• [^] # Re: impressionnant

    Posté par . En réponse au journal La concurrence a du bon. Évalué à 2.

    Tout le monde sait bien que Windows7 c'est l'OS des dieux. Arrete de dire que c'est pas un bon OS et en plus niveau securite c'est le top du top tu peux pas faire mieux. De tout de facon tout les produits Microsoft sont au top apres c'est la faute des mechants "hackers

    http://www.oneitsecurity.it/01/03/2010/interview-with-charli(...)

    Charlie Miller, pour ceux qui ne savent pas qui il est vous pouvez commencer par Wikipedia : http://en.wikipedia.org/wiki/Charlie_Miller_(security_resear(...) et ensuite simplement chercher son nom sur Google (oops, Bing)

    Windows 7 or Snow Leopard, which of these two commercial OS will be harder to hack and why?

    Windows 7 is slightly more difficult because it has full ASLR (address space layout randomization) and a smaller attack surface (for example, no Java or Flash by default). Windows used to be much harder because it had full ASLR and DEP (data execution prevention). But recently, a talk at Black Hat DC showed how to get around these protections in a browser in Windows.

    In Pwn2Own 2010 there is still no trace of Linux as possible target. Is it too harder to find exploits for Linux or a non commercial operating system has no interest for exploit hunters?

    No, Linux is no harder, in fact probably easier, although some of this is dependent on the particular flavor of Linux you’re talking about. The organizers don’t choose to use Linux because not that many people use it on the desktop. The other thing is, the vulnerabilities are in the browsers, and mostly, the same browsers that run on Linux, run on Windows.
    ...
    In your opinion, which is the safer combination OS+browser to use?

    That’s a good question. Chrome or IE8 on Windows 7 with no Flash installed. There probably isn’t enough difference between the browsers to get worked up about. The main thing is not to install Flash!


    Voila, rien a ajouter, encore une fois tu nous fais montre de ton ignorance crasse de l'informatique.