
Legacy of bad design...
Published: 21 May 2007 08:49 GMT
The director of security architecture for the One Laptop per Child project has blasted the IT industry over a legacy of failed desktop security.
Making a keynote speech at Australia's AusCERT 2007 security conference, Ivan Krstić said the fundamental problem is desktop PCs are based on a 35-year-old premise where software can run with the same privilege as the user. "The number one broken assumption of desktop security... is this very simple premise that all executing software should execute with the full permission that its user possesses," he said.
Read all about IT…
Check out the Editor's Blog for the silicon.com chief's take on the hot tech issues of the moment.
His criticism was not limited to Microsoft's Windows OS. "There are a bunch of programs that ship with all major operating systems - including Linux, Mac OS and Windows - that can format your hard drive, spy on your computer, spy on you with your microphone and camera and turn over control of your computer to third parties," he said.
According to Krstić, one example of such a program is Minesweeper - a game that has shipped with virtually all versions of Microsoft Windows. "This is no exaggeration. There is nothing in place to say that Minesweeper cannot do these things. That tells me something is pretty badly broken," he said.
Krstić said programs such as Minesweeper have the ability to affect other programs because of a premise that dates back to 1971, when the first version of Unix was released by Dennis Ritchie and Ken Thompson, and loading code onto a computer was no trivial matter.
He explained: "[In 1971] the only way that code could get from one place to another was with punch-cards or tapes. You carried it physically, put it on the machine and then ran it. If you did that then you should take responsibility for whatever that program does to your computer.
"Thirty-five years later we are using the same fundamental premise of security."
Krstić added that modern computers "run untrusted code every time they visit a website".
Munir Kotadia writes for ZDNet Australia
My client, based in Sydney Australia, requires a Senior Technical UI/UX Specialist to design, develop and test an external Web based member ...
My client based in Sydney Australia requiresa Lead Developer / Design Architect to develop, from the ground up, a new member management software and ...
IT Project Estimator (IT & Technology Programs)An exciting opportunity with a leading company for a successful technical project estimator with ...
Agenda Setters 2009
Welcome to the ninth annual Agenda Setters poll – silicon.com's list of the top 50 most influential individuals in the technology and IT industries, from techies and CIOs to entrepreneurs and business leaders. Find out more in our latest special report.
Is Your Enterprise Architected for Tomorrow's Growth?
Improving IT service delivery through an integrated approach to software asset management...
TechRepublic Resource Guide: Software as a Service (SaaS) for Small and Midsize Businesses...
Download a Free Trial of SmartDraw: Learn why SmartDraw is the ideal alternative...
Stories from the web...
Copyright © 2008 CBS Interactive Limited. All rights reserved. Top of page
Clive Longbottom Windows 7: Not perfect - but ready for prime time Microsoft's latest OS fixes most of Vista's ills - but still has challenges ahead
Stephen Kleynhans Mind the details with Windows 7 Just because it might work better than Vista, it doesn't mean you can be sloppy