3 ms·
> windows was developed before security was important I disagree - At best you could say DOS was developed before users knew security was important... Microsof
by robocat 2y ago
> windows was developed before security was important
I disagree - At best you could say DOS was developed before users knew security was important... Microsoft has explicitly ignored security since DOS - because functionality sells better than security. Anyone who has worked with Unix systems has always understood just how much of a sieve Microsoft OSes are. Anyone with wisdom has said that about Windows from the very very beginning. Windows anti-virus has been a thing for a very long time.
If your prior is the number of extreme security vulnerabilities in one year - the implication is that there are lot of undiscovered extreme security vulnerabilities.
And competent WaaS (Weaponisation as a Service) now exists to quickly deploy exploits for obscure weaknesses or recently discovered weaknesses. Users and companies no longer have a few weeks grace before mass exploitation occurs.
Use Windows, get pwned. The counterfactual is difficult: it is hard to prove you haven't been pwned... Anti-virus defence is often too late (plenty of examples eh!).
I've seen very careful users/developers get caught out again and again.
Not to say Windows is alone. Routers and other end devices are just as bad. And Android doesn't appear great to me either.
- snvzz 2y agoUNIX entire security model is "ambient security" in operating systems literature. Ambient security is a joke. Real security requires a capability-based model. seL4[0] implements the mechanisms to do this efficiently. Lions OS implements an entire system with seL4 as core[1] leveraging these mechanisms. 0. https://sel4.systems/About/seL4-whitepaper.pdf https://sel4.systems/About/seL4-whitepaper.pdf 1. https://trustworthy.systems/projects/LionsOS/ https://trustworthy.systems/projects/LionsOS/
- anthk 2y agoCheck 9front and GNU/Hurd. Namespaces are good too.
- snvzz 2y ago>GNU/Hurd It will not go anywhere until they manage to move away from the gnu mach kernel. (as it hasn't happened yet, I am afraid it is quite unlikely to happen anymore)
- hollerith 2y agoFirst I've heard of LionsOS. It is mature enough to run a web server: https://sel4.systems/Info/Website/ https://sel4.systems/Info/Website/