Thursday, November 19, 2009

Security Review: WIndows 7

Windows 7 is the most recent version of Microsoft Windows available. Microsoft Windows is an operating system for use on personal computers and is the replacement for its predecessor Windows Vista. Windows 7 is focused on being more of an incremental upgrade of the windows line and has the goal of being fully compatible with applications and programs for older versions of Windows. Added features include a new taskbar called the Superbar, performance improvements and a new home networking system.

The biggest problem when releasing a new operating system is holes in the programming. One of the biggest goals then is to limit the amount of errors prior to release. It is important that a new operating system allows it's users to easily access the information they have stored on their hard drives, but also be able to secure it. Windows 7 has Bitlocker which will encrypt the entire hard disk. Also like all operating systems it allows users to have personal logins and passwords to protect their information. Also protecting the integrity of the OS by having cd keys to register each owner is important, otherwise you do not know who is using it.

Like i said above holes in the programming are the biggest problem for new operating systems, especially for big name OS like Windows. Hackers look to exploit these errors in programming to gain access to people's computers. In doing so they are able to tamper with information or change a computer in a zombie computer without the owner even knowing. Also The manufacturer needs to worry about hackers stealing their products. Hackers find ways to download operating systems for free and crack CD key algorithms to use the programs for free.

The biggest weakness seen so far with Windows 7 is the ability of hackers to break CD key algorithms. I have seen on multiple blogs hackers who have found workarounds as well to exploit Windows 7 that they borrowed from friends. Also since the home networking system is brand new I can see a hacker finding a way to exploit it. New programs are the easiest to exploit because it hasn't been tested by hackers yet. The risk in using the new Windows 7 or any OS is easily apparent. If a hacker gains access through a hole in the system or a backdoor they have complete access to your computer and can use it how they wish. I feel the new home networking system may be a new way for hackers to do this.

The best that Microsoft can do to avoid these complications and possible risk is to accept that they are going to happen. No operating system is perfect and because such large teams of people work on them there are bound to be problems. The best they can do is to skim blogs and have their own hackers try to break the system and come out with service packs and patches to fix any problems found.

http://gizmodo.com/5404781/windows-7-hacked-again-for-keyless-activation
http://reviews.cnet.com/windows/microsoft-windows-7-professional/4505-3672_7-33704140.html

1 comment:

  1. Its amazing how if you google "Windows CD Keys" websites containing lists of known codes for every Microsoft program and OS are the first results to appear.

    I really wonder how well Microsoft keeps track of those codes. Do they have any way of seeing "red flags" if two or more people try to utilize the same code? Every time I have to install something from microsoft, I need the code to register and have the program "phone home" to Microsoft. I would hate for them to think I am borrowing stolen software (if someone guess my key already).

    I am sure Microsoft's Security Response Center knows that the algorithms have become public knowledge. With millions installing the new Windows 7, perhaps a few hundred non-genuine copies is not worth the effort.
    However, I would think tracking down these copies could lead Microsoft and law enforcement straight to the hackers looking to exploit Windows 7.

    ReplyDelete