>>> Moi au contraire je trouves assez revelateur qu'un gars avec de fortes connaissances en securite utilise Vista et Win7 comme son desktop principal.
J'ai reçu un mail de Spender qui a vu qu'il y avait des commentaires dans la dépêche à propos de son utilisation de Windows :
I saw some questions on there in the comments about why I would use
Windows if I'm so interested in security. Though my choice to use the
OS as mentioned was for usability/productivity purposes, I do a number
of things on Windows to increase security compared to the default
install:
I browse/IM etc within a virtual machine. DEP (the windows equivalent
of PaX's PAGEEXEC) is forced on for every application (by default it's
not enabled on things like Firefox or Office). I also enable a new,
little-known feature called SEHOP. I've also written a utility that
displays what loaded DLLs have ASLR disabled and can modify their
binaries so that ASLR is turned on.
The machine is NATted behind a Linux machine running iptables.
I don't have any need for Anti-Virus software, and with my
reverse-engineering background can inspect binaries I believe are
suspicious. I then can then take a VM snapshot, run the binary, and
revert it afterwards.
Actual grsecurity development of course is done on either a real Linux
box or a Linux VM, and I always have a number of SSH sessions open to
Linux machines every day.
You can post this response if you feel it's useful :)
[^] # Re: Très drôle :)
Posté par patrick_g (site web personnel) . En réponse à la dépêche Une interview de Brad Spengler. Évalué à 10.
J'ai reçu un mail de Spender qui a vu qu'il y avait des commentaires dans la dépêche à propos de son utilisation de Windows :
I saw some questions on there in the comments about why I would use
Windows if I'm so interested in security. Though my choice to use the
OS as mentioned was for usability/productivity purposes, I do a number
of things on Windows to increase security compared to the default
install:
I browse/IM etc within a virtual machine. DEP (the windows equivalent
of PaX's PAGEEXEC) is forced on for every application (by default it's
not enabled on things like Firefox or Office). I also enable a new,
little-known feature called SEHOP. I've also written a utility that
displays what loaded DLLs have ASLR disabled and can modify their
binaries so that ASLR is turned on.
The machine is NATted behind a Linux machine running iptables.
I don't have any need for Anti-Virus software, and with my
reverse-engineering background can inspect binaries I believe are
suspicious. I then can then take a VM snapshot, run the binary, and
revert it afterwards.
Actual grsecurity development of course is done on either a real Linux
box or a Linux VM, and I always have a number of SSH sessions open to
Linux machines every day.
You can post this response if you feel it's useful :)
-Brad