Windows 10 Cannot Protect Insecure Applications Like EMET Can

Re:Windows 10 Cannot Protect Insecure Applications Like EMET... by CPAhem on Monday November 21, 2016 @04:11PM (#13009259)

Microsoft is discontinuing EMET next year.

This is a pity, as it allows Windows 7 and 8 users to protect apps against all sorts of exploits.

Perhaps MS wants to up the pressure to upgrade to Windows 10?

[ Parent | on HN ]

Re:Windows 10 Cannot Protect Insecure Applications Like EMET... by tammer on Monday November 21, 2016 @04:41PM (#13009480)

EMET is a complex service that requires a small dedicated team to functionally operate at organizations of any size. Its simply too hard of a sell to all but the most security-focused enterprises, and the resources that go into it would be better utilized on regular systems security.

[ Parent | on HN ]

Re:Windows 10 Cannot Protect Insecure Applications Like EMET... by blackflame7000 on Monday November 21, 2016 @04:55PM (#13009581)

I can tell you that the US Military uses EMET so resources are certainly not a problem.

[ Parent | on HN ]

Re:Windows 10 Cannot Protect Insecure Applications Like EMET... by Godel_unicode on Monday November 21, 2016 @07:17PM (#13010532)

I've heard that the roll out was incredibly painful, as evidenced by the repeated change of the STIG controls from required to optional and back.

[ Parent | on HN ]

Re:Windows 10 Cannot Protect Insecure Applications Like EMET... by elros on Tuesday November 22, 2016 @04:16AM (#13012813)

Isn't the US Military one of the best-funded organizations in the planet, though?

[ Parent | on HN ]

Re:Windows 10 Cannot Protect Insecure Applications Like EMET... by pixelcloud on Monday November 21, 2016 @05:15PM (#13009721)

I think their belief is that some of their new security features will cover the gap. https://www.microsoft.com/en-ca/WindowsForBusiness/Windows-A...

I know they partnered with Bromium to help create this. https://blogbromium.files.wordpress.com/2016/09/bromium-micr...

So essentially they replaced it with a microvisor, its pretty neat really. I haven't personally played with it yet, but I am curious how they deal with user/application data. Bromiums offering was very limited in many ways (mainly the applications that are supported) but it is amazing. You basically can open up a browser, grab a virus, shutdown the browser. And you are done! Once you launch it again it will be a clean application, on a fresh microvisor.

[ Parent | on HN ]

Re:Windows 10 Cannot Protect Insecure Applications Like EMET... by jsingleton on Tuesday November 22, 2016 @04:39AM (#13012898)

MS have listened and pushed back EOL to mid 2018. Looks like they are still trying to encourage upgrades to Win 10 though.

From https://support.microsoft.com/en-us/kb/2458544:

> The Enhanced Mitigation Experience Toolkit

> We have listened to customers' feedback regarding the January 27, 2017 end of life date for EMET and we are pleased to announce that the end of life date is being extended 18 months. The new end of life date is July 31, 2018. There are no plans to offer support or security patching for EMET after July 31, 2018. For improved security, we recommend that customers migrate to the latest version of Windows 10.

[ Parent | on HN ]

Re:Windows 10 Cannot Protect Insecure Applications Like EMET... by cptskippy on Monday November 21, 2016 @05:01PM (#13009627)

The release notes for EMET 5.5 state that it supports Windows 10. Weird...

https://www.microsoft.com/en-us/download/details.aspx?id=507...

[ Parent | on HN ]