On Wed, Aug 06, 2008 at 05:28:01PM -0400, Eric Paris wrote:
I know you didn't say; that's why I asked. :-)
I dispute your assertion that this quesiton is irrelevant. It's
highly relevant, because if it's Windows clients, they ***won't*** be
using NFS.
As for other large desktop OS's, that would be MacOS and Linux;
anything else? And the big, huge, vast difference between Windows and
MacOS/Linux is that with Windows, in practice people ran with
Administrator privileges because most applications (including at one
point Microsoft Visual Studio :-) died and/or completely refused to
install if you didn't have Administrator privileges. So people very
regularly ran with Root privs. With Vista, you no longer run with
root privileges by default --- instead, applications still assume they
have Administrator privileges, causing the Really Annoying Popup boxes
to pop up each time the application needs to do something that require
privileges --- which has trained users to mindlessly click "OK" each
time the Annoying Popup Box comes up.
Given that MacOS and Linux don't have these flaws with respect to
applications regularly expecting root privileges, will you admit that
perhaps some of the extreme scanning tactics that were required by
AntiVirus vendors might be not as necessary for "other desktops"?
Asking the question is important because if they are spending all of
their time on Windows virii, then your "elementary threat" is really
an "elementary strawman". Or, at the very least, it's a low priority
effort, since the number of virii out in the field for Linux and MacOS
desktops is in the noise compared to Windows. I know that it's
convenient for AV vendors to claim in their marketing literature that
this is only because Windows is more popular, but while that might be
part of it, it is also true that there are significant, structural
differences between Windows and those other large desktop candidates.
Giving up my water bottles and having to take off my shoes at airport
security has been justified in the name of "multiple layers of
security". No, I'm NOT a fan of mindlessly using "defense in depth"
as an excuse for arbitrary amounts of security and giving up arbitrary
amounts of my private data. You need to prove to me that from a cost
benefit tradeoff it's really worth it.
- Ted
--
