October 2006 Entries

A word about Microsoft's PatchGuard

I've been watching the furor over Microsoft's decision to secure the kernel in Vista to unprecedented levels with great interest.  Symantec and McAfee, the two leading antivirus providers, are screaming bloody murder because it removes their primary mechanism for detecting hostile code. It's the battle many of us security geeks have been waiting for, really.  Microsoft finally did something for the sake of security that is going to absolutely BREAK a ton of third-party applications.  How many times have we lamented Microsoft's legendary penchant for ensuring backwards compatability, even if it meant removing a much-needed security control?  Internet Explorer anyone?  VBA?  Hello? Security people...