News for hackers. Stuff that matters.
Re:Windows OS Security by sandworm101 on Wednesday January 11, 2023 @09:38AM (#34338917)
>> The next biggest risk I have encountered is phishing emails

I describe that threat much differently. I don't blame users. I blame windows for allowing a link clicked in an email to install software, to alter system files, to upload PII to Nigerian servers. Users should not be trusted. Just because a macro in an excel doc inside an email CAN do something clever doesn't mean that windows should allow that to happen so easily.

[dead]
Re:Windows OS Security by hulitu on Wednesday January 11, 2023 @01:48PM (#34342667)
Outlook is not alone. Some email programs also hide the address or headers.
Re:Windows OS Security by luch on Wednesday January 11, 2023 @10:06AM (#34339203)
yep this problem has been solved on Android and iOS where the only place to install software is the App Store.

Windows did try to incite devs to use the windows store but it did not catch on. Restraining third-party installation only from the Store is a good way to remove adwares and co.

Honestly Microsoft did shat the bed with their app store, it has no right to be as difficult to use (both as user and developer) as it is.

Re:Windows OS Security by holbrad on Wednesday January 11, 2023 @10:38AM (#34339621)
One of the big reasons that the Microsoft store failed so hard was the absurd cut Microsoft wanted (30%).

Windows developers were and are already doing app distribution. 30% for something dev's were already doing...

Re:Windows OS Security by kyriakos on Thursday January 12, 2023 @01:05AM (#34349787)
Numerous android apps were found to be doing dodgy things after the fact. Probably ios ones too. It's not foolproof.
Re:Windows OS Security by pletsch on Wednesday January 11, 2023 @12:10PM (#34340990)
Would also like to see block mounting of ISOs by default.
Re:Windows OS Security by AstralStorm on Thursday January 12, 2023 @08:45AM (#34353377)
Windows does what it can with SmartGuard. Users just click through it. You can enforce signed software plus whitelist if you want in a system policy. Just entertain the thought that now you will have to curate a lot of software on the machines.

You can disable execute for download directories too.

These are not the default because it annoys everyone to no end. Likewise installing applications just from Microsoft Store. (Where badness has slipped in too.)

And finally, people still get caught with an MS Office document which will be opened from a download just fine and with a fake website.