Jump to content

Criticism of Windows Vista: Difference between revisions

From Wikipedia, the free encyclopedia
Browse history interactively
← Previous editNext edit →
Content deleted Content added
VisualWikitext
Gloriamarie (talk | contribs)
8,200 edits
m →‎Supporters: copyedit
Line 381: Line 381:
== See also ==
== See also ==
* [[Features new to Windows Vista]]
* [[Features new to Windows Vista]]
* [[Features excluded from Windows Vista]]
* [[Features removed from Windows Vista]]
* [[Security and safety features new to Windows Vista]]
* [[Security and safety features new to Windows Vista]]
* [[Development of Windows Vista]]
* [[Development of Windows Vista]]

Revision as of 07:22, 8 March 2007

Windows Vista, the latest version of Microsoft's desktop operating system, has been the target of a number of negative assessments by various groups. Criticisms of Windows Vista have included concerns about the security implications of the large amounts of new code, the inclusion of a number of new Digital Rights Management technologies aimed at restricting the copying of digital media, and the usability of the new User Account Control security technology. Security software companies like McAfee and Symantec have also lodged complaints that Microsoft has implemented new security measures that prevent their software from being able to access certain parts of the operating system. Additionally, reviewers have noted similarities between the Vista interface and that of Apple's Mac OS X operating system. Concerns have also been raised about many PCs not meeting "Vista Premium Ready" hardware requirements.

Security

In a July 2006 report,[1] security software vendor (and recently a competitor to Microsoft's OneCare) Symantec's Advanced Threat Research Team said that the large amount of new and untested code in Vista, especially the new implementation of the network stack, could cause instability and new security flaws.[2] The report claims that "Microsoft has removed a large body of tried and tested code and replaced it with freshly written code, complete with new corner cases and defects". Microsoft responded that they "believe the claims are […] unsubstantiated", and Symantec admits that all of the bugs it found were fixed by the time Beta 2 was released, but adds that "While it is reassuring that Microsoft is finding and fixing these defects, we expect that vulnerabilities will continue to be discovered for some time. A networking stack is a complex piece of software that takes many years to mature." IPv6 tunnelling and peer-to-peer collaboration technologies were identified as additional potential problem areas. Firewall maker Agnitum and others have argued that the Kernel Patch Protection feature (also known as "Patchguard") for the 64-bit version can be circumvented by hackers and that some security software makers must use similar methods.[3][4]

McAfee has also said that Vista will be even less secure than previous versions of Windows.[5][6]

According to CNET News.com some critics are unenthusiastic about the Vista security features, because they believe it "offers mostly basic protection and is not the best of its class."[7]

There is no doubt that Vista will be Microsoft's most secure operating system. However, most secure is not equivalent to secure.

— Natalie Lambert, analyst, Forrester

Pirates have already cracked the security features of Vista which allows pirates to download Vista and a product key and to install it on their systems, only a few days after Vista went gold. However, Microsoft claims this only affected copies made before the Vista's release to manufacturing (RTM).[8]

Vista, like XP, also lacks some basic security features such as a "secure erase" function and encrypted virtual memory files.[9][10]

Digital Rights Management

Another common criticism concerns the integration of new forms of Digital Rights Management into the operating system, specifically the Protected Video Path (PVP), which involves technologies such as High-bandwidth Digital Content Protection (HDCP) and the Image Constraint Token (ICT). These features have been added to Vista due to an agreement between Microsoft and major Hollywood studios.[11] Microsoft claims that movie studios and other providers of "premium content" will only allow their data to be played back on PCs if sufficient protection is granted. This will concern, among other things, play-back of protected content on HD-DVD and Blu-ray discs.

Pardon me for being vulgar, but HDCP can kiss my analog ass.(...)To enjoy these, desktop users'll be spending a minimum of $200 on a shiny new flat panel that is HDCP enabled and a minimum of $60 on a shiny new video card that is HDCP enabled(...)

— Dustin Sklavos, editor, Notebook Review[12]

In essence, the Protected Video Path mandates that encryption must be used whenever content marked as "protected" will travel over a link where it might be intercepted. This is called a User-Accessible Bus (UAB). Additionally, all devices that come into contact with premium content such as graphics cards have to be certified by Microsoft.[11] Before playback starts, all the devices involved are checked using a Hardware Functionality Scan (HFS) to verify if they are genuine and have not been tampered with. Devices are required to switch off or artificially degrade the quality of any signal outputs that are not protected by HDCP. Additionally, Microsoft maintains a global revocation list for devices that have been compromised. This list is distributed to PCs over the Internet using normal update mechanisms. The only effect on a revoked driver's functionality is that high-level protected content won't play — all other functionality, including low-definition playback, is retained. [11][13]


Detractors

Peter Gutmann, a computer security expert from the University of Auckland, New Zealand, has released a whitepaper[14] in which he raises the following concerns against these mechanisms:

  • Adding encryption facilities to devices makes them more expensive, a cost that is passed on to the user.
  • If outputs are not deemed sufficiently protected by the media industry, then even very expensive equipment can be required to be switched off (for example, S/PDIF-based, high-end audio cards).
  • Some newer high-definition monitors are not HDCP-enabled, even though the manufacturer may claim otherwise.
  • The added complexity makes systems less reliable. Gutmann cites anonymous sources from within Microsoft who, as he says, "are quite distressed about having to spend time implementing large amounts of anti-functionality when it's already hard enough to get things running smoothly without the intentional crippling."
  • Since non-protected media are not subject to the new restrictions, previously legal users may be encouraged to illegally remove the protection in order to view them without restrictions, thus defeating the content protection scheme's initial purpose.
  • Protection mechanisms, such as disabling or degrading outputs, may be triggered erroneously or maliciously, allowing denial-of-service attacks.
  • Revoking the driver of a device that is in wide use is such a drastic measure that Gutmann doubts Microsoft will ever actually do this. On the other hand, they may be forced to do it because of their legal obligations to the movie studios.

Steve Gibson of Gibson Research Corporation has stated during his Security Now! show that he agrees with Peter Gutmann in principle and that what he proposes is a factually accurate description of what is found in the specification from Microsoft.[15]

The Free Software Foundation is leading a campaign called "Bad Vista" against Vista on these grounds, as well as because it is an example of prominent proprietary software.[16]

Supporters

Microsoft has published a blog entry with "Twenty Questions (and Answers)" on Windows Vista Content Protection, intending to refute some of Gutmann's arguments.[17]

Paul Smith, a Microsoft MVP and beta-tester, has written a response to Gutmann's paper in which he counters some of his arguments.[18] Specifically, he says:

  • Microsoft is not to blame for these measures. The company has been forced to do this by the movie studios.
  • The Protected Video Path will not actually be used for quite a while. There is said to be an agreement between Microsoft and Sony that Blu-Ray discs will not actually mandate protection until at least 2010, possibly even 2012.[19]
  • Vista does not degrade or refuse to play any existing media, CDs or DVDs. The protected data paths are only activated if protected content requires it.
  • Users of other operating systems such as GNU/Linux or Mac OS X will not have legal access to this kind of premium content at all, however it is likely that software will be eventually engineered to facilitate viewing without restrictions and without asking permission from the movie industry.

OpenGL

Microsoft has also come under fire for their removal of OpenGL support in Vista. Rather than allowing OpenGL applications to interface with the hardware, Vista forces it to emulate OpenGL through DirectX. This only emulates the OpenGL API up to version 1.4, instead of the current 2.1. The change has caused significant drops in performance and overall picture quality in games that rely on OpenGL. One review went as far as to say that it made Quake 4 look like the original Quake[20]

User Account Control

The new User Account Control (UAC) security technology also causes concern among reviewers. While Yankee Group analyst Andrew Jaquith believes that critical security vulnerabilities may be "reduced by as much as 80 percent", he also noted that "while the new security system shows promise, it is far too chatty and annoying".[21] Veteran Microsoft reporter Paul Thurrott agreed, contending at the time that the implementation of UAC in Vista build 5342 is a "sad, sad joke" given the number of dialog boxes that one must wade through to do simple tasks.[22] However, Thurrott appears to have retracted those comments, claiming in his Windows Vista Beta 2 review, that UAC had been "completely overhauled" and is "less annoying," although he acknowledges that Microsoft is "still struggling to find a balance between security and annoyance."[23] User Account Control can be disabled through the Control Panel, or via Group Policy settings.

Similarities with Mac OS X

Another criticism is a claim by some that Windows Vista emulates specific features in Apple's Mac OS X. Scott Spanbauer of PCWorld jokes about a perceived "striking similarity" between Vista's Aero visual effects, icon design, buttons and those of Mac OS X's Aqua.[24] Paul Thurrott of WindowsITPro made similar comments in his review of build 5308, while also suggesting that some of the new applications "appear to be directly, ahem, influenced by similar applications in OS X."[22] John Rizzo of eWeek has noted that Vista is incorporating features which OS X has had for some time, such as fast searching and Smart Folders functionality.[25] This has led some to perceive that Aero is an imitation of Aqua.[26] Apple was keen to highlight the similarities during the keynote presentation at the Worldwide Developers Conference in August 2006, with Bertrand Serlet showing screenshots of Vista and OS X side-by-side.[27] [28] [29] However, many features including the Windows Sidebar and Search features were included and/or introduced in early alpha versions of Vista before Apple released the features in Mac OS 10.4.[30][31] Both Vista's Sidebar and Mac OS X's Dashboard share similarities with Konfabulator (now owned by Yahoo.) The application is still available from Yahoo under the name Yahoo! Widget Engine.

Hardware requirements

Considerable speculation and questions about the hardware required to run Vista were eventually dispelled when Microsoft revealed its own requirements and recommendations in March 2006.[32] However, controversy and concerns have arisen over how the increase in hardware specifications required to take advantage of many of Vista's new features may impact both personal and business users.[33] Elizabeth Judge of The Times stated that “the system’s full range of tools would be available to less than 5 per cent of Britain’s PC market” and that it “would run in full only on super-advanced PCs”. This has raised concerns that users wanting to enjoy the full experience would be forced to buy expensive new equipment, even though the minimum hardware specifications for Vista indicate that it will run on most PCs sold over the last three years. A Microsoft spokeswoman countered these claims by denying that current PC users would be unable to use Vista, stating, “A recent analyst report states that nearly all PCs on the market today will run Windows Vista.”[34] While most PCs purchased over the last three years will be able to meet Vista’s minimum “Windows Vista Capable” requirements, many laptops and low-end to midrange desktops with integrated graphics will not be able to meet “Windows Vista Premium Ready” requirements and will therefore not be able to run advanced features such as the Aero Glass interface.[35]

Removal of features

Microsoft has also been criticized for removing some heavily discussed features such as Next-Generation Secure Computing Base in May 2004, WinFS in August 2004, Windows PowerShell in August 2005 (though this was released separately from Vista prior to its release), SecurID Support in May 2006, PC-to-PC Synchronization in June 2006, and XPS Support in June 2006.[36] The initial "three pillars" in Vista were all radically altered to reach a release date[1].

Anti-trust controversy in Europe

The European Union Competition Commission has raised questions with Microsoft about Vista concerning compliance with EU rules intended to allow competition between security providers on the merits of their products. Commission spokesman Jonathan Todd stated, "If business and home users are deprived of choice, a security 'monoculture' based on Microsoft products may lead to less innovation and could harm all computer users. Security risks could increase, and not decrease." Todd also stated that, "it is Microsoft's responsibility as a 'near monopolist' to abide by EU competition rules—in particular, those that prohibit abuse of a dominant market position." Microsoft Chief Executive Officer Steve Ballmer met with EU Competition Commissioner Neelie Kroes in August 2006 to discuss EU concerns. Responding to EU concerns, Jack Evans, a Microsoft spokesman, stated, "We still have not received the guidance we're seeking. In July, we received a formal list of questions, but no answers about what specific concerns the Commission has, or how we should address them. We need answers, not questions." Evans went on to state "The bottom line is that we want to launch Vista in a fully lawful manner, and we want to avoid regulatory decisions that could increase security risks for European consumers." There has been speculation that this issue may delay the release of Vista in Europe, but as of September 2006 the Europe release date has not been affected.[37]

Pricing

Microsoft's pricing of Vista has been criticized by many as too expensive. A majority of users in a poll said that the prices of various Windows Vista editions posted on the Microsoft Canada website in August 2006 make the product too expensive.[38]

The differences in pricing from one country to another are also striking, especially considering that copies of Vista can be ordered and shipped worldwide from the US saving between US$42 and US$314. In many cases, this price differential is significantly greater than was the case for Windows XP.[39] At the current exchange rate, UK consumers could be paying almost double their US counterparts for the same software.[40]

Microsoft has come under fire from British consumers about the price it is charging for Vista, the lastest version of Windows. British (and French) customers will pay double the US price. The upgrade from Windows XP to Vista Home Basic will cost £100, while American users will pay only £51 ($100).[41]

— Computer Active

Online forums at Microsoft attracted many complaints regarding the pricing, one correspondent calling for a boycott of the product until pricing was set fairly.[42] When asked why British consumers should have to pay more for Vista, Bill Gates blamed exchange rates.[43]

If Microsoft has been tracking exchange rates, it clearly has not looked at them for a while because the pound has been pushing towards the $2 level for months. Yet an upgrade for the Home Basic edition of Vista costs $99.95 (about £52) in the US, compared with £85 ex Vat in Britain; if you factor in Vat, it costs around twice as much here.

— Computer Active

European prices like Belgium are typical in the range of €279 (full) and €149 (upgrade) for the Vista Home basic. The Vista Ultimate is €549 (full) €369 (Upgrade).[44]

See also

References

  1. ^ Friedrichs, Oliver (2006-07-18). "Windows Vista: Network Attack Surface Analysis". Symantec Security Response Weblog. Symantec. Retrieved 2006-08-13.
  2. ^ Evers, Joris (2006-07-18). "Symantec sees an Achilles' heel in Vista". CNet News.com. Retrieved 2006-08-13.
  3. ^ "Agnitum analyzes latest Microsoft security initiatives". Agnitum. 2006-07-26. Retrieved 2006-08-09.
  4. ^ Evers, Joris (2006-08-10). "Windows defense handcuffs good guys". CNET News.com. Retrieved 2006-08-13.
  5. ^ Samenuk, George (2006-09-28). "Microsoft Increasing Security Risk with Vista" (PDF). Retrieved 2006-11-29.
  6. ^ Montalbano, Elizabeth (2006-10-06). "McAfee Cries Foul over Vista Security Features". PC World India. Retrieved 2006-11-29.
  7. ^ Evers, Joris (2007-01-17). "Security tools ready for Vista launch". CNET News.com. Retrieved 2007-01-20. {{cite web}}: Cite has empty unknown parameter: |1= (help)
  8. ^ Moses, Asher (2006-11-14). "Vista gold but cracked already". The Age. Retrieved 2007-01-19. {{cite news}}: Check date values in: |date= (help)
  9. ^ Manes, Stephen (2007-02-08). "Dim Vista". Forbes. Retrieved 2007-02-08. {{cite web}}: Cite has empty unknown parameter: |1= (help)
  10. ^ Rotkowska, Joanna (2006-10-19). "Vista RC2 vs Pagefile Attack and Some". invisiblethings. Retrieved 2007-02-08. {{cite web}}: Cite has empty unknown parameter: |1= (help)
  11. ^ a b c Marsh, Dave (2005-04-27). "Output Content Protection and Windows Vista". Microsoft. Retrieved 2007-01-08.
  12. ^ Sklavos, Dustin (2007-02-22). "Windows Vista: The Best Case for Windows XP Ever". Retrieved 2007-02-22.
  13. ^ Marsh, Dave (2007-01-20). "Windows Vista Content Protection - Twenty Questions (and Answers)".
  14. ^ Gutmann, Peter (2007-01-27). "A Cost Analysis of Windows Vista Content Protection". Retrieved 2007-01-27. {{cite web}}: Check date values in: |date= (help) Also available: PDF version
  15. ^ Gibson, Steve (2007-01-17). "Steve Gibson & Peter Gutmann on Vista DRM". Retrieved 2007-01-17.
  16. ^ "BadVista.org". Free Software Foundation. Retrieved 2007-01-09.
  17. ^ Nick White and Dave Marsh (2007-01-20). "Windows Vista Content Protection - Twenty Questions (and Answers)". Retrieved 2007-01-22.
  18. ^ Smith, Paul (2006-12-31). "Windows Vista DRM nonsense". Retrieved 2007-01-03. {{cite web}}: Check date values in: |date= (help)
  19. ^ Fisher, Ken (2006-05-21). "Hollywood reportedly in agreement to delay forced quality downgrades for Blu-ray, HD DVD".
  20. ^ {{ cite web |url=http://www.legitreviews.com/article/385/1/ |title=Legit Reviews Gaming on Windows Vista
  21. ^ Joris Evers (May 2006). "Report: Vista to hit anti-spyware, firewall markets". PC World.
  22. ^ a b Thurrott, Paul (2006-04-19). "Windows Vista February 2006 CTP (Build 5308/5342) Review, Part 5: Where Vista Fails". SuperSite for Windows. Retrieved 2006-05-19. Cite error: The named reference "thurrott5308" was defined multiple times with different content (see the help page).
  23. ^ Thurrott, Paul (2006-05-20). "Windows Vista Beta 2 Review: Part 1: The Big Picture". SuperSite for Windows. Retrieved 2006-05-24.
  24. ^ Spanbauer, Scott (2006). "Windows Hacks: Vista Comes Into View". PCWorld. Retrieved 2006-05-08. {{cite web}}: Unknown parameter |month= ignored (help)
  25. ^ Rizzo, Juan (2005-07-31). "Apple's Tiger vs. Windows Vista: Who Comes Out Ahead?". eWeek. Retrieved 2006-05-08.
  26. ^ "Windows Vista resembles OS X". MacNN. 2006-03-09. Retrieved 2006-05-08.
  27. ^ "WWDC 2006 Keynote transcript". macrumors.com. 2006-08-07. Retrieved 2006-08-08.
  28. ^ "Apple takes shots at Vista". Cnet news.com. 2006-08-10. Retrieved 2006-09-01.
  29. ^ "Video of WWDC". YouTube. 2006-09-17. Retrieved 2006-09-21.
  30. ^ Thurrott, Paul (2002-11-13). ""Longhorn" Alpha Preview". Paul Thurrott. Retrieved 2007-01-15.
  31. ^ ""Longhorn" Concept Video". YouTube. 2003. Retrieved 2007-02-04.
  32. ^ Thurrott, Paul (2006-03-29). "Finally, Microsoft Releases Windows Vista Hardware Requirements". WinSuperSite.com. Retrieved 2006-08-15.
  33. ^ Wagner, Mitch (2006-03-01). "Microsoft Will Stumble On Windows Vista And Office 2007". Informationweek.com. Retrieved 2006-08-16.
  34. ^ Judge, Elizabeth (2006-05-20). "Windows revamp 'too advanced for most PCs'". The Times. Retrieved 2006-08-15.
  35. ^ Spooner, John G. (2005-08-05). "Will Your PC Run Windows Vista?". eweek.com. Retrieved 2006-08-15. {{cite web}}: Unknown parameter |coatuhors= ignored (help)
  36. ^ "What's been yanked from Vista, and when". Techweb. 2006-06-27. Retrieved 2007-01-29.
  37. ^ Evers, Joris (2006-09-18). "Vista's European battleground". CNET News.com. Retrieved 2006-09-19.
  38. ^ Beer, Stan (2006-08-30). "Windows Vista too expensive says users". ITWire.com. Retrieved 2006-10-19.
  39. ^ Warne, Dan (2007-01-22). "Is Vista's Australian pricing a rip-off?". apcmag.com. Retrieved 2007-01-23.
  40. ^ "Vista comes to rip-off Britain". The Inquirer. 2007-01-23. Retrieved 2007-01-24.
  41. ^ "Microsoft vilified over price of Vista". VNU Business Publications. 2007. Retrieved 2007-01-23. {{cite web}}: Unknown parameter |month= ignored (help)
  42. ^ "Gates cornered on UK Vista pricing". VNU Business Publications. 2007. Retrieved 2007-01-23. {{cite web}}: Unknown parameter |month= ignored (help)
  43. ^ BBC Technology News - Interview with Bill Gates (RealPlayer).
  44. ^ http://www.hcw.be/hcwcs/Vista.asp
Retrieved from "https://en.wikipedia.org/w/index.php?title=Criticism_of_Windows_Vista&oldid=113523668"