All the latest UK technology news, reviews and analysis

Top 10 dangerous technologies

by Shaun Nichols, Iain Thomson

09 May 2009

Comments: 6

  • Tweet this

Windows2. Windows
Iain Thomson: When Shaun and I were coming up with ideas for the weekly Top 10, the topic of dangerous technologies came up and it hit a spark. I sat there thinking 'Windows', and the fact this isn't number one is down to his winning a spirited argument and having logic on his side.

On one level Windows spawned the computer's acceptance by business. Having one standard to work to let developers build applications that everyone could use and made computing a safe choice for the IT buyer.

But, as we've seen from agriculture, monocultures are useful in the short term but can be incredibly damaging at the end of the day. Having Windows on 95 per cent of computers a few years ago meant that malware writers had a big, fat bullseye to aim at, and ultimately helped spawn the online fraud industry that is making everyone's lives a misery.

It's not that Windows is bad code, although it has been and still has serious weaknesses. It's that having one standard to rule them all is very bad security practice. Apple makes much of the fact that it doesn't get viruses, but that's got more to do with it being a smaller target. Personally, I'm sticking with Linux until it gets to be such a big target that we get malware problems there, then BeOS gets a turn if it's still up to date thanks to volunteers.

It is possible to make Windows secure, but it takes a hell of a lot of work and most IT managers have enough problems on their hands to make locking down corporate networks next to impossible.

Shaun Nichols: Windows in and of itself is a huge security liability and, while some of it is Microsoft's fault, not all of it is.

First and foremost, the company got serious about security way too late in the game. The Secure Development Lifecycle seems to have had a very positive effect on securing Windows, but it only came after the floodgates had been opened for several years and tens of millions of users were left at risk.

As Windows XP transitions into Windows 7, the new security practices should become even more apparent, but with malware now becoming such a lucrative industry the attacks will also become more sophisticated.

There are also factors beyond Microsoft's control that make Windows dangerous. The sheer number of unpatched and poorly maintained computers in the world is more than enough to keep the world's botnet herders knee deep in victims for years.

Sometimes users are too lazy to install monthly updates, other times they are using pirated copies of the software that can't be updated. Regardless, the amount of 'low-hanging fruit' out there is what keeps much of the malware industry thriving.

This does not mean that Mac and Linux users should ignore security. Just because you're not the prime target for infection doesn't mean that people still aren't targeting your system.

Virus1. Viruses
Shaun Nichols: Many of our technologies on this list have very legitimate and highly useful purposes. I can't, however, think of too many legitimate uses for computer code that can automatically install and replicate itself on a system without any user knowledge or interaction.

Initially developed as a bit of a curiosity or joke, computer viruses (and worms) have become a primary threat to IT worldwide and their eradication has spawned a multi-billion dollar industry.

Up until the internet boom, viruses were primarily just a threat to the surrounding software; the worst that could happen was that a destructive virus could wipe out your system. This meant the possible loss of huge amounts of data, but the only worry was destruction.

Over the past decade or so, however, malicious programs have gone from destructive to larcenous. Losing your system can be pretty bad, but it's nothing compared to having your bank account wiped clean or your credit card stolen.

Iain Thomson: I kind of miss the old days, when viruses were done for bragging rights on message boards. Now organised crime has got in the game and things have become much worse.

Viruses have the potential to screw up the computing model in two key ways. Firstly, as Shaun has mentioned, they can destroy vast amounts of data. This has become worse through the interconnected nature of computers.

But viruses also damage confidence. E-commerce is going to become an ever increasing part of the global economic system, but fear of infection or theft is stifling that. Already people are being turned off online banking and shopping because of the fear of getting their credit rating junked by a phisher. This is going to get worse before it gets better.

Law enforcement used to love the old-style virus writers. They weren't profit-motivated, and once caught coughed up everything for fear of going to jail. Now we face distributed teams of highly motivated criminals who bring to computer crime the same level of criminal nastiness you see in armed robbery, mugging and murder.

The battle against viruses will never end, barring a major advance in technology or users getting much smarter. To quote Winston Churchill: "This is not the end. It is not even the beginning of the end. But it is, perhaps, the end of the beginning."

Do you agree?

 

Add your comment

We won't publish your address
By submitting a comment you agree to abide by our Terms & Conditions. Your comment will be moderated before publication.

Poll

Flame virus poll

Are you confident that the UK's IT infrastructure is secure from attack in the wake of the Flame malware revelations?

35%

0%

11%

54%

Connect with V3.co.uk

Sign up to our daily or weekly newsletters

Symanteccloud

Social networking: a guide for IT managers

Social networking is almost ubiquitous. This white paper examines the benefits and risks and it looks at the different ways companies can reconcile them

Riverbed

Mitigating the risks of IT change

The importance of understanding your infrastructure

C#, WPF, Silverlight, UI Development, Software Engineers

C#, WPF, Silverlight, UI Development, Software Engineers...

Operations Manager

Candidate required who is used to working in a client...

Build Change Release Manager / Build Change Manager / Liverpool

Build Change Release Manager / Build Change Manager...

IT Service Desk Manager / Liverpool / Up to £60,000

IT Service Desk Manager / Liverpool / Up to £60,000...

To send to more than one email address, simply separate each address with a comma.