Kelvyn Taylor

Security firms in tizz over Vista lock-down

Why are vendors like McAfee and Symantec opposed to Microsoft locking down Vista's 64bit kernel?

Written by Kelvyn Taylor

Little did Rich Skrenta realise in 1982 that his teenage prank, the Elk Cloner virus, would spawn a multi-billion- pound industry built on the back of security loopholes in Microsoft's operating systems. Now the malware-eradication industry is a behemoth, with antivirus, anti-spam, anti-spyware and other assorted tools regarded as indispensable on a modern network-attached Windows PC.

The nature of the threats has evolved over the years, from simple code that would replicate itself by infecting the boot sector of disks, to sophisticated trojans,
keyloggers and increasingly clever tricks that now make the management of a business computing environment a thoroughly miserable task.

So when there's an advance from Microsoft that seals up some long-standing basic Windows security holes, it should be a cause for celebration. One such advance came in 2003, when Microsoft launched the first versions of Windows to support Intel and AMD processors with 64bit extensions. One major change it made was to lock down the kernel to prevent it being modified or extended by third-party software.

For Vista, this technology is called PatchGuard, and it has been the subject of some bizarre claims from security vendors McAfee and Symantec. To sum it up in a headline it would be "Security vendors complain that Vista is too secure".

It turns out that security vendors have become used to hooking their software deep into the Windows kernel to detect malware. Microsoft doesn't condone this but can't do anything about it without requiring vendors to rewrite their software from the ground up. But with Windows x64, the situation is a bit different.

PatchGuard is not really a security measure. Indeed, Joanna Rutowska, a security researcher for Singapore-based Coseinc, has demonstrated a way around it. But even she sees the point of PatchGuard: if no program is allowed to legally patch the kernel, then anything that tries is up to no good and can be dealt with. It actually makes the job of security programs easier, she says on her blog.

For the moment it looks as if Microsoft is standing its ground. McAfee is making a big fuss about "customer choice", but as a customer, I want an operating system that's as secure as possible without having to spend more money to plug the holes.

While not perfect, 64bit Windows at least gives us a chance to get away from some of the worst flaws of the 32bit versions. But if Microsoft caves in to the "special pleading", it will be an opportunity thrown down the drain.

Tags:

reader comments

related articles

Microsoft has released patches for its forthcoming Windows Vista operating system

Microsoft releases Vista patches

Beta operating system to get regular updates 18 Aug 2006

 

Vista security finds defenders

There are divided views on Microsoft's Vista disclosure 23 Oct 2006

McAfee blasts Microsoft's 'hollow security promises'

Security vendor challenges Redmond's candour 20 Oct 2006

McAfee denies it was ill prepared for Vista

Security firm savages rival Sophos' claims 24 Oct 2006

Symantec and McAfee 'should have prepared better' for Vista

Rival security firm Sophos claims it is having no problems with PatchGuard 23 Oct 2006

related whitepapers

today's top stories

Solid as a rock - business continuity in a global manufacturer

From power supply problems in Nigeria to email availability in Stockport, PZ Cussons is prepared for anything 02 Dec 2008

Technology and privacy

Watch the final video in a two-part Computing roundtable debate on the importance of putting data privacy issues at the heart of your IT plans 02 Dec 2008

IT staff desperate to keep their jobs

Most would work longer hours for less pay 02 Dec 2008

VMware View 3 enhances virtual desktops

Virtual clients now take up less storage space and can be 'checked out' to a laptop 02 Dec 2008

Technology and privacy

Watch part one of a two-part Computing roundtable debate on the importance of putting data privacy issues at the heart of your IT plans 01 Dec 2008

Advertisement

Newsletter signup

Sign up for our range of FREE newsletters:

Existing User

Newsletter user login:

Advertisement

Jobs

Related jobs

Job of the week

Job alerts

Sign up here

Find your next job

IT Salary Checker

Check salary here

Advertisement

White papers

Search white papers

Top categories

VPN, Extranet and Intranet Solutions

WAN/ LAN Solutions

Network Security

Interoperability-Connectivity

Grid/ Utility Computing

Latest poll

Will the terrorist attacks in Mumbai affect your offshoring plans?

Will the terrorist attacks in Mumbai affect your offshoring plans?

Is India becoming a risky destination?

Previous poll results

Latest audio and video articles

Padlocked CDVideo

Technology and privacy

Watch the final video in a two-part Computing roundtable debate on the importance of putting data privacy issues at the heart of your IT plans 02 Dec 2008

Podcast imageAudio

Computing podcast - Standard Life's offshoring plans; and the prospects for government IT

The insurance giant outlines its new outsourcing strategy; and we ask if the government's economic bailout will affect its IT plans 28 Nov 2008

Latest in-depth articles

Parcel being packedFeatures

Case study: eSpares and business continuity

Online electricals business has managed to decrease its downtime 02 Dec 2008

Royal Blackburn HospitalFeatures

NHS trust recovers from server overdose

Virtualisation technology breathed new life into East Lancashire's cost-intensive system 02 Dec 2008

Advertisement

Primary Navigation