Reply to thread

Message

<blockquote data-quote="ForgottenSeer 58943" data-source="post: 703759">Times are changing. Security protocols today are quickly proving to be inadequate. I&#039;m not referring just to the security theater of Windows Security Products, but the whole field in general. It&#039;s evolved faster than anyone can keep up and the threats are varied and more extensive. The leak of state sponsored malware repositories doesn&#039;t help. Meltdown and Spectre don&#039;t help. But what is being made ever more clear by the day is the fallacy of security in a Windows environment.Sure, I can put Windows boxes with AD controlled Standard User Accounts on a network of vlans. Toss a name brand endpoint antivirus on them. Enforce security policies across the board with gp pushes. Toss a Fortigate 200E on the gateway, drop a FortiSandbox APT on the network and enforce security fabric compliance and vulnerability scans and be &#039;fairly&#039; secure.&nbsp; But as time goes on, this isn&#039;t proving to be the panacea everyone thought as more and more slips through what amounts to an inherently insecure OS by design.Let&#039;s not neglect the elephant in the room with Windows.. All of those third party apps, security products, cleanup tools, uninstallers, browsers, text viewers and other crap. ALL of that increases the threat surface. Even something as benign as Ccleaner can broaden your risk as history seems to have shown. That&#039;s where ChromeOS comes in, you can dispense with all of that crap - in fact installing all of that useless crap isn&#039;t an option and doesn&#039;t full fill any purpose even if you could. Which itself not only lowers the threat surface dramatically, it closes off almost all of the remaining attack vectors. No OS is safe 100% of the time but Windows isn&#039;t safe even 50% of the time.</blockquote>

[QUOTE="ForgottenSeer 58943, post: 703759"] Times are changing. Security protocols today are quickly proving to be inadequate. I'm not referring just to the security theater of Windows Security Products, but the whole field in general. It's evolved faster than anyone can keep up and the threats are varied and more extensive. The leak of state sponsored malware repositories doesn't help. Meltdown and Spectre don't help. But what is being made ever more clear by the day is the fallacy of security in a Windows environment. Sure, I can put Windows boxes with AD controlled Standard User Accounts on a network of vlans. Toss a name brand endpoint antivirus on them. Enforce security policies across the board with gp pushes. Toss a Fortigate 200E on the gateway, drop a FortiSandbox APT on the network and enforce security fabric compliance and vulnerability scans and be 'fairly' secure. But as time goes on, this isn't proving to be the panacea everyone thought as more and more slips through what amounts to an inherently insecure OS by design. Let's not neglect the elephant in the room with Windows.. All of those third party apps, security products, cleanup tools, uninstallers, browsers, text viewers and other crap. ALL of that increases the threat surface. Even something as benign as Ccleaner can broaden your risk as history seems to have shown. That's where ChromeOS comes in, you can dispense with all of that crap - in fact installing all of that useless crap isn't an option and doesn't full fill any purpose even if you could. Which itself not only lowers the threat surface dramatically, it closes off almost all of the remaining attack vectors. No OS is safe 100% of the time but Windows isn't safe even 50% of the time. [/QUOTE]

Verification