Microsoft's bug Buffer has been long Overflowed. (Microsoft Windows 2000 Server)

Member Name: cobra_

Product:	Microsoft Windows 2000 Server
Date:	08/06/01 (371 review reads)
Rating:

Advantages: It boots up.

Disadvantages: heh.. It boots up.

Now if there is one thing I can not stand. Is people trying to tell me that Microsoft produce great Operating Systems. Recently I have been doing more an more Security Audits and the bulk of them are on Windows Networks. Then the clients get a shock when you compromise there network in under 2 minutes because of the soggy attempt at an operating system they are using.

Now Microsofts Operating systems are "really good" as long as the following applies.

1) The Windows based PC is not within 100 yards of a modem and a phone Jack.

2) The Windows based PC is used for nothing more than Notepad.

3) You can "by some miracle" code a Win32 app that will make you coffee every 2 minutes while you sit there and try and fix the windows system.


You would think after years of being in the business they would finally give up and take lessons from some of the top running Unix boys and realise that User functionality is great. but... GET SOME DAMN SECURITY. So far Microsofts attempts at Security has been extremely lag. With Vulnerability after vulnerability being discovered.
Now with a Unix variant system the Security possibilities are endless. and the system is as secure as the user/admin wants it. Unfortunately with Windows based systems, the system is only as secure as Microsoft will let it be. Now any company that releases a limited operating system from a security perspective is really playing with fire.

Now I know there is a number of people reading this opinion and saying: Why does everyone lay into Microsoft/ old news.. etc..

Well to answer that, I lay into Micrsoft for the reason that They must be the most laziest and money hungry company in the business. With there racing to release operating system they end up shipping operating systems that are filled to the top with security holes.

Now Microsoft will just say that there is only so much auditing of the code they can
do, before the product must be shipped.
Well if the operating systems they ship have been audited fully, I would hate to know how vulnerability packed it was before hand.
I mean they release these OS's and say it is there most secure system ever. Then within 2 days of being on the market 10's of vulnerabilities get uncovered.

I mean I was shipped the Beta 2 release of Windows XP, and after a couple of hours of hammering it, I came across vulnerabilities. It really is a terrible state of affairs.

I mean one only has to visit SecurityFocus.com to view a list of currently uncovered Microsoft vulnerabilities. The list is pretty much endless.

I mean the most recent is the Exchange 2000 exploit allowing mail accounts to be compromised. and the other is the Outlook Express address book spoofing exploit. You can be safe in the knowledge that if you are running Windows of any sort you are up for a difficult time regarding security.

And god forbid if anyone was to say that there MS's 2000 Pro/ server/ Advanced Server etc etc.. is secure.. Because i would probably laugh and then follow it up with tears.

Now the problems that are faced is that most of the major Applications/Programs that are developed, are being developed for Windows platforms.. But have nor fear, there is light at the end of that dark tunnel. Most of the large companies such as Adobe, Macromedia etc etc.. are planning on releasing there products for Unix platforms. So finally we can say goodbye to our heavily unsecured windows systems.

As a quick reference for anyone interested.

Outlook vulnerability: http://www.securityfocus.com/vdb/?id=2823

Exchange 2000 Vulnerability:
http://news.cnet.com/news/0-1003-200-6217519.h tml?tag=mn_hd

Just 2 of many. They just happened to be the most recent.


Also just while i am boring everyone half to death here, I will mention another thing.

V
iruses. You ever seen a Unix based virus that spreads like most viruses do on Windows platforms? Of course not. Now most people will say that the only reason most viruses are for Windows platforms is because that’s where the user numbers are, so that’s why virii coders, code for them. But that is horse crap. The reason is, that it is harder to code a virus that will infect 1 Unix system, let alone multiple systems. Where as with Windows variants, there joke of a system just takes on bored all the viruses and gives them to as many people as possible.

I’m sorry, as you can see I really have no time for Windows variations. Sorry for the rather long blab there, Just stuff I needed to get off my chest.


**
<Microsoft> There is only so much code auditing we can do before the product has to be shipped.

<Cobra> God damn, I would hate to have seen the code before the auditors got at it.**

Summary: