Date: Thu, 3 Jan 2002 20:41:24 +0530 From: Devdas Bhagat <devdas@worldgatein.net> To: freebsd-questions@FreeBSD.ORG Subject: Re: Securing systems (was Re: Teaching parents UNIX) Message-ID: <20020103204124.A3077@rivendell.worldgatein.net> In-Reply-To: <010f01c193ca$10b32fa0$0a00000a@atkielski.com>; from anthony@freebie.atkielski.com on Wed, Jan 02, 2002 at 09:14:20PM %2B0100 References: <1DA741CA6767A144BAA4F10012536C27A97C@LKLDDC01.GARGANTUAN.COM> <20011230000519.GB7709@raggedclown.net> <20011229220904.A493@starpower.net> <20020102210414.D569@rivendell.worldgatein.net> <010f01c193ca$10b32fa0$0a00000a@atkielski.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On 02/01/02 21:14 +0100, Anthony Atkielski wrote: > Devdas writes: > > > Howeve, I will blame MS for one thing. they > > always value convinience over security. > > Why do you blame MS for that? They simply provide what people are willing > to buy. Despite all the talk about security, the vast majority of users in > the world--even "professional" users--want convenience, not security. I'm on the list, please do not Cc: I like my convinience too. Thats why so many things are scripted. Thats why I like Unix :). My point is that a number of things could be made more secure without seriously inconviniencing the user. The concept of a home directory comes to mind. DOS, and Win9x were never supposed to be used by multiple users. NT was. NT has the same base concepts as 9x though , wrt security. Win2K is much better in that respect, but it has a long way to go before it can come upto the standard level of convinience and security that unix has set. (Note that I'm not saying that unix is perfect by any means, its just that it has a reasonable balance between security and convinience). The fact that unix does not require the user to be root always, or even most of the time helps a lot. I can install stuff in my home directory, and not worry about others being affected by it (mostly). On Windows, any user can instll anywhere, unless the admin locks the box down, which is a long and painful process. Yeah, GUIs suck there, when doing bulk work. It doesn't cost MS anything to ship with major holes closed by default, HTML email not being the default, not running rpc services for the desktop, but they still do it. Most administrators don't make these changes, and then get blamed for it. They deserve the blame, but in a system for *corporate* environments, I would definitely put admin convinience over end user convinience for the defaults. Since NT, and Win 2K are aimed for that environment, they should be shipping locked down, and requiring permissions to be set for users to do stuff. Ok, enough ranting for the list. All the rest to be sent to private email please. Devdas Bhagat To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20020103204124.A3077>