Windows 7 flaws start to show

Send to a friend Print

Help more people find out about this story

Del.icio.us
StumbleUpon

Geoff Spick08 May 2009, 8:40 AM

Tossed like a clay target into the air, everyone is now taking potshots at the Windows 7 Release Candidate


Security is a thorny and ever-changing problem. It took Microsoft until Windows XP Service Pack 2 to produce an OS that was even vaguely considered as safe enough for the typical consumer to use. So, why is Windows 7 starting to show cracks already? A host of researchers are pointing out flaws that the operating system is susceptible to.

The first of these is a bootkit, something that a criminal would have to have physical access to your computer to install. It sneaks in ahead of Windows, or potentially other operating systems, to install itself. So, if you let strangers near your computer, or work in an open plan office, beware. However, the creators of the bootkit point out that most hackers will find easier ways to break into any computer.

Next up is filename security. This is a throwback to older versions of Windows, where the hacker provides a file with a changed extension to pretend it is something else (launchme.exe.txt for example). An unsuspecting user launches it and is infected by the payload within the file. Happily, this is easily solved by changing a single setting in Windows 7, hopefully Microsoft will do this for the final release, to save a lot of potential hassle.

To fix your system, open a Windows Explorer folder, select Folder options... from the Tools menu. Click on the View tab, find the "Hide extensions for known file types" option and untick it. Click Apply and you will now see the file extension at the end of each filename.



If you don't know your .exe files from your .iwilleatyourpcalive files, follow this simple advice

Finally, there is the risk of getting a corrupt copy of the system itself. Microsoft has repeatedly warned about installing dubiously-sourced versions of the beta and release candidate. Now, it appears criminals are flogging the RC as a final product and adding their own little present in the installer. Remember kids, only buy genuine software!

Post your comment



Comments

RSS feed Email alert

agami (User):

I'm not aware of any efforts around marketing Windows 7 as flawless.

08 May 2009, 9:41 AM (6 months ago)report abuse Send to a friend reply

McBanjo (User):

Quoting agami:
I'm not aware of any efforts around marketing Windows 7 as flawless.

Sorry, but flawless is what consumers expect from a $200 operating system. When you've got hundreds of programs sitting on top of this foundation, it simply needs to be rock-solid, that's its job.

09 May 2009, 4:41 PM (6 months ago)report abuse Send to a friend reply

TV Bis (User):

Just loaded the RC version hoping it was going to cure my modem disconnection problem which worked fine with Vista but started to occur when I loaded the first release. Sadly no - still have the same problems.......
I am running 64 bit with a D-Link ADSL modem.
Any ideas?


08 May 2009, 10:27 AM (6 months ago)report abuse Send to a friend reply

Tin (Senior Forumologist):

A USB one I assume... Replace it. It's probably failing anyway.

08 May 2009, 12:04 PM (6 months ago)report abuse Send to a friend reply

NetR@nger (Cornerstone member):

Quoting TV Bis:
modem disconnection problem


Funny,that's the same problem i have with it,but im using a cable modem.

09 May 2009, 7:50 AM (6 months ago)report abuse Send to a friend reply

Trahald (New user):

Dumbest article ever. Aside from filename extensions, which should be shown by default, and which has existed for many years in at least the two most recent versions of windows, and can be changed with a simple setting as the article suggests.

However everything else the author mentions can hardly be described as faults with windows itself, and seems like FUD at best. Looks like APC has hit a new low here.

08 May 2009, 11:45 AM (6 months ago)report abuse Send to a friend reply

CBR1100XX (Advanced member):

Quoting Trahald:
Looks like APC has hit a new low here.

APC Forum is well known for contraversial headlining !
How many times have you seen the heading of a new Linux release start with "Windows Killer" :)
They do it to draw more comments and foodfights from all the fanboy camps.




08 May 2009, 12:26 PM (6 months ago)report abuse Send to a friend reply

CBR1100XX (Advanced member):

"Tossed like a clay target into the air, everyone is now taking potshots at the Windows 7 Release Candidate" - APC

All the Windows nay-sayers were taking potshots long before the RC !
You're just never gonna convince the die-hard MacHeads and Linux Geeks.
Windows will always be a higher security risk because IT IS THE MOST POPULAR OS on the planet and will always have a large target on its back for the malicious hackers.

08 May 2009, 12:22 PM (6 months ago)report abuse Send to a friend reply

Tin (Senior Forumologist):

Quoting CBR1100XX:
Windows will always be a higher security risk

Correct.

Quoting CBR1100XX:
because IT IS THE MOST POPULAR OS on the planet

Incorrect. It's popularity is questionable, but that is not the reason for attacking it. The reasons relate to the ease of attacking. Poor decisions such as denying some security fixes for pirated copies, and rushing releases have led to thousands of insecure Windows boxes. THAT is what makes them a target. You could have a 25:25:25:25 distribution of Windows:MacOSX:Linux:other, and Windows would still be targeted because it's the easiest.

Quoting CBR1100XX:
will always have a large target on its back for the malicious hackers.

As long as it's closed source and rushed, this will happen. The rushed releases mean no one properly tests things. The closed source means white hats can't look for major holes (only those who wrote the code can, which is really bad).

09 May 2009, 6:23 PM (6 months ago)report abuse Send to a friend reply

Raindog (Senior Forumologist):

Quoting Tin:
Quoting CBR1100XX: because IT IS THE MOST POPULAR OS on the planet
Incorrect. It's popularity is questionable, but that is not the reason for attacking it.

I'd have to agree with CBR that Windows popularity (or more correctly market penetration) is a major reason for most virus attacks being directed towards Windows.
I'd also have to confirm your suggestion that Windows is the easiest OS to infiltrate and the most difficult to secure.

Microsoft have recently tried a number of measures to secure Windows, most of which have served no purpose other than to infuriate and frustrate end users.

Yes as a predominant OS Windows will attract the greatest number of attacks, but that is no excuse for the gaping security holes still commonplace in an off the shelf Windows box. And it's no excuse for dumb measures such a Windows firewall being offered as any kind of solution.


09 May 2009, 7:10 PM (6 months ago)report abuse Send to a friend reply

CBR1100XX (Advanced member):

Quoting Tin:
Quoting CBR1100XX:
because IT IS THE MOST POPULAR OS on the planet

Incorrect. It's popularity is questionable,

So please enlighten us all with some references as to what you think is the most popular ?




09 May 2009, 9:54 PM (6 months ago)report abuse Send to a friend reply

Raindog (Senior Forumologist):

Quoting CBR1100XX:
So please enlighten us all with some references as to what you think is the most popular ?

I'd hazard a guess that Tin is making the distinction between most used and most popular.
While there is little argument about the former, there as plenty to suggest that many Windows users are increasingly unhappy with the product and its direction.

Apple could probably make claims towards being the most popular despite it being far from the markets best seller. The apparent popularity mostly attributable to the fanaticism of some of the user types Apple has attracted.


10 May 2009, 8:40 AM (6 months ago)report abuse Send to a friend reply

Darth Guybrush (New user):

My only bug-bear is the "switch to desktop" is on the far right-hand side and not really a natural fit after all these years using Vista.

Why can I not have a short-cut in the taskbar like XP and Vista? Is there a workaround? Apart from that... oh wait... I actually LIKED having the side bar and find it a pain to have to hover over that skinny little bit of screen real estate to remind me what the temperature is (at the moment damn cold).

All my software including most of Adobe CS4 and ColdFusion 8.0.1 are running flawlessly. I played a bit of Half-Life 2: Episode 1 and damn it ran fine. I like the themes but better like the fact we can make our own. It is hands down faster to boot and use and (so far) requires FAR LESS PATCHING than Vista (SP2 NOW please Microsoft!).

And the XP Mode works well for what it is supposed to be - a virtual machine - not a standalone OS running. And that too requires a lot of patching I noticed (IE 6 WTF?) but it to is running Adobe CS4 and other stuff too with no problems.

Looking good so far MS but bring back the sidebar for those who want it.

08 May 2009, 12:59 PM (6 months ago)report abuse Send to a friend reply

Tin (Senior Forumologist):

Quoting Darth Guybrush:
(IE 6 WTF?)


That's likely because many corporate users considering this will want IE6 for compatibility with their broken internal web sites. MS need to really try to convince these companies that 7 is a worthwhile upgrade, especially after Vista's failure.

09 May 2009, 6:31 PM (6 months ago)report abuse Send to a friend reply

techdribble (User):

this biggest flaw in any OS is the person using the keyboard.

08 May 2009, 3:08 PM (6 months ago)report abuse Send to a friend reply

Darth Guybrush (New user):

So you won't pay for a licence? Well you sir are an idiot!

08 May 2009, 10:26 PM (6 months ago)report abuse Send to a friend reply

Darth Guybrush (New user):

Unless you are a pirate, scum of the earth type, then WAT is nothing to fear.

11 May 2009, 3:12 PM (6 months ago)report abuse Send to a friend reply

Tin (Senior Forumologist):

Keep telling yourself that...
I am not alone in having seen WGA accuse me of being non-genuine at work, where we have a state wide volume license agreement. We had a number of computers nagging people because Windows wasn't genuine... On fully licensed systems.

I also abandoned Vista on my laptop that actually has a Vista license because it stopped letting me log in. Meanwhile my unlicensed copy on my desktop kept running for months after that (until it was hosed to make way for XP). Go figure.

12 May 2009, 2:22 PM (5 months ago)report abuse Send to a friend reply

Raindog (Senior Forumologist):

Quoting techdribble:
this biggest flaw in any OS is the person using the keyboard.

Might be at your place! Certainly doesn't apply for most of us, we've been pointing out flaws and annoyances through numerous releases now.



12 May 2009, 8:08 AM (6 months ago)report abuse Send to a friend reply

Halcon (Advanced member):

The biggest flaw in Windows 7 is called WAT (Windows Activation Technology) this is the renamed WGA in disguise, Microsoft is being arrogant company, by trying to keep the most hatred feature alive in the next OS incarnation.
If this is the case, I have no incentive to buy Windows 7, I will keep using XP instead.
Think twice before you rush out with your cash money to buy the finished product in October or early November this year.
Try the RC at your risk, you have been warned beforehand!

08 May 2009, 5:32 PM (6 months ago)report abuse Send to a friend reply

todd_h86 (Cornerstone member):

Halcon, open up your favourite compiler and build yourself a bridge to get over WGA and WAT....
WGA is just as bad in XP as in Vista (If not worse)

Quoting Halcon:
If this is the case, I have no incentive to buy Windows 7, I will keep using XP instead.

Well you can stick with your 6 and a half year old OS while the rest of us use a more up to date and secure OS.

I think WGA is a bit much, and they could really be doing different things to prevent piracy, but I don't have an issue with it, yes its a pain to have to activate every machine I reinstall (just like shock horror most other programs....) but it wouldnt stop me from upgrading to a new version, how many times do you reinstall your OS a day?



Quoting Halcon:
Think twice before you rush out with your cash money to buy the finished product in October or early November this year.
Try the RC at your risk, you have been warned beforehand!


Is it really your place to lecture me and give me warnings about buying a product? Think twice before you reinstall XP this October, early Novembet, try the RC of Windows 7, you will like it!



09 May 2009, 8:15 PM (6 months ago)report abuse Send to a friend reply

sjaeger172004 (User):

Quoting Halcon:
Try the RC at your risk, you have been warned beforehand!

That is why Microsoft states NOT to install Windows 7 RC on a production computer as it is for evaluation only and using it at your own risks.

To be on the safe side I have tit dual boot with Windows XP Pro..

Quoting Halcon:
The biggest flaw in Windows 7 is called WAT (Windows Activation Technology) this is the renamed WGA in disguise, Microsoft is being arrogant company, by trying to keep the most hatred feature alive in the next OS incarnation.

My Opinoin is that Microsoft is so fed up with piracy (It is expensive andhard work to develop software. So I think to a certain degree Microsoft has a right to do WGA or WAT or what ever you want to call it.


10 May 2009, 12:42 PM (6 months ago)report abuse Send to a friend reply

Halcon (Advanced member):

Quoting sjaeger172004:
My Opinion is that Microsoft is so fed up with piracy (It is expensive and hard work to develop software

Microsoft is using it as an excuse to torment the legitimate users, it knows well that is waging a losing battle against the pirates.
Previously, was a report on the disadvantages of WGA here in APC Mag, this feature as I said in my comment has been renamed WAT, to create an smoke screen to the users and let them think WGA is gone when the fact is the contrary.
If Microsoft persists with its intent to include this approach, this will be the second fiasco after Windows Vista, this will be a detriment to the prospective users.
Probably there is more hidden traps in the OS as well, so I am very wary now.
Moreover, I will keep using the XP version as long as I can see fit to use it, my other option is Linux as well, I know the open source people is making an heroic effort, so there is no need to keep talking about it now.
Our talk here is about the flaws that have surfaced with the latest beta, therefore we know what Microsoft want to do when it will sell the finished product later, this does not inspire me trust!

10 May 2009, 9:38 PM (6 months ago)report abuse Send to a friend reply

FindTheWalrus (User):

Vista SUCKS!....sorry, wrong os :)

11 May 2009, 3:41 PM (6 months ago)report abuse Send to a friend reply

TV Bis (User):

Quoting FindTheWalrus:
Vista SUCKS!....

No it's not Vista it's just your computer. You can put a good new engine in an old car but the car body will always let you down.......




01 July 2009, 10:09 AM (4 months ago)report abuse Send to a friend reply

todd_h86 (Cornerstone member):

Quoting Halcon:
flaws that have surfaced with the latest beta, therefore we know what Microsoft want to do when it will sell the finished product later, this does not inspire me trust!


Do you base all your purchasing decisions on beta software? Man you must have next to nothing on your PC!

I always thought beta software WAS TO GET THE FLAWS IN THE SOFTWARE TO SURFACE!!! I could be wrong though...

Hey Microsoft, your software sucks because your beta software has some issues..... ...... yeah you heard me......

Just read what Microsoft are saying about the new WAT, its to make sure the customer isn't being ripped off, now isn't that nice of them? Looking out for the customers? ;)

12 May 2009, 8:33 AM (6 months ago)report abuse Send to a friend reply

Halcon (Advanced member):

Quoting todd_h86:
always thought beta software WAS TO GET THE FLAWS IN THE SOFTWARE TO SURFACE


I have no problems with that, this is like to trick a little child with a bag of caramels to entice him/her to buy the product, this is what Microsoft wants from the public.

Quoting todd_h86:
Microsoft are saying about the new WAT, its to make sure the customer isn't being ripped off


Nonsense! Microsoft has never cared about the user, just wanted to rip off the user with lots of false promises.
The beta give us a glimpse of what is all about, after all, Microsoft Will not listen to the users about the bad features included because it want to go ahead and make life miserable for the legitimate users, meanwhile the ones who get away with that are those that always like to play with the pirated versions of the software.
I liked Microsoft in the past when I started to use a personal computer since using my first PC a i386 processor, with 60 MB of HDD, 4 MB of RAM, and built in Memory graphics (Paradise) I have gained experience after using different types of computers with several configurations.
People out there does not understand much more about computers, they think this is just science fiction and nothing else, these are the most vulnerable group that can be tricked easily, because they don't know how computers work.
I hate Microsoft for its arrogant stance, impulsive conditions upon the users and the lack of care.
A more balanced attitude towards the users would have won a customer loyalty to Microsoft, I know there is too much to talk about it, lets see how will go this circus anyway.
Okay APC writers and contributors, bring up more news, what is written now will be history later, lets look up the horizon in computing, cheers to everyone!

12 May 2009, 8:05 PM (5 months ago)report abuse Send to a friend reply

Jimmyg (New user):

I work in R&D. I'm forbiden to say what company I work for on here, but I can tell you that the products said company makes feature a piece of fruit with a bite taken out of it.

I own a Mac & a PC. The mac I use for day to day stuff like e-mail, music, movies etc & my PC is a thoroughbred gaming beast so I consider myself somewhat of an expert (Yes I'm an egotistical wanker, deal with it).

In my experience, Mac have more gaps in their security, but, because it's not used as much, people tend to be less interest in hacking them. But the gap is closing, Apple now has 28% of the notebook market so I think we are going to be seeing the flaws in OS X becoming more apparent.

Oh & I have had my mac hacked & my account details taken & exploited. It does happen, no matter what OS you use, no matter how careful you are.

I love to laugh at people who buy Quad-Core gaming machines then load them with XP. You do realise that XP can only effectively address 2 cores don't you?

Vista isn't perfect, I'm sure Windows 7 won't be either, but for most of us, it's the best we have at the moment. My gaming machine cost me $6000, an equivelent Mac Pro is worth nearly $15000 & you can only get about 40% of the games for it, and the ones you do get usually come out 6 months after they do on PC.

Vista gets my vote.

11 May 2009, 11:33 PM (6 months ago)report abuse Send to a friend reply

DandamanV (User):

I hate it how people have to ruin things... I happen to like Windows 7.

30 September 2009, 8:00 PM (1 month ago)report abuse Send to a friend reply

anonymous user Anonymous user


Tags