Warning: iconv_mime_decode() [function.iconv-mime-decode]: Malformed string in /home/secureg/public_html/lib/standard.lib.php on line 2251

Warning: iconv_mime_decode() [function.iconv-mime-decode]: Malformed string in /home/secureg/public_html/lib/standard.lib.php on line 2251

Warning: iconv_mime_decode() [function.iconv-mime-decode]: Malformed string in /home/secureg/public_html/lib/standard.lib.php on line 2251

Warning: iconv_mime_decode() [function.iconv-mime-decode]: Malformed string in /home/secureg/public_html/lib/standard.lib.php on line 2251

Warning: iconv_mime_decode() [function.iconv-mime-decode]: Malformed string in /home/secureg/public_html/lib/standard.lib.php on line 2251

Warning: iconv_mime_decode() [function.iconv-mime-decode]: Malformed string in /home/secureg/public_html/lib/standard.lib.php on line 2251

Warning: iconv_mime_decode() [function.iconv-mime-decode]: Malformed string in /home/secureg/public_html/lib/standard.lib.php on line 2251

Warning: iconv_mime_decode() [function.iconv-mime-decode]: Malformed string in /home/secureg/public_html/lib/standard.lib.php on line 2251

Warning: iconv_mime_decode() [function.iconv-mime-decode]: Malformed string in /home/secureg/public_html/lib/standard.lib.php on line 2251

Warning: iconv_mime_decode() [function.iconv-mime-decode]: Malformed string in /home/secureg/public_html/lib/standard.lib.php on line 2251

Warning: iconv_mime_decode() [function.iconv-mime-decode]: Malformed string in /home/secureg/public_html/lib/standard.lib.php on line 2251

Warning: iconv_mime_decode() [function.iconv-mime-decode]: Malformed string in /home/secureg/public_html/lib/standard.lib.php on line 2251

Warning: iconv_mime_decode() [function.iconv-mime-decode]: Malformed string in /home/secureg/public_html/lib/standard.lib.php on line 2251

Warning: iconv_mime_decode() [function.iconv-mime-decode]: Malformed string in /home/secureg/public_html/lib/standard.lib.php on line 2251

Warning: iconv_mime_decode() [function.iconv-mime-decode]: Malformed string in /home/secureg/public_html/lib/standard.lib.php on line 2251

Warning: iconv_mime_decode() [function.iconv-mime-decode]: Malformed string in /home/secureg/public_html/lib/standard.lib.php on line 2251

Warning: iconv_mime_decode() [function.iconv-mime-decode]: Malformed string in /home/secureg/public_html/lib/standard.lib.php on line 2251

Warning: iconv_mime_decode() [function.iconv-mime-decode]: Malformed string in /home/secureg/public_html/lib/standard.lib.php on line 2251

Warning: iconv_mime_decode() [function.iconv-mime-decode]: Malformed string in /home/secureg/public_html/lib/standard.lib.php on line 2251

Warning: iconv_mime_decode() [function.iconv-mime-decode]: Malformed string in /home/secureg/public_html/lib/standard.lib.php on line 2251
Biometrics
Biometrics

Biometrics

Secure Home | Search | About
 Microsoft Applications Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Biometrics Dan 07-12-2008
---> Re: Biometrics Juergen Nievele...07-14-2008
Posted by =?Utf-8?B?RGFu?= on July 16, 2008, 11:16 pm
If you were  Registered and logged in, you could reply and use other advanced thread options


"Daniel Petri <MVP>" wrote:

> So, to make a long story short, you claim the the "Windows 9X" source code
> and entire OS is far more secure than today's "Windows NT" - i.e. Vista?
>
> --
> Sincerely,
>
> Daniel Petri
> MVP, Senior IT consultant, trainer
> www.petri.co.il

The NT source code has much more security. The external security of Windows
Vista is especially good. The internal safety and core of 9x is safer than
the core of NT being based upon MS-DOS which is the maintenance operating
system of 98 Second Edition. What maintenance operating system does Vista
have? Please see Chris Quirke, MVP website.

http://cquirke.spaces.live.com/blog/cns!C7DAB1E724AB8C23!336.entry

I am talking about the debate that Chris Quirke, MVP talks about the safety
and security comparison. The best example I can give is to think of a major
fortress with great fortifications that is extremely hard to break through.
This major fortress represents the Windows NT source code and is especially
good right now in Windows Vista Service Pack 1 which I am using right now and
writing this post from Windows Vista Service Pack 1. Heck, I would not have
been a volunteer tester for Windows Vista on security if I did not like
Microsoft products and did not feel Windows NT was secure. For mobile
technology such as laptops I would highly suggest Windows Vista over any
other Windows when a person is traveling. However, with the proper
safeguards Windows 98 Second Edition can be made fairly secure if a user is
connected by a wired router to the Internet with anti-spyware programs such
as Spybot Search and Destroy and SpywareBlaster and using a currently
supported browser in 98 SE such as Mozilla Firefox which is currently
supported 98SE at least until December 2008 with Mozilla Firefox 2.

The problem here is that the Windows NT source code that includes Windows
2000, Windows XP and Windows Vista is meant to be managed by the IT
Professional and not by individual users. This is usually great in an office
environment that needs to limit the user's rights and grant usually the
majority of users a standard account and a few limited users an administrator
account. However, for home users such as when I am at home and not at work,
I like Windows 98 Second Edition because I enjoy playing older DOS games and
using older DOS programs that will not run in XP or Vista. In addition, if
someone does manage to break through all the external security of XP (not
sure about Vista since it is so new and indeed more secure than XP) then the
hacker(s) can wreck havoc on the network. This is what happened at my old
workplace when I went away on vacation during the summer and the higher-ups
decided it was time to get rid of Windows 98 Second Edition for good and only
have Windows XP Professional computers at my workplace.

Apparently, during the summer someone hacked the network and whether it was
an inside job (which I now suspect) or an outside job the individual(s) knew
their stuff really well. They undid all my work that took me a full year to
implement and bring the workplace from really bad computer problems to a well
functioning network and undid it in a matter of 3 months while I was gone.
If you have not figured it out yet, it was indeed a school that according to
the main computer network administrator Stephanie she said that former
individual(s) had left the school prior and destroyed the computer network
because these individual(s) were mad at the school and took their vengeance
on the computer network since they did not want to physically hurt the
children but it certainly hurt the children's ability to learn which really
makes me annoyed. Perhaps these individual(s) still had some prior access
that had not been revoked and were able to wreck havoc on the network during
the summer and it seems like they may have had to get on site and what better
opportunity while the main computer guy was out of the city.

However, if the few Windows 98 Second Edition machines had not been phased
out that summer then I would have been able to lean back upon those machines
since they were not accessible via the general school network and indeed did
not rely upon remote access which can be problematic when turned on as it was
with Windows XP Professional and with the Public School Network. I am
deliberately being vague about the specifics because this may end up being a
legal issue. In addition, Chris Quirke, MVP talks about the problem that
Windows Vista has because it lacks a true maintenance operating system like
MS-DOS in 98 Second Edition which had easy access to MS-DOS and good
backwards compatibility which Windows ME lacked. Windows ME looked good and
worked okay and did have better general USB support than 98SE but it really
was a joke and crippled operating system in my opinion since it lacked so
much and broke so easily. Finally, this proves the importance of the 9x
source code for the safety such as using one 98 Second Edition computer for
backup of the workplace that only one trusted individual who has been with
the company for many years is allowed to access. I have heard from my friend
John about how some businesses in New York State have used a 98 Second
Edition machine in the past as a gateway to the computer network which sounds
like a really smart idea. Windows 98 Second Edition also allowed consumers
who want to play old games to play the older games and individuals like
myself to work in a true text based interface and do away with the
limitations of a GUI interface. Just my two cents for what it is worth.

Posted by Daniel Petri on July 17, 2008, 7:56 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Just like Steve Riley said, I strongly suggest you re-think your security
concepts Dan. Sitting behind my desk and reading your post about how your
school network was hacked all I can think of is that someone should have
done a better job in protecting their network. How can you even begin to
compare the strength of a properly-configured (I emphasize
"propery-configured"!!!) Windows XP/Vista machine with ANY Windows 9X
machine, when related to security??? Saying that 9X is better just because
someone hacked into a poorly-protected and wrongfully-configured network is
like claiming that a VW Beatle is far better than a modern car because
modern cars use computers to control almost any aspect of their engine and
behavior, therefore if someone hacks into that computer, all modern cars
will stop working. Right. Let's all just use MS-DOS because you "like to
play DOS games"... Sorry. Posting long answers doesn't qualify them as
correct.

--
Sincerely,

Daniel Petri
MVP, Senior IT consultant, trainer
www.petri.co.il

>
>
> "Daniel Petri <MVP>" wrote:
>
>> So, to make a long story short, you claim the the "Windows 9X" source
>> code
>> and entire OS is far more secure than today's "Windows NT" - i.e. Vista?
>>
>> --
>> Sincerely,
>>
>> Daniel Petri
>> MVP, Senior IT consultant, trainer
>> www.petri.co.il
>
> The NT source code has much more security. The external security of
> Windows
> Vista is especially good. The internal safety and core of 9x is safer
> than
> the core of NT being based upon MS-DOS which is the maintenance operating
> system of 98 Second Edition. What maintenance operating system does Vista
> have? Please see Chris Quirke, MVP website.
>
> http://cquirke.spaces.live.com/blog/cns!C7DAB1E724AB8C23!336.entry
>
> I am talking about the debate that Chris Quirke, MVP talks about the
> safety
> and security comparison. The best example I can give is to think of a
> major
> fortress with great fortifications that is extremely hard to break
> through.
> This major fortress represents the Windows NT source code and is
> especially
> good right now in Windows Vista Service Pack 1 which I am using right now
> and
> writing this post from Windows Vista Service Pack 1. Heck, I would not
> have
> been a volunteer tester for Windows Vista on security if I did not like
> Microsoft products and did not feel Windows NT was secure. For mobile
> technology such as laptops I would highly suggest Windows Vista over any
> other Windows when a person is traveling. However, with the proper
> safeguards Windows 98 Second Edition can be made fairly secure if a user
> is
> connected by a wired router to the Internet with anti-spyware programs
> such
> as Spybot Search and Destroy and SpywareBlaster and using a currently
> supported browser in 98 SE such as Mozilla Firefox which is currently
> supported 98SE at least until December 2008 with Mozilla Firefox 2.
>
> The problem here is that the Windows NT source code that includes Windows
> 2000, Windows XP and Windows Vista is meant to be managed by the IT
> Professional and not by individual users. This is usually great in an
> office
> environment that needs to limit the user's rights and grant usually the
> majority of users a standard account and a few limited users an
> administrator
> account. However, for home users such as when I am at home and not at
> work,
> I like Windows 98 Second Edition because I enjoy playing older DOS games
> and
> using older DOS programs that will not run in XP or Vista. In addition,
> if
> someone does manage to break through all the external security of XP (not
> sure about Vista since it is so new and indeed more secure than XP) then
> the
> hacker(s) can wreck havoc on the network. This is what happened at my old
> workplace when I went away on vacation during the summer and the
> higher-ups
> decided it was time to get rid of Windows 98 Second Edition for good and
> only
> have Windows XP Professional computers at my workplace.
>
> Apparently, during the summer someone hacked the network and whether it
> was
> an inside job (which I now suspect) or an outside job the individual(s)
> knew
> their stuff really well. They undid all my work that took me a full year
> to
> implement and bring the workplace from really bad computer problems to a
> well
> functioning network and undid it in a matter of 3 months while I was gone.
> If you have not figured it out yet, it was indeed a school that according
> to
> the main computer network administrator Stephanie she said that former
> individual(s) had left the school prior and destroyed the computer network
> because these individual(s) were mad at the school and took their
> vengeance
> on the computer network since they did not want to physically hurt the
> children but it certainly hurt the children's ability to learn which
> really
> makes me annoyed. Perhaps these individual(s) still had some prior access
> that had not been revoked and were able to wreck havoc on the network
> during
> the summer and it seems like they may have had to get on site and what
> better
> opportunity while the main computer guy was out of the city.
>
> However, if the few Windows 98 Second Edition machines had not been phased
> out that summer then I would have been able to lean back upon those
> machines
> since they were not accessible via the general school network and indeed
> did
> not rely upon remote access which can be problematic when turned on as it
> was
> with Windows XP Professional and with the Public School Network. I am
> deliberately being vague about the specifics because this may end up being
> a
> legal issue. In addition, Chris Quirke, MVP talks about the problem that
> Windows Vista has because it lacks a true maintenance operating system
> like
> MS-DOS in 98 Second Edition which had easy access to MS-DOS and good
> backwards compatibility which Windows ME lacked. Windows ME looked good
> and
> worked okay and did have better general USB support than 98SE but it
> really
> was a joke and crippled operating system in my opinion since it lacked so
> much and broke so easily. Finally, this proves the importance of the 9x
> source code for the safety such as using one 98 Second Edition computer
> for
> backup of the workplace that only one trusted individual who has been with
> the company for many years is allowed to access. I have heard from my
> friend
> John about how some businesses in New York State have used a 98 Second
> Edition machine in the past as a gateway to the computer network which
> sounds
> like a really smart idea. Windows 98 Second Edition also allowed
> consumers
> who want to play old games to play the older games and individuals like
> myself to work in a true text based interface and do away with the
> limitations of a GUI interface. Just my two cents for what it is worth.


Posted by =?Utf-8?B?RGFu?= on July 17, 2008, 1:50 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Thank you for your feedback, Steve. I was wondering since the Windows 9x
source code is now so old and not really useful then would Microsoft be
willing to sell it. I can think of some buyers who would be willing to pay
good money for the 9x source code and since it is no longer useful to
Microsoft because it is so old then why not just get rid of it and be done
with this now useless technology.


The NT source code was leaked:

http://www.microsoft.com/presspass/press/2004/Feb04/02-12windowssource.mspx

"Steve Riley [MSFT]" wrote:

> Dan, I recommend you rethink your logic.
>
> The Windows 3.1/9x code was designed and written in an entirely different
> age -- one in which TCP/IP was not the standard networking protocol, one in
> which indeed networks were rare, and one in which everyone (we and our
> customers) assumed that only good guys used computers.
>
> The world no longer lives in that age. If you take any kind of system
> (operating system, engineering system, whatever) and place it in an
> environment that is wildly different than the original assumptions, that
> system will fail catastrophically. There is simply no way we can retrofit
> that very old code to function correctly in today's world of intentional
> attacks.
>
> I'm not exactly sure how you can make the statement that "a 9x machine with
> the proper safeguards such as a wired router that has wireless broadcast
> signal turned off" is more secure than XP or Vista. Firstly, an XP or Vista
> box behind such a router would be equally "safe" from attack. Secondly,
> disabling SSID broadcast in reality does not accord you any security -- see
> my article here:
>
http://blogs.technet.com/steriley/archive/2007/10/16/myth-vs-reality-wireless-ssids.aspx.
>
> You quote a specific vulnerability below, about DNS, and you then make the
> argument that this is a reason the military should be using 9x instead of
> XP/Vista. How does that follow? How do you know that 9x doesn't have the
> same vulnerability? No one can know, because we don't test 9x anymore. It's
> simply too old.
>
> And you mention our password checker. Actually, I think its recommendations
> aren't strong enough, and I'm working with the folks who own that feature to
> improve its strength.
>
>
> --
> Steve Riley
> steve.riley@microsoft.com
> http://blogs.technet.com/steriley
> http://www.protectyourwindowsnetwork.com
>

Posted by Paul Adare - MVP on July 18, 2008, 4:13 am
If you were  Registered and logged in, you could reply and use other advanced thread options
On Thu, 17 Jul 2008 10:50:01 -0700, Dan wrote:

> Thank you for your feedback, Steve. I was wondering since the Windows 9x
> source code is now so old and not really useful then would Microsoft be
> willing to sell it. I can think of some buyers who would be willing to pay
> good money for the 9x source code and since it is no longer useful to
> Microsoft because it is so old then why not just get rid of it and be done
> with this now useless technology.

Intellectual Property is not all about bits and lines of source code. You
also need to consider the algorithms that are being used. Just because
Windows 9x is no longer being sold or maintained does not mean that there
is no IP in the source code that Microsoft needs to protect.

>
>
> The NT source code was leaked:
>
> http://www.microsoft.com/presspass/press/2004/Feb04/02-12windowssource.mspx

This is pretty much a non-sequitur. Just because some source code was
leaked, it doesn't follow that Microsoft should sell off old source code.

While Chris Quirke is an MVP that does not mean that his whole "maintenance
OS" concept is endorsed by Microsoft, nor does it mean that it is endorsed
by the security community at large.

--
Paul Adare
MVP - Identity Lifecycle Manager
http://www.identit.ca
No program done by an undergrad will work after she graduates.

Posted by =?Utf-8?B?RGFu?= on July 18, 2008, 8:48 am
If you were  Registered and logged in, you could reply and use other advanced thread options
So Windows 9x does still have value at least in the algorithms that Windows
9x uses. Thus, my point that Windows 9x is not without value in the modern
computing environment.

I still use Windows 98 Second Edition and go online with it with Mozilla
Firefox 2.0.x. The only big problem I have with Windows 98 Second Edition
now is that it has some trouble keeping up with the hardware on my machine.
My desktop is a custom built one and is maintained by me and my friend Jeff
who is a systems engineer. Windows 98 Second Edition is in Fat32 and on one
hard drive. I have Windows XP Professional on the other hard drive in NTFS.

I use a Toshiba Laptop that has Windows Vista Home Premium Service Pack 1
because I do see the value of Vista's Security especially when travelling.
It currently has an OEM version on it but I plan to go with a full retail
version when my warranty with Toshiba expires which is fairly soon.

The rationale behind a custom built machine is that it is mine and I get to
choose the hardware parts I want on my machine and if a vulnerability is
targetted for a particular macine then no worries because mine is custom
built. In addition, by having clean installs of Windows 98 Second Edition
and XP Professional then you can have a clean start and not deal with all the
craplets that come with buying a PC outright. Sure, I can use an emulator
for games to run in XP Professional which is indeed nice but XP to me does
not have the same feel as the machine being fully mine like 98 Second Edition
has.

Windows XP and Vista are great for the modern workplace where a main IT
techie must maintain the whole computer network and carefully harden security
protocol and limit the amount of administrators in the network to limit the
potential damage to the network. However, if I was running a business I
would certainly have at least one computer with Windows 98 Second Edition
that was not connected up with the rest of the domain to help ensure that if
the network was hacked then at least all the important protocols and
procedures were backed up on this computer.

Ideally, this 98 Second Edition computer would be offline for safety reasons
but you could have another 98SE machine or 2 on-line that were there purely
for backup reasons if the whole network went down then at least you could
still have access to the Internet via your 98SE machines and even have those
networked seperately if you liked.

My rationale for another 9x or if that is not possible then an entirely new
Windows source code is that NT is dated as well and never fully had what it
should at the beginning of its life. At least Windows 9x had DOS as a
maintenance operating system, according to Chris Quirke, MVP. The Windows NT
(New Technology) kernel was joked as being Not There by early Microsoft
Systems Engineers because it was not there by lacking a maintenance operating
system.

Finally, by Microsoft having 2 lines of source code which was indeed
expensive and time-consuming for Microsoft to support iis that t at least it
gave the consumer a fighting chance. The reason is that most hackers much
prefer to go after the higher financial rewards of big companies such as
banks and so did not bother with the little people who just connected with
their home PC via dial-up on a Windows 9x machine.

As many people can see now even dial-up users are being targetted more
frequently because hackers are trying to get anyone who is not properly safe
and secure in the pc world. Sure Windows 98 Second Edition is not secure
but it is safe because it has less services then XP Professional and if
anyone tries an experiment of putting 2 computers with 98 SE and XP
Professional on-line and leave them with the defaults attached which computer
will be compromised first. If you guessed the XP Professional computer then
you are correct. This can be proven in a test environment. Of course the
98SE password is a joke that users can easily get around but it is safe as
Chris Quirke, MVP maintains and I fully agree with his analysis on this
because he is a really smart guy. The 98 SE machine was and is mainly meant
for the home consumer who does not need many accounts and is not nearly as
concerned with security as the company with Windows XP is and of course
should be.

The home user wants the computer to play games and function well in getting
some work done perhaps by using Office which users can actually still use
Windows Office XP on a 98 machine. I have done it and it works and the
Office XP Professional side still is being maintained by security updates
from Microsoft. I apologize for the long posts but it is my way of getting
my point across and sure I see that I may have to examine parts of my logic
that are flawed but I also encourage you professionals out there to have an
open ended mind towards the safety and security debate. Thank you all so
much for your feedback! It is critical to have competition in the
marketplace because it allows consumers such as myself to have free choice
when I choose to use Mozilla Firefox instead of Internet Explorer for many
instances but the Active X technology of IE is useful on certain websites
especially when you want to auto-update and you have to install and load the
Active X module. Thus you can see that I am not anti-Microsoft and I love
and enjoy using their products as well as trying out and testing other
products such as Mozilla Firefox, Apple computers and Ubuntu Linux on my
Windows PC.

"Paul Adare - MVP" wrote:

> On Thu, 17 Jul 2008 10:50:01 -0700, Dan wrote:
>
> > Thank you for your feedback, Steve. I was wondering since the Windows 9x
> > source code is now so old and not really useful then would Microsoft be
> > willing to sell it. I can think of some buyers who would be willing to pay
> > good money for the 9x source code and since it is no longer useful to
> > Microsoft because it is so old then why not just get rid of it and be done
> > with this now useless technology.
>
> Intellectual Property is not all about bits and lines of source code. You
> also need to consider the algorithms that are being used. Just because
> Windows 9x is no longer being sold or maintained does not mean that there
> is no IP in the source code that Microsoft needs to protect.
>
> >
> >
> > The NT source code was leaked:
> >
> > http://www.microsoft.com/presspass/press/2004/Feb04/02-12windowssource.mspx
>
> This is pretty much a non-sequitur. Just because some source code was
> leaked, it doesn't follow that Microsoft should sell off old source code.
>
> While Chris Quirke is an MVP that does not mean that his whole "maintenance
> OS" concept is endorsed by Microsoft, nor does it mean that it is endorsed
> by the security community at large.
>
> --
> Paul Adare
> MVP - Identity Lifecycle Manager
> http://www.identit.ca
> No program done by an undergrad will work after she graduates.
>

Similar ThreadsPosted
Biometrics and AD September 7, 2005, 9:36 am
fingerprint biometrics February 18, 2008, 3:18 pm
Essentials of Biometrics Training Course July 5, 2006, 4:01 am
ADVANCED IDENTIFICATION SYSTEMS & BIOMETRICS CONFERENCE DATES & CO-CHAIRS SET May 25, 2006, 4:41 pm

The site map in XML format XML site map

Contact Us | Privacy Policy