Zeichick’s Take: Windows Azure and zero-day flaws



Email    print   
November 17, 2009 —  My brain is trying to wrap itself around two news items from Tuesday, Nov. 17.

The first was by SD Times reporter David Worthington, reporting from the Microsoft Professional Development Conference. His story, “Azure shines over Microsoft PDC,” covered the announcement on Windows Azure, now set to ship on Jan. 1, 2010. Windows Azure represents Microsoft’s extension of Windows into the cloud, which means that more and more companies will be outsourcing their enterprise applications and data beyond their own data centers.

The second story was in Computer Reseller News. In “Microsoft Warns on Windows 7 Zero Day,” Kevin McLaughlin writes about advisories on both Windows 7 and Windows Server 2008 R2. Microsoft says that there’s a vulnerability in the Server Message Block protocol stack, and a detailed exploit code has already been published.

I don’t know about you, but given the continuous stream of Patch Tuesday fixes that we’re seeing on product after product, I’m not sure that Windows is ready for the cloud. Windows Vista, remember, was marketed as the most secure version of Windows ever. After years of complaints by customers, Windows 7 debuted to be the most secure version of Windows ever. And yet, Microsoft can’t seem to stamp out the security issues.

It should be enough to give the industry pause.

Alas, Apple—often worshipped as the anti-Microsoft—has its troubles too. Apple’s Mac OS X 10.6 “Snow Leopard,” which came out in August, was downplayed as a mere tune-up of the previous Leopard operating system release. Yet Snow Leopard has also been plagued by bugs and security glitches.

On Nov. 9, Apple released its second major update to Snow Leopard, which addressed major flaws and security issues. It also published Security Update 2009-06 for Leopard, the company’s sixth big security patch of the year.

Can’t anyone get this right?




Related Search Term(s): Apple, Azure, Microsoft


Share this link: http://sdt.bz/33923
 
Most Read Latest News Blog Resources


Comments


11/18/2009 03:25:05 AM EST

I think windows is more then ready for the cloud... If you look at the core components of a clound infrastucture such as IIS 7 and SQL server then have very few vulnerabilities (2 fix for IIS, 4 for SQL server 2005, 0 for SQL sevrer 2008). As for windows server itself most of the vulnerabilites that were found are in components not user for cloud apps (The latest one the SMB flaw for example will never hit a production web server as nobody has any reason to allow SMB connections from the web) All this is just from a security point of view of course .. because if you factor in other important things such as features, ease of programming, performance etc. then windows is actually doing great :)

United Statesdevilmaster


11/20/2009 07:30:25 PM EST

It will actually be far easier to secure Azure as a Microsoft-operated cloud OS than it has proven to secure Windows or Windows Server as a system operated on hundreds of millions of personally owned computers. Each user is effectively a sys admin, but few of them act that way. As a result, many machines are unpatched, even though the patches are available. Microsoft will keep the cloud up-to-date and quickly apply patches. There is no silver bullet in this battle - there is too much money to be made in exploiting security flaws, just as there is in credit card fraud, car theft and other criminal activity - but I think Azure will prove to be a more secure, reliable and scalable platform than anything available today.

United StatesMike Kelly


Add comment


Name*
Email*  
Country     


  • Comment
Loading




close
NEXT ARTICLE
At TechEd, Microsoft turns focus to Azure
Azure now supports .NET 4.0, along with new development tools for Visual Studio 2010 Read More...
 
 
 
 
News on Monday
more>>
SharePoint Tech Report
more>>


   

 
 

Download Current Issue
FEBRUARY 2012 PDF ISSUE

Need Back Issues?
DOWNLOAD HERE

Want to subscribe?


 
blogs tab
Are you at risk for burnout?
Burnout is a severe problem and it can strike at any time. Here's how to tell if you are nearing the edge.
02/09/2012 02:16 PM EST

Agility, mom, and apple pie
If we're to evaluate the state-of-the-art in software development, we should start with the values espoused in the Agile Manifesto.
02/07/2012 11:57 AM EST

RIM woos developers with free tablet
How do you get more apps ported to the BlackBerry PlayBook? By giving every developer a free tablet, of course!
02/04/2012 01:57 PM EST

GitHire: Use Headhunters to Find Your Perfect Programmer
Are you a hiring manager tired of scouring the job boards? Check out this new service that will find 5 people interested in your jobs.
02/03/2012 12:17 PM EST

Facebook claims hacker cred
Facebook's SEC S-1 filing form includes a short essay on the Hacker Way by Mark Zuckerberg himself.
02/02/2012 08:26 AM EST

Ryan Dahl steps down
Ryan Dahl, creator of Node.js, steps back from his position as gatekeeper for the project.
02/01/2012 04:58 PM EST

 
Events calendar tab
2/13/2012 to 2/16/2012
Santa Clara
TechWeb

2/26/2012 to 2/29/2012
San Francisco
BZ Media

2/27/2012 to 3/2/2012
San Francisco
RSA

3/4/2012 to 3/7/2012
Las Vegas
IBM Tivoli

3/5/2012 to 3/9/2012
San Francisco
TechWeb