Quote:

---

I think you have given yourself a false sense of security.

---

Quote:

---

In some instances, Data Execution Prevention can have the unintended consequence of preventing legitimate software from executing. In these cases, the affected software needs to be flagged as being allowed to execute code in those parts of memory, but this itself leads to a possible attack if the application isn't rigorous in validating data that is passed into a region of memory that is marked as being executable.

---

Hence the need to become "Admin" on Vista systems either to install software or assign "executable" status to the affected executable(s).

Is this good security? Not in my book! Anytime you force a user to assume "Admin" rights, it represents a potential security compromising situation. Pretty dumb IMO for an OS that touts its "enhanced security" model.

Back before wireless, we used to say "the best security is a one inch air gap". All one can realistically do these days is try and minimize the risk exposure and damage when compromised.

Cheers!

--------------------
Jeff

Antares 1529 152mm f/6.5 Achromat Refractor
EQ5/ST-2 mount
1984 Tasco 19ER 20X-60X50 Refractor
Oberwerks 15x70 Binoculars

Herrett Observatory, Twin Falls, Idaho.


Edited by BlueMoon (08/10/08 01:30 PM)

Post Extras