Article 37324 of alt.security:
Troy Billington <infoline@gil.net> writes:

> Peter da Silva wrote:
>
> > If the book is as uncritical of NT security as this review I would
> > hesitate to recommend it, myself. While the basic security model of
> > NT has a lot of potential, as implemented it's quite difficult to
> > balance security and convenience to end up with a system that's both
> > convenient to the general user and as secure as a simpler mechanism
> > such as selective privilege shedding (as in UNIX or VMS).Conversely, Look i

Let me give you an example... A few days ago I wanted to let someone suck
a few files off of one of my NT boxes via anonymous FTP, using the ftpd that
comes with NT 3.51. To my amazement, it appeared to be impossible to restrict
permissions on per-file basis, only for entire partititions. If anonymous
can read one file, he has to be able to read all the files on that
partition. If anonymous can write to a directory, he has to be able to
write everywhere on that disk partition.

This sucks.

> cracks, hacks and trojans that making even a properly configured UNIX,
> or VMS system a security risk as well...nothing is safe! I agree Windows
> NT has a *GREAT* potential as the future network operating system, also
> Have you seen the new features implemented in version 4.0 of NT ?? they
> are definately Heading in the right direction as far as these concerns
> go. I feel you should look deeply into the technical aspects of NT.

What version 4.0 of NT?  I remember Microsoft promising me in August 95
that I'll have NT 4.0 in Janurary 96. It's June now and I think they're
promising it for September 96.

> You may find there are mechanisms to enhance the security and integrity
> of the system that simply cannot be found in Unix, Posix or VMS.

I've been playing with various flavors of Unix as well as with VMS and NT
for a long time, and would be curious to see some examples of useful
security features in NT that weren't "borrowed" from either Unix or VMS.

Thank you,

---

<a href="mailto:dlv@bwalk.dm.com">Dr.Dimitri Vulis KOTM</a>
Brighton Beach Boardwalk BBS, Forest Hills, N.Y.: +1-718-261-2013, 14.4Kbps