Re: MS signed softwrare privileges

[smb () RESEARCH ATT COM (Steven M. Bellovin)]

In message <Pine.GSO.4.20.0002221939500.8993-100000 () ultra1 inconnect com>, Dax
Kelson writes:

> However (playing devil's advocate), you've trusted Microsoft to silently
> execute "any code" on your machine at least once before by installing
> their closed-source operating system, and that is a massive amount of
> unaudited code.

Yes and no.  First, as Juan's original note pointed out, this creates risks
from MS software you didn't install.  Second, and perhaps more important,
anyone who has ever administered a production system knows that you *don't* do
updates, even "harmless" ones, on production systems without testing *in your
environment*, and you *never* do them at critical periods.  The ability for
someone else to update my system is completely unacceptable, even without any
security issues whatsoever.

                --Steve Bellovin