[rescue] [geeks] Windows monoculture (was Last Call - Ultra 5/10 parts)

Andrew Jones andrew at jones.ec
Tue Mar 11 20:19:57 CDT 2014


On 03/11/2014 08:34 PM, Andrew Hoerter wrote:
> In theory, the NT security model is far richer than traditional Unix,
> but it all goes out the window (heh) when ordinary user accounts are
> administrator-equivalent.

Windows vista/7/8 don't make user accounts administrator-equivalent 
unless you go way out of your way to make it so.

That said, there are some security things they could improve:
* blacklist known-bad versions of flash and java
* give me the ability to whitelist executables
* make the MAC framework usable by mere mortal systems administrators


More information about the rescue mailing list