Hacker News new | ask | show | jobs
by lightknight 4765 days ago
If I ever find a rootkit on my system, that OS gets binned permanently, no questions asked. I have a zero tolerance policy for who's system my computer is: it's mine. Not the US's, not Law Enforcement's, not the MPAA's, not MS's. If it achieves sentience, fine, it can be it's own; until then, any OS which fails to understand this arrangement (that a secure OS means that only I and system services (Windows Update, various package managers and their delegates) install software...third parties are not allowed), will be binned. If I can't trust my machine to have my singular best interests at heart, I cannot work with it; multiple tethers, trojan rootkits, superseding accounts with permissions higher than my own...these run contrary to my designs, and make it difficult, in the very least, to know when a problem is being caused by them, or by me. Plus I despise being spied on; if I'm going to put on a show, I'm going to get paid for it (no freebies).

I am more and more disturbed with the way OSs are going in general. They are...slowly removing usefulness from themselves, making it hard for admins to work with them, and adding on crap, like Windows Store...which is not needed. It's starting to feel like the computers I work with are...owned by someone else...which means I will start caring for them a lot less. The least of things which currently bothers me are the cross-threading errors which seem to appear in Windows 7...why have these not been fixed?

2 comments

This is a big part of the reason I moved entirely over to Linux and don't even have a token windows box anymore. When I absolutely need to run a windows app (Photoshop, or some MS Office crap that doesn't render properly in LibreOffice) I run (licensed) Windows 7 in a VM, where it is contained and constrained.

All the windows only applications I used to use for fun and hobbies (games, music apps) I've either found Linux replacements for (I basically buy the Humble Bundle whenever it looks good), or I simply do without. I would buy Linux applications for these functions if they were available AND the applications were sane, cross-platform developers sometimes try to treat your Linux box like its an MS box (wanting to put files all over the place etc) which is unacceptable.

We simply cannot trust MS or Apple. At least in the Linux community there is a strong culture of transparency, privacy, security, and freedom.

It's not down to the OS or OS vendor. Most rootkits are exploiting bugs, not intentional backdoors, and many of them are exploiting bugs that are not in the OS but in third party applications.

E.g. a common approach is to look for common third party applications that require admin/root privileges for some part of their functionality, and look for ways of tricking them into executing your code (via e.g. buffer overflows, or by finding ways of modifying the configuration with lower privileges).

So unless you never install third party software, you are potentially vulnerable even if the OS is flawless (and it isn't - no matter which OS you pick).