Security Pie

The ramblings of three security curmudgeons

Some thoughts on Google’s decision to ditch Windows OS

with 3 comments

Google has decided that “due to security concerns” it will phase out Windows on its endpoints. See http://www.ft.com/cms/s/2/d2f3f04e-6ccf-11df-91c8-00144feab49a.html.

A few thoughts:
1. Understandably Google is repositioning it’s own Chrome OS and Mac OS as an alternative to Windows as part of their competitive struggle with Microsoft.
2. Google’s CIO is attempting to sweep Google’s proven incompetence in securing the email accounts of Chinese activists as a byproduct of Microsoft’s OS. This method was used 12 month earlier by bank executives claiming “we weren’t at fault; it was those damn credit default swaps and collateralized debt obligations”. Google is incompetent. Microsoft might also be also be incompetant, but it is beside the point.
3. Google is implying that replacing all endpoints is a security strategy. It is not. Google should invest in understanding security: an endpoint should not be the only line of defense. I recommend developing a comprehensive security strategy based on risks to their (and my) data and executing against that strategy. As part of their security strategy, a broken endpoint should NEVER be allowed to poke holes in their infrastructure.
4. If there was a culprit, it was Explorer. Perhaps Google should use a different browser? Also, Google CIO should read about Windows 7. It has a much better security model.
5. Mac is being more successful in the workspace anyway. Anyone who has gone to a meeting and counted the number of Mac’s knows this, and it started long before Aurora came along (in fact, I think it happened when Apple moved away from silly white plastic to the me-too Sony VAIO Aluminium/Magnesium look).
6. Is Bing crawling under Google’s skin?
7. Google should keep at least a few endpoints of Microsoft for the sake of product quality. At least to do compatibility and QA for Google products running on Explorer and Microsoft OS. I can foresee Google’s CIO being busy for the next few years signing waivers for Microsoft OS. I suggest e-signatures.

/al

Written by assafl

June 3rd, 2010 at 9:45 am

Posted in Uncategorized