5 ms·
Serious question: what OS should it run on? I agree that Windows is a bad choice but other options are not much better as far as security (for this kind of atta
by Drdrdrq 10y ago
Serious question: what OS should it run on? I agree that Windows is a bad choice but other options are not much better as far as security (for this kind of attacks) is concerned... Are they?
- Retric 10y agoBSD UNIX can be good from a security standpoint. But, there are also OS out there written from the ground up to be secure.
- Drdrdrq 10y agoSure, but this attack modified local binaries so that they performed operations for attackers. How do you fight that?
- Retric 10y agoThe short answer is to only run signed binary's and or not allow new code at all. How to manage that while maintaining flexibility and minimizing costs ends up getting really complex. But, really there is a long continuum between say a personal blog at one end and an ICBM at the other. IMO, the banking system is at the high end of that scale.
- Arwill 10y agoI would say a cross-platform kernel, and the business logic running in a virtual machine, like Java. That combined with a hardware encryption module. Much of what that article is about, their software relies on Oracle DB for just about everything.
- auvi 10y agoMaybe an IBM Mainframe running z/OS. just wondering ..
- statictype 10y agoFrom a security stand point, why is Windows a bad choice?
- afsina 10y agoPerhaps "why using easy to hack native binaries" is a better question.