09 May 2009
2.
Windows
Iain Thomson: When Shaun and I were coming up with ideas for
the weekly Top 10, the topic of dangerous technologies came up and it hit a
spark. I sat there thinking 'Windows', and the fact this isn't number one is
down to his winning a spirited argument and having logic on his side.
On one level Windows spawned the computer's acceptance by business. Having one standard to work to let developers build applications that everyone could use and made computing a safe choice for the IT buyer.
But, as we've seen from agriculture, monocultures are useful in the short term but can be incredibly damaging at the end of the day. Having Windows on 95 per cent of computers a few years ago meant that malware writers had a big, fat bullseye to aim at, and ultimately helped spawn the online fraud industry that is making everyone's lives a misery.
It's not that Windows is bad code, although it has been and still has serious weaknesses. It's that having one standard to rule them all is very bad security practice. Apple makes much of the fact that it doesn't get viruses, but that's got more to do with it being a smaller target. Personally, I'm sticking with Linux until it gets to be such a big target that we get malware problems there, then BeOS gets a turn if it's still up to date thanks to volunteers.
It is possible to make Windows secure, but it takes a hell of a lot of work and most IT managers have enough problems on their hands to make locking down corporate networks next to impossible.
Shaun Nichols: Windows in and of itself is a huge security liability and, while some of it is Microsoft's fault, not all of it is.
First and foremost, the company got serious about security way too late in the game. The Secure Development Lifecycle seems to have had a very positive effect on securing Windows, but it only came after the floodgates had been opened for several years and tens of millions of users were left at risk.
As Windows XP transitions into Windows 7, the new security practices should become even more apparent, but with malware now becoming such a lucrative industry the attacks will also become more sophisticated.
There are also factors beyond Microsoft's control that make Windows dangerous. The sheer number of unpatched and poorly maintained computers in the world is more than enough to keep the world's botnet herders knee deep in victims for years.
Sometimes users are too lazy to install monthly updates, other times they are using pirated copies of the software that can't be updated. Regardless, the amount of 'low-hanging fruit' out there is what keeps much of the malware industry thriving.
This does not mean that Mac and Linux users should ignore security. Just because you're not the prime target for infection doesn't mean that people still aren't targeting your system.
1.
Viruses
Shaun Nichols: Many of our technologies on this list have very
legitimate and highly useful purposes. I can't, however, think of too many
legitimate uses for computer code that can automatically install and replicate
itself on a system without any user knowledge or interaction.
Initially developed as a bit of a curiosity or joke, computer viruses (and worms) have become a primary threat to IT worldwide and their eradication has spawned a multi-billion dollar industry.
Up until the internet boom, viruses were primarily just a threat to the surrounding software; the worst that could happen was that a destructive virus could wipe out your system. This meant the possible loss of huge amounts of data, but the only worry was destruction.
Over the past decade or so, however, malicious programs have gone from destructive to larcenous. Losing your system can be pretty bad, but it's nothing compared to having your bank account wiped clean or your credit card stolen.
Iain Thomson: I kind of miss the old days, when viruses were done for bragging rights on message boards. Now organised crime has got in the game and things have become much worse.
Viruses have the potential to screw up the computing model in two key ways. Firstly, as Shaun has mentioned, they can destroy vast amounts of data. This has become worse through the interconnected nature of computers.
But viruses also damage confidence. E-commerce is going to become an ever increasing part of the global economic system, but fear of infection or theft is stifling that. Already people are being turned off online banking and shopping because of the fear of getting their credit rating junked by a phisher. This is going to get worse before it gets better.
Law enforcement used to love the old-style virus writers. They weren't profit-motivated, and once caught coughed up everything for fear of going to jail. Now we face distributed teams of highly motivated criminals who bring to computer crime the same level of criminal nastiness you see in armed robbery, mugging and murder.
The battle against viruses will never end, barring a major advance in technology or users getting much smarter. To quote Winston Churchill: "This is not the end. It is not even the beginning of the end. But it is, perhaps, the end of the beginning."
Latest stories from Developer
Related articles
Related jobs
Poll
Are you confident that the UK's IT infrastructure is secure from attack in the wake of the Flame malware revelations?
V3 examines the key strengths and weaknesses of Samsung's latest iPhone killer
Connect with V3.co.uk
Social networking is almost ubiquitous. This white paper examines the benefits and risks and it looks at the different ways companies can reconcile them
The importance of understanding your infrastructure
C#, WPF, Silverlight, UI Development, Software Engineers...
Candidate required who is used to working in a client...
Build Change Release Manager / Build Change Manager...
IT Service Desk Manager / Liverpool / Up to £60,000...
Keep up to date with the latest products, services and technologies from the world's leading IT companies. IThound.com brings you over 2,000 white papers, case studies and analyst reports.
Do you agree?
Embrace Risk
Nothing worth having in this world ever got accomplished without taking the chance it could horribly fail.
Posted by: Timechick 07 May 2010
At last
After many many VNU "Top 10" articles which are nothing more than diaphanously veiled attempts to increase page views, finally a decent one woth those extra clicks. Keep it up guys
Posted by: DoctorDee 13 May 2009
Well I was kinda waiting for that..
I was expecting Windows to be fairly high in this list, and I wasn't disappointed, but what's missing from this list is over enthusiastic data collecting. Perfect example. I signed up to the Asus forum recently because I'd messed up a BIOS upgrade on one of their motherboards and wanted some advice. In order to join, I HAD to supply them with the following: First and Last name Email Address Birthdate Home Address Phone Number In addition, there were optional fields for Mobile and Fax, Profession, Education and Computer Literacy. What do they need all this info for just so I can join their forum?? Well as I don't trust these people to be as judicious and security conscious about my information as perhaps my bank might be, I answered MYOB for most of the fields, but I wonder how many people answer these questions regardless. This is a prime candidate for hacking and ID theft.
Posted by: Jon 13 May 2009
Surely you forgot fmri brain scanning
Although the technology is young and can be as inaccurate as 78%, people in India are being tried with results of these brain scans as part of the 'evidence'. http://www.telegraph.co.uk/scienceandtechnology/science/sciencenews/3337446/Brain-scan-lie-detectors-may-already-be-in-use.html
Posted by: Em 13 May 2009
Filler
Next week: The top 10 IT journo filler stories
Posted by: Jack 11 May 2009
my top tech fear..
my top tech fear is that i might run out of electricity. No power, no life..and the sky is falling on my head.
Posted by: Ted 09 May 2009