[rescue] [geeks] Windows monoculture (was Last Call - Ultra 5/10 parts)
Andrew Jones
andrew at jones.ec
Tue Mar 11 20:19:57 CDT 2014
On 03/11/2014 08:34 PM, Andrew Hoerter wrote:
> In theory, the NT security model is far richer than traditional Unix,
> but it all goes out the window (heh) when ordinary user accounts are
> administrator-equivalent.
Windows vista/7/8 don't make user accounts administrator-equivalent
unless you go way out of your way to make it so.
That said, there are some security things they could improve:
* blacklist known-bad versions of flash and java
* give me the ability to whitelist executables
* make the MAC framework usable by mere mortal systems administrators
More information about the rescue
mailing list