Security Firm Trend Micro Claims Windows 7 is Less Secure Than Vista Out of the Box
The headline sounds quite a bit more sensational than the content, but bear with me here folks. According to Raimund Genes, CTO of the security firm Trend Micro, the User Account Control changes in Windows 7 make it significantly less secure out of the box than Vista was. Genes claims Microsoft has made design choices that sacrifice security, primarily in the name of usability.
"I was disappointed when I first used a Windows 7 machine that there was no warning that I had no anti-virus, unlike Vista," Genes said. "There are no file extension hidden warnings either. Even when you do install anti-virus, warnings that it has not been updated are almost invisible." "Windows 7 may be an improvement in terms of usability but in terms of security it's a mistake, though one that isn't that surprising. When Microsoft's developers choose between usability and security, they will always choose usability," Genes argued.
This is an interesting theory, but is Windows 7’s really less secure? Some might argue that when dealing with the general public, security and usability is a delicate and important balance. If you nag and warn users too much about non-critical security issues, they tend to eventually tune out or pay less attention to them. For example, if UAC prompts are so frequent that they interfere with your work, you’re less likely to stop and examine each one to determine its validity.
What do you think?
![]()
Lhot
December 16, 2009 at 1:46pm
...just so you buy their product...I DON'T THINK SO :/
You shouldn't believe everything you read.
![]()
Danthrax66
December 16, 2009 at 6:03am
Yeah but I sent that from my phone so I couldn't proof read it. I really hate when complain about punctuation on the internet not everyone feels like proof reading all the time on the forums yes I will but in general I don't care.
![]()
Trooper_One
December 15, 2009 at 12:28pm
Being virus free is only as good as the user. The AV applications work only as complement and not a guarantee.
![]()
knighttoday
December 14, 2009 at 1:46pm
My first thought regarding Raimund Genes comment is "this guy is just protecting his pocket book". I have been working a computer helpdesk for 6+ years now and it is my opinion that for the general computer user (not the geeks or professional IT folk) ease of use does matter.
![]()
LatiosXT
December 14, 2009 at 7:24am
Anytime a "Security Firm" that sells a product and wants to say Windows isn't secure is definitely a red flag of "buy our product!". It was like that one company who sold "optimization" software saying that Windows 7's performance sucks compared to Windows Vista. Besides that, Trend Micro only proved one thing: Security is about as good as the user itself. All Genes proved is that he doesn't have much common sense when it comes to computer security as he should.
On the notion of UAC prompts, sure I'll get used to them and eventually click OK, but honestly, if you don't understand how they work, then the chance event that a UAC prompt goes off when you don't expect it will pass through. I don't know about you, but if I'm doing something like playing a game or browsing the internet and I get a UAC prompt out of the blue, I think that's a sign something isn't right.
![]()
stradric
December 14, 2009 at 6:08am
Trend Micro is probably just trying to bash Windows 7 because their Windows 7 support at this point is pretty horrible.
![]()
Devo85x
December 14, 2009 at 5:38am
They complain that Vista has UAC, but then still complain when Windows 7 doesn't... They say they don't get any antivirus warnings, but Windows Defender (I think it's called) will work as antivirus until you get something better (which is pretty much anything) and most antivirus software automatically updates, so no need for a warning.
![]()
tkddan87
December 14, 2009 at 2:27am
didnt MS come out sometime after Vista's debut and say something to the effect of "ya we made the UAC in Vista to piss you off"? although i seem to be one of the few to actualy like the level of 'in yourface'ness the uac in vista provided i do like how smooth 7 is without the constant interuptions. but this is true simply because something isnt there going HEY YOU SHOULD PROLLY HAVE THIS! doesnt mean it is not secure.
![]()
tkddan87
December 14, 2009 at 2:27am
didnt MS come out sometime after Vista's debut and say something to the effect of "ya we made the UAC in Vista to piss you off"? although i seem to be one of the few to actualy like the level of 'in yourface'ness the uac in vista provided i do like how smooth 7 is without the constant interuptions. but this is true simply because something isnt there going HEY YOU SHOULD PROLLY HAVE THIS! doesnt mean it is not secure.
![]()
nate714
December 14, 2009 at 2:09am
Lower UAC settings don't make Win7 less secure, just less idiot proof.
![]()
Yusonice
December 14, 2009 at 1:50am
They just want to sell their unpopular anti virus. Who uses trend micro anyway?
Even without AV installed for first few days, security of w7 is not necessarily compromised. It took me a month to install avg free, and nothing happened in that period of time
![]()
Tripacer99
December 14, 2009 at 1:14am
You guys should try using Common Sense 2010 - Professional version. It works wonders, I tell you.
![]()
Jono
December 14, 2009 at 12:34am
To call an OS less secure because it doesnt throw a big popup window at you when you dont have AV installed is moronic. No shit I don't have antivirus installed.. it's because I didn't install it. If a user isn't aware of safe browsing practices, chances are UAC's not going to help much, and if that user is aware, he/she most likely doesnt need a constant bombardment of UAC pop ups.
![]()
m1k3_flrs
December 13, 2009 at 11:44pm
Trend Micro is saying Win7 is less secure. and they want me to believe they're software is going to fix this problem. i installed trend micro on my cousins laptop and didn't protect it at all. i guess thats why he got the program for free when he bought his laptop. and i don't think i need to be reminded i don't have an AV cause when i know i need it, i go out and buy it. other users even if they keep getting messages that their AV is out of date, they still won't install one.
![]()
Tekzel
December 14, 2009 at 6:47am
I will tell you what I tell all of my clients. Antivirus software doesn't protect your computer. It helps YOU protect your computer. There isn't a security suite in existence that can keep a computer clean with a sufficiently ignorant user behind the keyboard.
Your cousin probably did something extremely dumb. I have recommended Trend for a number of years because it works reasonably well, is reasonably priced, and never, in my experience, overwelmed a machine because it was poorly written (as in any Norton AV prior to the 360 2009 version).
![]()
m1k3_flrs
December 14, 2009 at 10:18am
yea i agree AV software helps YOU protect your PC. and probably indeed, he did something stupid. i keep fixing his computers at least twice a month for different issues. and as far as i read 70% of PC issues can be traced back to user error.
![]()
DavidWitteried
December 14, 2009 at 8:29pm
You should load MS Steady State on his computer... http://www.microsoft.com/windows/products/winfamily/sharedaccess/default.mspx. Each time he reboots it will restore his computer to it's orignal configuration and undo any dumb things he may have done.
![]()
gildonian
December 13, 2009 at 10:28pm
Sounds kind of fishy. Nitpicking about UAC to make win7 sound less secure. Maybe to sell some more software? *strokes chin*
![]()
Danthrax66
December 13, 2009 at 9:01pm
so xp didn't have UAC does that mean Vista was a better os? And honestly who doesn't turn of uac the second you go to install your first program on a fresh install and once you turn off uac you have to turn off notifications because those get annoying too uac and notifications don't do sh*t for security if I click on random things on the internet and download torrents uac isn't going to protect me, and neither is trend micro because their programs suck. Eset nod32 might be able to but eventually you will get infected with something so might as well not be bothered by uac while using your computer it will only delay the inevitable.
![]()
van_helblaze
December 21, 2009 at 6:46am
I actually left the UAC on, originally I had turned it off, but I got my computer infected, so I re-enabled it after removing the virus.
Even with the UAC, your still prone to infection, my mother managed to get a rouge antivirus on her computer within the first hour of running it for the first time, UAC on, McAfee av.
![]()
snapple00
December 13, 2009 at 9:58pm
Lol. Wow.
You win the award for least knowledgeable person on the internet.
Kids.
![]()
Danthrax66
December 14, 2009 at 5:11am
Why? Because I turn off uac because it's useless or because I download torrents? Or is because I said Trend Micro is crap? I have had pc's with UAC on them come in and be infected with a hell of a lot of viruses UAC doesn't do anything except annoy people, it doesn't scan for infected files or remove them from your pc it just says hey anything that you run on your pc could be infected so we are going to warn you about everything, and everyone ignores it and hit continue. If you know how to use a pc and are somewhat competent you probably won't get an infection but it happens to everyone and most people won't know abut it until after they see charges on their credit card or until their pc doesn't load windows anymore. There are so many new viruses emerging everyday that it is impossible to proactively prevent one fro infecting your pc.
![]()
stradric
December 14, 2009 at 6:09am
It probably doesn't help that your comment is one giant, rambling run-on. Punctuation matters.
![]()
Danthrax66
December 14, 2009 at 8:18am
it's the internet get over it!.? .!?;:!?:;.:,?!!;:,. Is that enough punctuation for you? Punctuation doesn't matter I wrote thAT in about 30 seconds and I don't proof read internet post that are replies to articles because I'm not recieving a grade or applying for a job with it if you can't read through a comment and realize that there is supposed to be punctuation at certain spots where the writer missed you shouldn't go on the internet because everyone does it from time to time so from now on I'm not going to use any punctuation just to confuse and anger people that feel the need to point out every single mistake
![]()
Tekzel
December 14, 2009 at 8:51am
Whoa there hoss, just because "it's the internet" doesn't mean you can't write like you take pride in what you have to say. That is about the lamest excuse for poor writing I have ever heard. It is entirely your prerogative if you want to come across as a buffoon, or are just too lazy to care. That is your business, but don't blame it on the internet. Take some personal responsibility for your own actions.
![]()
lunchbox73
December 14, 2009 at 10:07am
I agree with everybody else as well. You're one step away from intentionally misspelling words like of of those hip teenagers that say stuff like "ZOMG plze read this crapp ima writing. can i has a job."
An occasional spelling mistake is no big deal but way too many people ramble out crap that doesn't make much sense on the internet. All you have to do is read what you said out loud and you'll realize you kind of sound like a dope. No hard feelings.
![]()
Tekzel
December 14, 2009 at 12:55pm
Also, they seem to take actual PRIDE in sounding like an oaf, as if stupidity is a virtue. Maybe they think it sets them apart. Creating a clique or something. Human beings do love their "us vs them" groupings.
![]()
Digital-Storm
December 14, 2009 at 8:31am
Yes it is the internet, but without punctuation, it makes you seem like an idiot.
![]()
Caboose
December 14, 2009 at 9:33am
Bing goes the Internet!
Ok, I'm sorry, I didn't mean to...
-= I don't want to be dead, I want to be alive! Or... a cowboy! =-
![]()
pac7278
December 13, 2009 at 8:52pm
this sounds like trend micro is trying to get attention fo their prodduct. Windows seven does tell you it needs AV software, but it is hidden in the notifications area. I have installled windows seven on 3 computers and know this is true.
Also the UAC is no replacement for common sense. I turned mine back up to full, but it is still not supposed to be relied upon for totally securing your machine. Microsoft has said so before.
If Trend wants to sell a product, make it light weight and not enclude everything including the kitchen sink. I use microsoft security essentials, AVG and avast on different machines and very happy with a free option. Trend feels threatened and is lashing out by spinning "problems" to meet their needs to drim up fear.
Is windows 100% secure? No, but no system is 100%. Not linux, nore Mac OS X. Is windows an big target? 85-90% market share says yes. the bigger the target, the more hackers want to shoot at it to cause havocover the most area. We have enough problems in the windows world without companies doing things like this.
![]()
mpcrsc562
December 13, 2009 at 8:47pm
"I was disappointed when I first used a Windows 7 machine that there
was no warning that I had no anti-virus, unlike Vista," Genes said.from the very first win 7 version leaked on torrent sites, the beta and rc straight from ms, to this ultimate version i "won" via houseparty, every single version had the action center flag appear in the tray right after first boot, indicating that there was no antivirus installed. so what is this guy talking about?
![]()
rickatnight11
December 13, 2009 at 10:54pm
I concur. Lacking antivirus software and out of date antivirus software were the two alerts I noticed first. They immediately show up in the Action Center, and, as any one know who hasn't disabled them, Action Center really let's you know when it considers things wrong.
![]()
I Jedi
December 13, 2009 at 8:36pm
I recently built a computer for some people, and installed Windows 7 Home Premium on their new computer. I made sure that I put an anti-virus program, Malware finder, and Spybot on their computer, so that they could better protect themselves, as they do not know how. I also made sure I showed them how UAC works, and kept it running. This way I know it'll be less likely of a chance that I will ever have to come back over there to help them out with a computer problem in relation to a virus/trojan. Security is important, but usability is just an equally important, too.
![]()
nmanguy
December 13, 2009 at 8:35pm
Oh no, less secure? I should hurry over to Trend Micro's site and buy their antivirus to remedy this...
Is an AV maker EVER going to say an OS is super-secure?
![]()
stradric
December 14, 2009 at 6:20am
But Mac OS isn't super secure... It's just that Mac users tend to have safer browsing practices coupled with the fact that the number of viruses and malware writers that exist for Mac is relatively low. On the PC, you have a ton of absolutely clueless users and a ton of virus and malware writers targeting those users. There's also a lot more software on the PC that opens more vulnerabilities.
The more educated about computers a user is, the less infections they tend to get. It really has little to do with operating system. Only with less proficient users do the OS security features really come into play.
![]()
Tekzel
December 14, 2009 at 6:57am
I wouldn't really agree with that assessment of the Mac userbase. The few Mac users I know use a Mac BECAUSE they are utterly clueless. This isn't a slam against them, they are professionals in other fields (Veterinarian, CEO of a business, etc.) and just don't have the time or inclination to become a computer geek. We all have our fields of expertise, I am a superman in front of a computer but if something goes wrong with my car I am useless. I know where the gas goes, the oil goes, and how to drive it. That is it.
I absolutely agree about the Mac not being super secure though, it represents an unattractive target due to its miniscule installation base. Pure and simple, that is the ONLY reason the Mac isn't plagued with malware. Not enough people use them to make them worth the time.
![]()
gendoikari1
December 14, 2009 at 7:18am
I wouldn't say that Mac users are utterly clueless. I would say that they are utterly clueless, but hella loaded (why else would they have a Mac?)
![]()
Tekzel
December 14, 2009 at 7:58am
Just for clarification, I didn't say "Mac users are utterly clueless", I said "The Mac users I KNOW are utterly clueless". I just wanted to make sure there isn't any confusion here. :)














