoft Exchange.

Allchin argued in a blog posting on Tuesday that this is untrue, and that Vista can live happily alongside the right third-party security products. If individuals and organizations use their Vista or third-party security tools correctly, there is no reason for there to be any issues, he said.

Sophos's claims were made on the day that Microsoft launched its business versions of Vista, and they put the software giant on the back foot.

"Microsoft is aware of a report by Sophos that claims variants of existing malware may affect users running Windows Vista," the company had said in a statement published a few days after Sophos comments. "Based on our initial investigation, Microsoft can confirm that these variants do not take advantage of a security vulnerability, rather they rely on social engineering to infect a user's system."

In the comments he made on his blog on Tuesday, Allchin underlines the message that poor security practice is an issue, but maintains that third-party software is not at fault. He went to some lengths to emphasize that it is safe to use third-party security software with Vista.

Allchin used the example of his seven-year-old son and the steps Allchin has taken to protect him from threats when he is using the internet. He outlined a three-step approach arguing that first you should "stay current with the latest security updates (and in this case I urge you to use the recommended defaults included in Windows Vista)".

Secondly, "use a firewall", which can be Vista’s own or, "use a third-party solution that you can buy".

Finally, Allchin said, "use anti-malware software", and went on to recommend using a combination of Windows Defender "and an add-on antivirus software program such as Windows Live OneCare or one of the many great products available from third parties, such as Sophos."


WORTHWHILE?

0

0 votes
Blog

Talkback 0 comments

There are currently no comments for this post.


Tech Jobs Now!

Search for your ideal tech job:

OpenAmplify developer's diary Part 4: Using OpenAmplify via SOAP

Web Development

Justin James walks you through the process of using the SOAP interface to OpenAmplify from Visual Studio 2008.


Read more »



When technology costs more than human

Blog thumbnail

Movie director James Cameron waited 15 years for technology to catch up before it was sufficiently advanced for him to create the much-anticipated upcoming film, Avatar.

To be released in..... by Eileen Yu

Read more »

Tags

  1. attack
  2. authentication and encryption
  3. blog
  4. data security
  5. e - mail
  6. hacking
  7. internet
  8. malware
  9. microsoft corp.
  10. network
  11. network security
  12. pc security
  13. researcher
  14. security
  15. security management
  16. software
  17. spam and phishing
  18. symantec corp.
  19. viruses and worms
  20. web