Vista Hacked At Black Hat

[profdlp]

Perfect security measures are impossible to achieve, but let's hope the final release of Vista is a little closer to the mark.

While Microsoft talked up Windows Vista security at Black Hat, a researcher in another room demonstrated how to hack the operating system.

Joanna Rutkowska, a Polish researcher at Singapore-based Coseinc, showed that it is possible to bypass security measures in Vista that should prevent unsigned code from running.

And in a second part of her talk, Rutkowska explained how it is possible to use virtualization technology to make malicious code undetectable, in the same way a rootkit does. She code-named this malicious software Blue Pill.
MS: Buy Vista for the security (http://news.zdnet.com/2100-3513_22-6032344.html?tag=nl)

Source: ZDNet (http://news.zdnet.com/2100-1009_22-6102458.html)

[Kwitko]

Before the Windows bashers defile this thread, I would like to stress that no operating system is 100% safe. Millions of lines of code and you're bound to miss something somewhere.

[profdlp]

...I would like to stress that no operating system is 100% safe...
If it can be invented by the mind of man, it can be figured out by the mind of man.

Unless that man is General Keebler. :mullet:

[Thrax]

"...And in a last Alliance of Men, and Elves..."

Er, sorry.

[Leonardo]

It should also be noted that Microsoft actually paid a sponsorship fee at this year's Blackhat convention. There were a couple MS corporate types there who formally invited convention attendees to test Vista and do their best to break in. I think that is good thinking.

Oh yes, BTW, at the same convention OS-X was hacked into also. (Sorry for the generic terminology. I don't remember the details.)

[RWB]

Before the Windows bashers defile this thread, I would like to stress that no operating system is 100% safe. Millions of lines of code and you're bound to miss something somewhere.

Not to mention this is still a beta product...

[CyrixInstead]

Wow this has turned into the "let's forgive Microsoft" thread!

~Cyrix

[WuGgaRoO]

hey they have bumbleded before and they will bumble again..need i remind u of one of the first win98 runs where the blue screen of death came up...

[airbornflght]

I was surprised M$ went to blackhat, though it is a good idea, cause the best people in the world are there.

[GrayFox]

It should also be noted that Microsoft actually paid a sponsorship fee at this year's Blackhat convention. There were a couple MS corporate types there who formally invited convention attendees to test Vista and do their best to break in. I think that is good thinking.

Oh yes, BTW, at the same convention OS-X was hacked into also. (Sorry for the generic terminology. I don't remember the details.)
The wi-fi driver was exploited nothing new there.

[Thrax]

No, it was something new. It's the first time someone has been able to successfully launch an attack at a PC via a wireless device without even having to contend with WEP, WPA or MAC filtering.