3 ms·

Uh, forget it. If even MS can't set their own proper GPOs... Maybe they should rebase their OS with SeL4, a capabilities system and isolated NT+Win32 subsystem

by anthk 3y ago

Uh, forget it. If even MS can't set their own proper GPOs... Maybe they should rebase their OS with SeL4, a capabilities system and isolated NT+Win32 subsystems on top per application. It should requiere a current-ish computer to run that, but the resources would be properly spent. A jail + own FS + subsystem would be taxing over four or fives applications open, but documents and software would stay in their own jails. Interop ala COM/OLE? Forget that, the data sharing protocols would be far more restrictive. If any, a noexec subvolume with OLE objects saved as files. Nothing like DBUS or message passing. The user would see a directory with the objects from the clipboard per application. And to be shareable between applications, the user must drop the object in a directory with shared objects explicitly.

nullindividual 3y ago
Windows contains container (Hyper-V) and application isolation capabilities today in Windows Server [0] and sandboxing for Windows client [1]. > Interop ala COM/OLE? Forget that, the data sharing protocols would be far more restrictive This would be unacceptable to any business. COM/OLE is absolutely critical for cross-application functionality, especially for Office. [0] https://learn.microsoft.com/en-us/virtualization/windowscontainers/manage-containers/hyperv-container https://learn.microsoft.com/en-us/virtualization/windowscont... [1] https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-overview https://learn.microsoft.com/en-us/windows/security/applicati...
- anthk 3y ago
  >unacceptable to any business Either be secure, or get ransonwares on a week basis plumetting down any profit. Their choice.
- Veserv 3y ago
  Great, where is the audit demonstrating it achieves those goals? Here is the security certification page for Windows Server [1]. They achieved EAL1+ which is: "applicable where some confidence in correct operation is required, but the threats to security are not viewed as serious" [2]. Stating your dreams is not the same as achieving them. Please point to actual evidence that their dreams have been reached. And no, it is "battle-tested" and "no new bugs have been discovered yet" and "you can not prove it is bad" are not evidence, it needs to be actual positive evidence of quality, not the absence of evidence of defects. [1] https://learn.microsoft.com/en-us/windows/security/security-foundations/certification/validations/cc-windows11#windows-11-version-22h2 https://learn.microsoft.com/en-us/windows/security/security-... [2] https://www.commoncriteriaportal.org/files/ccfiles/CC2022PART5R1.pdf https://www.commoncriteriaportal.org/files/ccfiles/CC2022PAR...

by anthk 3y ago

nullindividual 3y ago

Windows contains container (Hyper-V) and application isolation capabilities today in Windows Server [0] and sandboxing for Windows client [1]. > Interop ala COM/OLE? Forget that, the data sharing protocols would be far more restrictive This would be unacceptable to any business. COM/OLE is absolutely critical for cross-application functionality, especially for Office. [0] https://learn.microsoft.com/en-us/virtualization/windowscontainers/manage-containers/hyperv-container https://learn.microsoft.com/en-us/virtualization/windowscont... [1] https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-overview https://learn.microsoft.com/en-us/windows/security/applicati...

anthk 3y ago
>unacceptable to any business Either be secure, or get ransonwares on a week basis plumetting down any profit. Their choice.
Veserv 3y ago
Great, where is the audit demonstrating it achieves those goals? Here is the security certification page for Windows Server [1]. They achieved EAL1+ which is: "applicable where some confidence in correct operation is required, but the threats to security are not viewed as serious" [2]. Stating your dreams is not the same as achieving them. Please point to actual evidence that their dreams have been reached. And no, it is "battle-tested" and "no new bugs have been discovered yet" and "you can not prove it is bad" are not evidence, it needs to be actual positive evidence of quality, not the absence of evidence of defects. [1] https://learn.microsoft.com/en-us/windows/security/security-foundations/certification/validations/cc-windows11#windows-11-version-22h2 https://learn.microsoft.com/en-us/windows/security/security-... [2] https://www.commoncriteriaportal.org/files/ccfiles/CC2022PART5R1.pdf https://www.commoncriteriaportal.org/files/ccfiles/CC2022PAR...