A nice Wired article on security holes, vs. actual hacks....

[kyrielle]

Are our systems vulnerable? Heck, yes, especially if we're running Windows. But for all the problems found, you'd think all our computers would go down twice a day. And (mostly) they don't. Or, to steal a quote (of Mike Sweeney) from the article:

"But, since it's theoretically possible someone might use this flaw as an attack method, it's reported as a 'security hole.' It's like saying there is a chance your car will roll over in a crash, therefore we will report the car as defective and a risk to you. Duh!"

I suppose I could strain the analogy by trying to make something of it (is Windows the SUV of the computing world, very capable but easily rolled?). But that would be tacky. :)

Comments

[pheon.livejournal.com]

You're right: 'tis a good article. The virus catching companies have way over-hyped the risk of many of the flaws. Of course, I still run a firewall with extreme restrictions on what comes through.

But I really like the idea of Microsoft as the SUV of the software world. With Bridgestone tires. :-)

[kyrielle]

Ah, now. Wouldn't the question of tires depend on what components you have uninstalled or avoided installing? ;) Hehehe.

And heck, I still run ZoneAlarm and make it check outgoing as well as incoming. Just because it's way over-hyped doesn't mean it's not a risk. And I'd hate to fall victim to what is often an avoidable risk, whether it's small or large.

[zorbathut.livejournal.com]

That's the interesting thing about my technique - I don't. I don't run a firewall, I don't even run a virus scanner. I keep reasonably up to date and make backups less frequently than I should, but still somewhat often.

The way I figure it, there are two people who could possibly attack me. There are the ones who get off on hurting people's computers, and they'll be using old techniques and just blitzing everything. I don't care about them because I add the latest patches once in a while. This also counts things like email viruses - it's not personal, I'm just getting crossfire. Luckily the people who have my email by and large don't get taken in by viruses. So I get them rarely at most.

The other kind of people are the ones with personal grudges against me, and they'll be probing my system and using the newest and best attacks. To put it simply, the amount of protection I'd need to shield against these people is enormous. And not worth it. Especially since I don't think there *are* any.

So I don't bother with the whole protection thing. I've seen people's virus scanners cause problems with games, I've seen people be unable to figure out what's wrong with their firewall cutting off their connections . . . and ya know, that just isn't a hassle I want to deal with.

So I don't. :)

[kyrielle]

I do tend to get email viruses - I love my virus protection for that - plus, frankly, I have to set this laptop on a corporate network also occupied by our salespeople. Viruses happen. And they will reach my machine. And they /might/ even manage to get themselves into a useful position on it, without the protection.

As far as my firewall, I love it. I use ZoneAlarm Pro. Unless I tell it otherwise, most of my ports are stealth. I don't care what techniques they're using, if they come in on most ports, I'm just plain not there. In addition, it blocks /outbound/ requests unless I okay it (such as software 'phoning home' and spyware that comes with other installs (of which there is quite a bit out there; it's pathetic). It also blocks some popups, though if that were my only goal, I could get a program designed for that purpose.