3 ms·

Windows contains container (Hyper-V) and application isolation capabilities today in Windows Server [0] and sandboxing for Windows client [1]. > Interop ala CO

Windows contains container (Hyper-V) and application isolation capabilities today in Windows Server [0] and sandboxing for Windows client [1]. > Interop ala COM/OLE? Forget that, the data sharing protocols would be far more restrictive This would be unacceptable to any business. COM/OLE is absolutely critical for cross-application functionality, especially for Office. [0] https://learn.microsoft.com/en-us/virtualization/windowscontainers/manage-containers/hyperv-container https://learn.microsoft.com/en-us/virtualization/windowscont... [1] https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-overview https://learn.microsoft.com/en-us/windows/security/applicati...

anthk 2y ago
>unacceptable to any business Either be secure, or get ransonwares on a week basis plumetting down any profit. Their choice.
Veserv 2y ago
Great, where is the audit demonstrating it achieves those goals? Here is the security certification page for Windows Server [1]. They achieved EAL1+ which is: "applicable where some confidence in correct operation is required, but the threats to security are not viewed as serious" [2]. Stating your dreams is not the same as achieving them. Please point to actual evidence that their dreams have been reached. And no, it is "battle-tested" and "no new bugs have been discovered yet" and "you can not prove it is bad" are not evidence, it needs to be actual positive evidence of quality, not the absence of evidence of defects. [1] https://learn.microsoft.com/en-us/windows/security/security-foundations/certification/validations/cc-windows11#windows-11-version-22h2 https://learn.microsoft.com/en-us/windows/security/security-... [2] https://www.commoncriteriaportal.org/files/ccfiles/CC2022PART5R1.pdf https://www.commoncriteriaportal.org/files/ccfiles/CC2022PAR...

anthk 2y ago

>unacceptable to any business Either be secure, or get ransonwares on a week basis plumetting down any profit. Their choice.

Veserv 2y ago

Great, where is the audit demonstrating it achieves those goals? Here is the security certification page for Windows Server [1]. They achieved EAL1+ which is: "applicable where some confidence in correct operation is required, but the threats to security are not viewed as serious" [2]. Stating your dreams is not the same as achieving them. Please point to actual evidence that their dreams have been reached. And no, it is "battle-tested" and "no new bugs have been discovered yet" and "you can not prove it is bad" are not evidence, it needs to be actual positive evidence of quality, not the absence of evidence of defects. [1] https://learn.microsoft.com/en-us/windows/security/security-foundations/certification/validations/cc-windows11#windows-11-version-22h2 https://learn.microsoft.com/en-us/windows/security/security-... [2] https://www.commoncriteriaportal.org/files/ccfiles/CC2022PART5R1.pdf https://www.commoncriteriaportal.org/files/ccfiles/CC2022PAR...