untangling_the_web

DID: 4046925
UNCLASSIFIED;;IiO~or=lilelAL us~ et4LY
Microsoft and Windows Concerns
The computer security company Symantec reported in 2006 that "home users now
comprise 86 percent of all targeted attacks against cornputers.t''" in large part
because most home users do not take even the most rudimentary steps to secure
their own computers. There is no such thing as a "secure" computer that is
connected to the Internet. If you never connect your computer to the Internet-and
by that I mean not for one minute ever-and never install any new software on your
computer, you do not need to worry about computer security. Otherwise, you need
to be concerned. I agree with Eric Vaughan of Tweakhound's assessment of the
current state of computing:
"1. There is no such thing as a secure as (operating system), or web
browser. If you want true security (read something like this somewhere at
some time); disconnect your network card, turn off/unplug your computer,
take out the hard drive and smash it to bits, take computer to a construction
site and ask the bulldozer operator to run over it. [emphasis added]
2. In the real world, Windows operating systems are less secure than the
newest versions of Linux (distro) and Mac as X. We'll leave the argument
over why that is and the advantages of one as over another to internet
forums/discussion boards.
3. A fully patched Windows XP and to a lesser degree Windows 2000 are the
only non-server Microsoft OS's that are even remotely secure. If you care
about security you shouldn't be running any other Microsoft OS's. If you have
machines on your home network that run anything less than a fully patched
XP, 2k, Linux (distro), as x then the security of any machine on your network
is lessened."196
To make matters worse, most home users are running Windows XP Home Edition.
"Windows XP Home has too many major security flaws (e.g., in XP Home every
default account has superuser privileges and cannot belong to any domain) to
enable it to achieve even a baseline level of security."!" However, there are specific
195 Jay Wrolstad, "Hackers Targeting Home Computer Users," Newsfactor.com, 25 September 2006,
(article no longer available).
196 Eric Vaughan, "Securing Windows XP," Version 2 BETA, Tweakhound.com, 30 September 2005,
(14 November 2006).
197 "Checklist for Securing Windows XP Systems," Lawrence Berkeley National Laboratory,
(14 November 2006).
560 UNCLASSIFIEDNFOR OFFIGIAL b1SE ONLY