Windows is a mess. I don't expect it to be any secure in the following years.
It is unlikely that non-admin permissions were able to stop the attack. the amount of 0-day EOP's within windows is ridiculous, truly unbelievable.
It is unlikely that non-admin permissions were able to stop the attack. the amount of 0-day EOP's within windows is ridiculous, truly unbelievable.
The only Linux distribution that beats it is Android, with LinuxSE, seccomp, userspace drivers (Treble), hardned access to native code, one user per app and sandbox enabled by default.
Windows lags far behind OS's like Android, iOS and even ChromeOS when it comes to security.
Where are the driver validation tools with a Z3 theorem prover for Linux drivers?
Where is the SAL static analysis for C and C++ kernel code like Windows has since XP SP2?
Where is the majority of userspace code implemented in managed languages like .NET?
For instance, rooting in order to install custom drivers\software is very difficult.
A single place to download content(App store) which provide tremendous control over content. detection of rogue apps, removal once they turn rogue, check assurance.
Seamless updates through a single pane of glass.(App Store again)
Windows store and Windows Sandbox is way more advanced than any GNU/Linux offering, including kernel and hardware sandoxing with help of hardware protections.
Still waiting for snap and flatpak to finally fix their security holes.
Chromium and Firefox configure the Windows sandbox and seccomp on Windows and Linux respectively. I would argue that seccomp is better.
On the other hand, Windows has its app sandbox and Linux has snap and flatpak. I don’t think any of them are amazing.
The solution supports MFA step-up auth to login to device, local print, proxy's traffic, per app vpn. Endpoint threat detection products for Android have more capabilities than ever. You can specify approved IP addresses, countries that traffic can communicate with. You can provide a list of approved WiFi BSSID.
With these mobile security SDK's embedded in native Android apps, functionality with the apps can be limited based on threat infractions.
E.g. - if the device magically became rooted while authenticated in android native app, or connects to rogue BSSID; the app performs whatever actions (terminates vpn to intranet, logs threat event on public facing endpoint, force re-authenticate with MFA.)
If you are looking to replicate the setup with MFA, proxy, per-app vpn and more; VMware's Workspace ONE product lineup will, along with Zimperium's mobile security SDK. While we can't rewrite all your apps from Win32 to Android for you, we can help you rewrite them to use OIDC and auth with a IDP of your choice.
Full disclosure; I work at VMware.
Personally, I think the power savings along is impressive. A tablet consumes a fraction of the power of a thin client running VDI or mATX desktop. Users get a device that feels modern, mobile-by-default and cutting edge. The business gets to realize electricity savings. At the same time, the business gets to redesign apps and services to run on mobile, so they can get rid of tech debt in win32 app design choices.
And completely out of reach as the typical setup most people buy for their homes.
0-day exploits for both iOS and Android are 3 times as costly as windows.
You're looking at linux as it is but linux as it is not what you should compare it to. Android\iOS or even something like Red Hat should be the comparison point.
Naturally I look at GNU/Linux, that is what average Joe gets on their computers.
iOS is not Linux thus not even part of this conversation.