Google: Microsoft making Windows 7 easy to hack due to full focus on Windows 10

Windows 7 logoIt’s no secret that Microsoft is focusing on Windows 10 more than on any other Windows version, but Google has recently criticized this approach, explaining that Redmond actually leaves other users, including those running Windows 7, vulnerable to hackers.

In a post detailing how Windows 10 patches can be used to discover vulnerabilities in Windows 7, Google Project Zero researcher Mateusz Jurczyk explains that what Microsoft should do is release patches for all supported versions of the operating system at the same time.

Otherwise, there’s a chance that hackers inspect the code of the updates that Microsoft releases for Windows 10, and given that the most recent versions of the operating system share the base code, to find ways to exploit systems running Windows 7.

“This creates a false sense of security for users of the older systems, and leaves them vulnerable to software flaws which can be detected merely by spotting subtle changes in the corresponding code in different versions of Windows,” the security expert from Google explained.

Jurczyk goes on to explains how he actually managed to discover zero-day vulnerabilities in Windows 7 using this method, revealing that the same thing can be done even by non-advanced attackers.

“We hope that these were some of the very few instances of such "low hanging fruit" being accessible to researchers through diffing, and we encourage software vendors to make sure of it by applying security improvements consistently across all supported versions of their software,” he explained in the rather technical analysis that you can read in full here.

On the other hand, Microsoft says that it’s committed to protecting all of its users, but emphasizes that the best security can only be provided once upgraded to Windows 10.

“Windows has a customer commitment to investigate reported security issues, and proactively update impacted devices as soon as possible. Additionally, we continually invest in defense-in-depth security, and recommend customers use Windows 10 and the Microsoft Edge browser for the best protection,” a company spokesperson replied.

Source: Softpedia

Tags: Google, Microsoft, OSes, Windows 10, Windows 7

Comments
Add comment

Your name:
Sign in with:
or
Your comment:


Enter code:

E-mail (not required)
E-mail will not be disclosed to the third party


Last news

 
 
With the head of Samsung Group facing prison time, CEO calls for company to "start anew"
 
Is there a way to turn off the iPhone or iPad that doesn't require a button?
 
Users will be warned that the app is still in development and will be unstable
 
Quick test proves fast charging isn’t as fast as promised
 
Bitcoin shrugs off Chinese regulations and bubble chatter to smash a new record
 
Microsoft moves the controls to the Settings app
 
The Exynos-powered Note8 are capable of capturing videos at 60fps, not just 30fps, but the software on them doesn't allow it
The Samsung Galaxy A5 (2017) Review
The evolution of the successful smartphone, now with a waterproof body and USB Type-C
February 7, 2017 /
Samsung Galaxy TabPro S - a tablet with the Windows-keyboard
The first Windows-tablet with the 12-inch display Super AMOLED
June 7, 2016 /
Keyboards for iOS
Ten iOS keyboards review
July 18, 2015 /
Samsung E1200 Mobile Phone Review
A cheap phone with a good screen
March 8, 2015 / 4
Creative Sound Blaster Z sound card review
Good sound for those who are not satisfied with the onboard solution
September 25, 2014 / 2
Samsung Galaxy Gear: Smartwatch at High Price
The first smartwatch from Samsung - almost a smartphone with a small body
December 19, 2013 /
 
 

News Archive

 
 
SuMoTuWeThFrSa
1234567
891011121314
15161718192021
22232425262728
293031    




Poll

Do you use microSD card with your phone?
or leave your own version in comments (4)