Welcome!

Linux Authors: Gilad Parann-Nissany, Maureen O'Gara, Glenn Rossman, Hovhannes Avoyan, RealWire News Distribution

Related Topics: Linux

Linux: Article

Microsoft Urges Users Not to Use Windows on the Internet

The answer on Linux boxes is simple: Turn off unused services

In a recent article found on Microsoft's web site, users are urged to purchase additional hardware or software or keep computers using the Windows operating system off of the Internet.
 
It's unfortunate for all the hot air coming out of Redmond that Microsft still can't find a clue when it comes to basic computer security.  Microsoft continues to demonstrate that they
are years behind Linux and open source innovators in many areas, not the least of which is security.

In the article in question the author Tony Northrup adopts the position that the Internet is a bad place where bad things happen to innocent people.  To counter that problem he offers up that a firewall is necessary.  Don't mind the fact that Windows XP includes a software firewall which the article admits is insufficient.  Don't pay attention to the fact that there's really noway to turn off some open ports on Windows such as those exploited by the current DCOM worm.  Never mind that a firewall does nothing to prevent attacks from being successful if they use a delivery mechanism such as e-mail.

I'm not going to make a claim that Linux has all of the answers for security.  However, attacks can be prevented much easier with Linux.  The answer is simple: Turn off unused services. 

With Linux, it's quite trivial to turn off unnecessary functions or configure them so that they don't listen publicly for connections.  While this may seem like a basic function that should be included in every OS, it's missing from Windows.  Had this most basic function been included in any Windows operating system, the DCOM worm wouldn't have been nearly as successful.

I'm also not going to claim that users shouldn't use firewalls.  I have one at home built with software included free with every Linux flavor I can think of.  Unlike the ICF software included with Windows, a Linux firewall is a solid, fully configurable, enterprise class firewall that just works. 

Should a Windows user get a firewall?  Yes.  Should a Windows user make sure that they check for updates daily?  Yes.  Should a Windows user get an intrusion detection system for their computer and internal network? Yes.  Should a Windows user get anti-virus software and update it twice daily?  Yes.  Will that Windows user still be protected?  No.

Microsoft may catch up to Linux and open source in the area of security. I'll admit that the folks in Redmond have been doing a commendable job of playing catch-up to the innovators in other areas such as Internet applications and services, stability, and scalability.  Maybe by the next Windows release they'll be caught up to where Linux was last year.

_______________________________________________

More Stories By Steve Suehring

Steve Suehring is a technology architect and engineer with a solid background in many areas of computing encompassing both open and closed source systems, he has worked with a variety of companies from small to large, including new and old economy, to help them integrate systems and provide the best use of available technologies. He has also taken a hands-on approach with many projects and frequently leads teams of engineers and developers, and has written magazine articles as well as a book on the MySQL database server. He has also performed technical editing on a number of other titles.

Comments (12) View Comments

Share your thoughts on this story.

Add your comment
You must be signed in to add a comment. Sign-in | Register

In accordance with our Comment Policy, we encourage comments that are on topic, relevant and to-the-point. We will remove comments that include profanity, personal attacks, racial slurs, threats of violence, or other inappropriate material that violates our Terms and Conditions, and will block users who make repeated violations. We ask all readers to expect diversity of opinion and to treat one another with dignity and respect.


Most Recent Comments
Microsoft 11/08/04 05:56:53 AM EST

We never urge No one to not connect to the internet"Which was Created by Us":) Infact ALL Os got thier source code from Us we're the Best Around and NO OS Will ever pin us down Chow Chow!

Dan 08/26/03 02:59:32 PM EDT

To Jonathan commented on 18 August 2003:

You are so VERY wrong.....my PC had the server service disabled, along with Workstation, Computer Browser and Messenger and I STILL got the msblaster worm. Know the facts before you speak.

-Dan

None 08/22/03 04:52:28 PM EDT

You're right. At no point does Microsoft explicitly say "Don't connect
your Windows computer to the Internet." But what was the premise of the
Microsoft article then? I think it's to make sure that you keep your
Windows computer well away from that pesky Internet. Thus, Microsoft is
*urging* Windows computers to be kept away from the Internet. What else
are they saying?

Yes, you can turn off services in Windows. But according to Microsoft,
there will be some things that won't work when you do so:

http://www.microsoft.com/technet/treeview/default.asp?url=/technet/secur...

Also, where does the author say that setting up a Linux firewall is
easy? He doesn't.

The article seems reasonable to me. We're on a Linux site remember. It actually seems more innocent than some of the stuff that Microsoft puts out about Linux:
http://members.microsoft.com/partner/salesmarketing/salestools/competiti...

BlueDog 08/22/03 08:38:53 AM EDT

Good article, but what does Mr. Suehring consider a "recent" article from the Microsoft XP site? The article he cited is from one year ago. It is not a typo either.

I only bring this up because I feel it is important for Linux sources to get their facts correct in order to not be guilty of spreading Microsoft-style FUD (fear, uncertainty and doubt) about Microsoft products and advice.

I did agree with Mr. Suehring in his conclusions, although I believe that as all the flavors of Linux begin being used more and more throughout the world, we are going to be seeing more and more Linux security vulnerabilities showing up. It is part of the inevitable nature of computer programming, no matter whose language or product it is.

Ian Avery Bryant 08/19/03 01:20:33 PM EDT

Normally, I'd be reading this article with some amusement. It really isn't something to be angry about, generally. There are always going to be people who really need an OS like Windows, because they are never going to do anything more than write an Email or type up a document. I know many of these people, and while my first impulse is to teach them GNU/Linux, I understand that variety is the spice of life, but complexity (for some) is sometimes the bane of it.

BUT, like I said, that would be my normal attitude. Here is why I am furious about this article today. Recently, in response to SCO v. IBM, Microsoft reportedly invested huge sums of money in SCO to pay for "licensing fees" related to Linux (I'd be interested in HOW Microsoft is using those licenses and what distros they run). Because the details are not all yet public, I can not make accurate criticism. But I am furious. And, where I normally view advice from Microsoft such as that found in this article as simply babying a technically-inept public, I now see it for what it is: maximizing Microsoft's marketing reach, and fattening their wallets.

If the money funnelling into SCO from Microsoft is any indication, Microsoft would rather see software die a slow death from the restrictions placed upon creative programming due to licensing and expensive software. Remeber, Microsoft had to pay $60 million to Caldera in an earlier lawsuit. What other reason would Microsoft have to pay SCO/Caldera except the hope that SCO wins the legal battle and software is forever wrapped in the chains of licensing and patents?

Forget about securing your PC to go online being an important issue; soon, you'll have to worry about securing your Linux distro from prying lawyers who want to sue you for the source you use to make your Linux distro unique and useful.

Sebastien 08/19/03 08:23:53 AM EDT

This is the reasons why many Linux advocates cannot be taken seriouly, they're blinded by the only pupose they have in life: prove that Linux is better than Windows.

Windows and Linux both have easy to configure (and free) firewall available. So the question why computers on the Internet are insecure? Because the average user don't understand the technology well enough to protect himself. The weakess link is the user.

Mike Alberts 08/19/03 07:43:15 AM EDT

What a ridiculous article. Arrogant FUD like this that have no basis in reality is one reason for Linux remaining on the fringes. A Linux firewall is easy to set up? Yeah right. For who? People like me maybe, but not the average computer user. The average computer user doesn't even know what a port is.

Don't get me wrong, I use Linux and Unix all the time and appreciate the power and choices they bring, but articles like this are just a total waste of bandwidth. Get off your elitist high horse and help some people.

Eric Zayas 08/19/03 06:49:34 AM EDT

Microsoft Urges Users Not to Use Windows on the Internet?
That will happen when Linux tops MSWindows in systems installed worldwide.

CoffeeBreaks 08/19/03 02:20:22 AM EDT

Agree with Incogmito: there's NO such sentence in the article URGING the users to NOT CONNECT Windows to the Internet. If I were the author, I would add an apology at the top of the article. I won't come back to that site until this is done.

Incogmito 08/18/03 11:02:23 PM EDT

This is just so much hot air. Nowhere does the microsoft article that is referred to proclaim "don't connect windows computers to the internet!" The author of the original article is giving practical advice that any computer user should follow. My linux box is running a firewall and yours should too. Promote Linux but don't use stupid FUD to do it.

Jonathan 08/18/03 02:20:52 PM EDT

I am questioning your entire premise of this article... If a user shutdown the Server Service on their Windows OS (a unnecessary service for a home user for sure and probably one for most corporate users) their PC would never have been infected.

The turning off the Server Service shuts down all INCOMING RPC requests while still allowing you to browse other network resources.....isn't that exactly what you said Windows was incapable of doing?

"The answer on Linux boxes is simple: Turn off unused services"...well...I hear that the same thing for the Windows OS's as well.

M. A. 08/18/03 06:44:00 AM EDT

Windows XP DOES include a function to turn off services!!!