Longhorn to Feature Next-Gen Security
By Nate Mook | Published April 15, 2005, 12:34 PM
Despite speculation that Microsoft had all but put to rest its controversial next-generation security system for Windows, "Palladium" is now set to make its first appearance in a Longhorn preview release at WinHEC 2005 later this month.
Palladium, renamed to the less-ominous sounding Next-Generation Secure Computing Base (NGSCB), was first announced in 2003 as a marriage of software and hardware technologies. A Trusted Platform Module would reside in the hardware, while the software contained the Trusted Operating Root.
But software and hardware vendors balked at the idea of having to re-write applications to support the new technology - even if it promised better security. At WinHEC 2004, Microsoft admitted the concept was initially not well accepted.
Now, NGSCB is back and the first pieces are slated for inclusion in the Longhorn client, Microsoft's group vice president for platforms Jim Allchin told reporters this week during a press tour to promote Longhorn.
According to Microsoft Watch, Longhorn will isolate Internet Explorer in its own protected memory space, to keep the operating system safe from what lurks on the Internet. Additionally, Longhorn's startup will be locked down using a Trusted Platform Module.
Allchin told Microsoft Watch the next phase for NGSCB, code-named "Unity," will involve software virtualization to wall off different pieces of an operating system. Microsoft is also working to secure input and output, which includes trusted hardware and graphics.
Guys sersiously, to a certain degree, things have become so insecure these days with idiots lurking all over the web that a drastic change will have to take place eventually. Cry about it, but this is how progress is moved along. Later in the years we will look back and see that this technology or any other kind if change was imminent.
Score: 0
|didn't Micro$oft say that about XP, being the secure O/S? After Longhorn comes out,i'll give it one month for a security patch.. sorry guys,i'll stay with Linux...
Score: 0
|I'm talking about drastic changes. I wouldn't doubt seeing the day that CPU's will have some sort of security settings hardwired into them...
Score: 0
|And as soon as Linux supports all my hardware and all my games, I'll join you! :P
But seriously - the security threats currently around on the internet don't bother me, because I know they're there and how to avoid them. I haven't run AV for the last 4 years, because I haven't needed to (I do run a rather religiously maintained firewall, however). Keep your system up-to-date, learn how to browse the web safely and your risk-level will be minimised greatly.
I do like their idea, though. And we already DO have CPUs with hard-coded security - AMD 64-bit CPUs have DEP/Buffer overflow protection (anti-blaster type exploit).
Score: 0
|sorry, it is not up to linux to support your games, If you are willing to list the games you use, I'm willing to contact the manufacturer and ask for linux version.
Score: 0
|Just another reason to ignore Longhorn, but I was going to do that anyway.
Score: 0
|It's sad you have to 'isolate' internet explorer so that it doesn't affect any thing else on the PC. Why not make internet explorer MORE SECURE!!!!!!!!
Score: 0
|Although Internet Explorer is not the most secure app written it is not the fault of IE that people maliciously write code to cause problems for people and systems. As alternate browsers become more popular you will see more malicous programs that affect them. It isn't bad for any program with that kind of interface to a computing grid (internet) to be run in protected space. Even better will be virtualization which can completely seperate the internet interface from the rest of the system, or any other program from anything else. Once programs are written to utilize VT computers may once again become a stable platform to work from.
Score: 0
|First, they ARE making it MORE SECURE, not only by improving the code, but by isolating it. No one, not MS, Firefox, Opera, or even Panther, can guarantee 100% security. Exploits and flaws WILL be found in any program, especially as new technologies come about. Besides, MS can't control the security of every add-on (toolbar, plugin, Java applet, etc.), so it makes sense to give IE it's own little "playground."
Score: 0
|the less IE is closely embedded to the system, naturally it will be more secure, same for other proggies!!!
Score: 0
|If you don't like that check out least user permisions account that microsoft is thinking about using for longhorn.
http://www.infoworld.com...fewerpermissions_1.html
Score: 0
|Too bad people don't read more than post. IE can be made *very* secure, but the tradeoff is that you will lose compatibility. Who wants a browser that is iron-clad secure and won't do anything?This has been covered many times on the Internet at sites where thoughtful people exchange ideas and every post doesn't start with "M$ SuX". :)
Score: 0
|Yes,Most of security holes are from IE.
James
http://www.du818.com
Score: 0
|who needs all this security? from my experience, desktop security is often counterproductive. firewalls break internet services and passwords lock out legitimate users. bring back the windows98 escape key login method.
Score: 0
|post of the year.
Score: 0
|10 points for Gryffindor!!
Score: 0
|umm...help? Someone please smite the 9x user. I'd rather use a Mac :-) I know, it was a joke. Most stable PC: Commodore 64/128..lol
Score: 0
|you have a point in some ways! but then back in the day a virus would format your hard disk, not just perform a DoS attack or summit.
Score: 0
|I still have a 6MHZ 80-286 in my closet. it almost as loud as a vaccume but its more reliable than my 98 machine.
Score: 0
|The "security" is not for you, it's for MS and other software, music and movie manufacturers.
Score: 0
|how long do we have to wait 4 this os....jeez.
Score: 0
|next-gen security also means doing nothing did anyone notice u cant even send a mp3 with msn 7.0? Is it just I who think it's stupid ?
Score: 0
|cant send exe's either unless you patch it.
http://www.apatch.tk
Score: 0
|To many "George Mcfly" types sit in there mom's basement finding ways to ruin someone's day(via virus and worms and etc.). They need to get a girldfriend(like they could, haha.) and leave the rest of the world alone.
Score: 0
|Actually this type of virus writer most likely make quite a bit of money, are part of a Russian mafia, and probably pay for their women. So not all that far off.
Score: 0
|