Does Windows Vista has a security loop hole?

Philippines
April 11, 2007 10:03pm CST
Anti-virus software vendor Kaspersky has expressed concerns about the security mechanisms built into Windows Vista. According to ZDNet, the firm says Vista's User Account Control System, which asks for confirmation whenever users change system settings or install new programs, is so annoying that users will disable it. And with UAC disabled, the firm says Vista is less secure than Windows XP. Worse yet, Kaspersky chief executive Natalya Kaspersky told ZDNet that her analysts have already found five ways in which malware could bypass UAC. Kaspersky also added her voice to Symantec and McAfee complaints that PatchGuard, designed to protect the Vista Kernel, is hindering security companies' work. "PatchGuard doesn't allow legitimate security vendors to do what we used to do," said Kaspersky. Symantec has claimed that PatchGuard is hurting security vendors more than it was hurting malware writers. Bruce McCorkendale, a chief engineer at Symantec, said: "There are types of security policies and next-generation security products that can only work through some of the mechanisms that PatchGuard prohibits." With these revelations, should we really need to upgrade to Windows Vista where Windows XP has now been proven more secure than Windows Vista?
1 person likes this
1 response
@tommy408 (361)
• Malaysia
12 Apr 07
I see kapersky's concern was no on the lack of security in Windows (Vista) itself, but the "annoyance" it might cause to the user for being "overtly paranoiac" whenever the users changes system or install new programs. I say, asking for confirmation is a good thing. I, personally would not disable them. Annoyance, perhaps, is a small price you pay for security. However, since it is still in its baby stage, and Windows is notorious for releasing completely unstable first versions of its OS, we should at least wait for them to release service packs 2, 3 or maybe up to 4 (as what happened to Win2K