main

Windows Vista's New Security Features

DJ Prem   on 05 October 2005 - 11:43 · 23 comments & 5093 views

Advertisement (Why?)
Microsoft's new operating system won't be out until late 2006, but here's a look at some of the new security features expected.

It seems that every time I sit down with Microsoft to discuss Windows Vista, something has been changed or added, which is good. In some cases, something has been removed, which is bad. One and a half years from launch, I understand that beta code changes frequently. Here's my standard disclaimer: the following article is based on the last build from Microsoft, Windows Vista build 5219, released September 2005. It is one more semi-public build later than the Beta 1 currently in limited circulation, but Microsoft is careful not to call it Beta 2, although the code is based on code that will eventually be Beta 2 (got that?).

View: The article @ ZDNet UK


NEW FEATURES

Wake Island Map

* Included a remade version of this popular BF1942 map.
* Battlefield 2 version includes a 64 player layout and is
* configured for multiplayer only.

Server Favorites / History

* There is a new tab in the MULTIPLAYER menu that holds a list of the last 20 internet servers you have connected to, plus a list of servers you have selected as favorites.

o Added a button to the other multiplayer tabs that adds the currently highlighted server to your favorites list.
o Added buttons in the in-game server info menu (press TAB to access) that will add or remove the server you are currently playing on to / from your favorites list.

Account Login Welcome Screen

* After you login to an online account, a message appears that contains BF2 news and information which updates periodically.

Stat Compare

* By clicking the COMPARE button in BFHQ, you can search for another players name and load their current stats into BFHQ. Using the arrow buttons next to the name in the top-left corner of the menu, you can toggle between your stats and their stats.

You can also load a player's stats by double-clicking on their name in any leaderboard.

Nickname Prefix

* You can add a 6-character prefix (such as a clan tag) to your account nickname which will be displayed in-game next to your nametag in the score menu, in game messages, and above your player in the game world.

o This prefix does not change your account name or statistic information (e.g. the prefix does not appear next to your name on the leaderboards).
o You can change this prefix at any time at the account login menu.

Server Reserved Slots

* You can define a list of player nicknames that will act as a "reservation list" for your server.

o The list is located in modsbf2settingsReservedSlots.con
o You can add player names to the list by editing the file and adding the following text for each player: reservedSlots.addNick where is the player's registered account name, not including a nickname prefix (see above).
o You can define the number of slots to set aside for reserve players in the dedicated server launcher, or with the setting sv.numReservedSlots in your serverSettings.con file.
o The number of players on the list and the number of reserved slots does not necessarily have to be the same.

Mod Support

* There are several new changes that improve support for mods.

o When connecting to a server that is running a mod that you have installed but not activated, it will be automatically activated and you will load into the server.
o Added a filter on the server browser for servers running the currently activated mod.
o Fixed dedicated server launcher to properly handle launching mods.
o Improved support for mods sharing archives with bf2

Improvements to in-game HUD / Map

* The viewable area of the spawn menu / commander map is now scaled based on the out-of-bounds area so that only the playable area takes up the majority of viewable map space.
* The names of CPs are now displayed on the spawn menu / commander map and minimap
* The minimap zoom level now changes dynamically depending on the type of vehicle you are in. If you zoom in or out manually, that zoom level is remembered for that vehicle type next time you use it.
* The names of players in your vehicle are displayed in the HUD when someone enters the vehicle or switches positions.
* There is a new element in vehicle HUDs that displays the reload time for countermeasures (smoke and flares).
* Flags for each team are now displayed below their ticket count on the minimap to make it easier to tell what team you are assigned to.

GAMEPLAY CHANGES

* Many criteria for ranks and awards have changed. If you are immediately eligible for a new promotion, unlock, badge, award, or ribbon, it will be awarded the next time you receive points on a ranked server.
* Only 1 player in a vehicle will get credit for or speed up capturing a flag at a CP. The other passengers must exit the vehicle to increase the speed of capture or receive capture score.
* Commanders no longer accrue a TK when artillery hits teammates.
* The commander's supply drop now has an icon on the minimap and a 3D-map icon in the world.
* Auto team balance no longer moves players to the other team if they are a team commander or a squad leader.
* The wrench repair rate on helicopters has been decreased.
* You now receive 1 support point for destroying an enemy commander's artillery, UAV or Radar station.
* If you have received a point for healing, repairing, or resupplying a teammate, you will not receive another point from them for the same action for a set period of time.
* Singleplayer enemies use the knife more effectively.
* New engine sounds for the T98 tank.
* New engine sounds for the China/MEC light jeep.
* New cannon sounds on APCs.

BUG FIXES

* Fixed physics of vehicles against soldiers so that soldiers are not killed so easily by moving vehicles.
* Fixed a physics issue that can cause you to be stuck when falling into shallow water
* Fixed an issue with soldier armor when spawning on a squad leader in a vehicle
* Fixed some objects that caused vehicles to take massive collision damage
* Fixed erroneous message stating that you punished a TK when auto- punish is OFF on the server.
* When a vehicle explodes due to external forces, the driver is no longer mis-credited for the kills.
* Added turret movement sounds to several vehicles.
* Fixed an issue that caused crosshairs to stay on the screen when switching camera views.
* Fixed an issue that caused the time limit status of the server not to be sent to clients when it is changed by the server.
* Fixed server setting sv.allowExternalViews. Setting this to 0 will disallow external views.
* Added setting for interfaceIP to the server launcher
* Changed automatic TK banning to ban by cd-key instead of IP address
* Improved the stability of secondary position turrets to reduce jerkiness during movement.
* Fixed spawning on squad leaders to prevent players from spawning where they should not.
* Fixed issue with auto team balance not sending new players to the team with less players.
* Set T90 top hatch armor to "Front Armor".
* Set some wheels on jets and helpcopters to stronger armor to prevent them from being destroyed instantly by AT missiles.
* Adjusted wheeled vehicle engines on hills to improve climbing.
* Changed the Commo-rose behavior so that player does not leave crouch when using it.
* Passwords entered to join password protected servers are now cleared after use.
* Improved PLAY NOW functionality.
* Fixed some memory usage issues in the front end.
* Fixed an issue allowing color changes in player name text.
* When you click on a server in the server browser, the information from that server is updated to be more accurate.
* Fixed a crash in the Ranked Linux server when communication with stats back-end ceased.
* Improved the behavior of AA missiles when locked on an enemy.
* Fixed an issue where parachuting soldiers could not be healed.
* Added the server port to the SERVER INFO tab.
* Removed the SERVER INFO tab when playing singleplayer
* Fixed an issue causing some soldier & vehicle control keys to be used for in-game menus.
* Added new soldier artwork in BFHQ
* Added name of video director to credits

Post a comment · Send to friend Comments · There are 23 additional comments
(5 replies) #1 megamanXplosion on 05 Oct 2005 - 12:01
User Account Protection is not a new feature, it was simply integrated this time. This is the main reason why the MSH "viruses" (shell scripts in reality) executed successfully a long time ago was because Microsoft has in the middle of transitioning from the current permissions infrastructure to the new permissions infrastructure. With a few hacks you could enable UAP on the older builds, so its not something new.

Internet Explorer 7's new permissions are not new, these have been known about for a long time now. The MSDN blogs have information on this dating back months ago.

The outbound firewall protection isn't new either. Again, MSDN has had this information available for a long time. I also think the writer of the article is showing quite a bit of bias concerning the firewall - he is already recommending an alternative when he hasn't even judged it on its capabilities (his only reasoning in the article is that it doesn't come with an extensive whitelist by default - which I consider a good thing) and its impossible to say wether or not they are done working with it (for example: a long time ago I heard that the firewall was going to be intelligent in stopping recent waves of attacks by learning from Windows/Microsoft update - though I haven't heard anything about it since.)

OneCare isn't new either, I've been a beta tester for a long time now.
#1.1 Jstphish on 05 Oct 2005 - 13:54
I don't recall the author ever saying these features were brand spanking new. It was just an article on the security features that are currently in Vista. It was short and to the point. I learned a good bit from it actually.
#1.2 Jon on 05 Oct 2005 - 14:13
QUOTE
the MSH "viruses" (shell scripts in reality)


Ooooh right, now I understand. So CodeRed was just ASM code in reality. Not a worm.

Thanks for clearing that one up.

</sarcasm>

Last edited by 1061 on 05 Oct 2005 - 14:19
#1.3 kronix2 on 05 Oct 2005 - 14:20
I'm going to bring your world crashing down: by "new" he meant "new in Vista".
#1.4 megamanXplosion on 05 Oct 2005 - 23:17
"Ooooh right, now I understand. So CodeRed was just ASM code in reality. Not a worm."

CodeRed exploited IIS servers by causing buffer overflows, propogated itself to thousands of other servers, caused server performance to degrade, and caused system instability.

The MSH "viruses" were nothing more than shell scripts executed with administrative privileges. In contrast, they are really no different than creating a batch file that executes commands in a command prompt under an administrator account on Windows XP, or shell scripts in Linux, Unix, BSD, and Mac OS X. If these are truly viruses then practically 99.99999999999% of the operating systems out there are vulnerable to variants. Get your tin-foil hat on because the entire computing industry is taking a nose dive! lol. Wake up and smell the coffee, they were not viruses - they were nothing more than commands at a command prompt.

"I'm going to bring your world crashing down: by 'new' he meant 'new in Vista'."

I'm going to bring your world crashing down: by "nothing new" I meant "it shouldn't be on the news page at Neowin because there is nothing new to report." Was my post really that cryptic?
#1.5 Jon on 06 Oct 2005 - 08:12
QUOTE
If these are truly viruses then practically 99.99999999999% of the operating systems out there are vulnerable to variants.


Yes, any OS is vulnerable to viruses. Which is why (despite the claims against) Mac OS X viruses have existed for some time now. Your definition of a virus is quite inaccurate, as this is a trojan (part of a blended attack along side social engineering or an MUA expoit), which historically speaking (and per published definition) is a sub-class of the term 'virus'. Common usage however now describes a trojan as a form of malware, with a virus specifically being code which can replicate *inside* a single system. There is no reason however why a shell script or batch file could not act as a true virus.

I can recommend some very good industry texts if you're actually interested in learning.

Last edited by 1061 on 06 Oct 2005 - 08:58
#2 mr_demilord on 05 Oct 2005 - 13:09
just change the filetypes, I always did that with .js,.jse,.vbe,.vbs,.wsf. and pointed them to open with notepad, so these virusses cannot do any damage
(1 reply) #3 sphbecker on 05 Oct 2005 - 13:22
In short MS is protecting users from their own ignorance; which is an important thing to do. I don't expect the average user to have to take a class to learn what I know just to keep their computer safe.
#3.1 Jstphish on 05 Oct 2005 - 13:55
Amen.
#4 Jstphish on 05 Oct 2005 - 13:55
It's good to see Microsoft is finally starting to get the security features right.
(4 replies) #5 RobertH on 05 Oct 2005 - 15:31
I dunno why i was expecting to see this, but i expected to see something funny when i clicked the news article.

QUOTE
Windows Vista's New Security Features
Microsoft Windows Vista offers new levels of security for its users, features include;

- One-click Uninstallation of Internet Explorer & Windows Mail.
- One-click 'Lock Down' feature keeping the system 100% secure from hackers and virus's by disconnecting all active network connections and formating all available drives.
- One-click Uninstallation of the Operating System for total peace of mind.
- In addition to the 'Start' button there will be a 'Finnish' button.


Just me i guess...
#5.1 J_R_G on 05 Oct 2005 - 17:07
Greeeat, it's been at least 5 minutes since we last saw those jokes..
#5.2 sphbecker on 05 Oct 2005 - 17:17
A finish button would be cool! It could be at the button of the BSOD with options such as:

Restart and display a message blaming an unknown device driver
Restart and act like nothing happened
Show this screen every time my computer tries to startup

#5.3 Shiranui on 06 Oct 2005 - 03:10
But I don't speak "Finnish"
#5.4 mr_demilord on 06 Oct 2005 - 11:53
QUOTE

Windows Vista's New Security Features
Microsoft Windows Vista offers new levels of security for its users, features include;

- One-click Uninstallation of Internet Explorer & Windows Mail.
- One-click 'Lock Down' feature keeping the system 100% secure from hackers and virus's by disconnecting all active network connections and formating all available drives.
- One-click Uninstallation of the Operating System for total peace of mind.
- In addition to the 'Start' button there will be a 'Finnish' button.

You forgot reboot at every option
#6 Nautica on 05 Oct 2005 - 17:34
lame...

windows xp is near perfect IMO... just need someone to reduce the amount of clicks to get simple jobs done and I would prob never look back.. never really had it crash yet
(4 replies) #7 Samoa on 05 Oct 2005 - 17:35
they should make these features availible in Win2k and XP. We are paying customers.
#7.1 Sierra Sonic on 05 Oct 2005 - 17:56
Yea and you payed for the features available in those OS's, For newer feature you ofcourse will have to pay for those and upgrade.
#7.2 Jeremy1 on 05 Oct 2005 - 18:54
Screw your 2k and XP. I paid for 3.1! Where are my updates???? I am outraged!! Microsoft is a bunch of lying scamming thieves!
#7.3 Jugalator on 05 Oct 2005 - 22:43
Those who feel cheated should try to avoid them and their business model.
That's following the light path, the dark path obviously involves illegal activites, as usual.
#7.4 mr_demilord on 06 Oct 2005 - 11:55
QUOTE

they should make these features availible in Win2k and XP. We are paying customers.


Then Linux will fit your needs, get your kernel from kernel.org and install it
(1 reply) #8 Echelon Left on 06 Oct 2005 - 00:59
Nice that Microsoft is making security a priority, but I'm still gonna pass on Vista RTM. Not enough new feature, on ballance, for me to lay down the money they'll be asking.
#8.1 Mike Frett on 06 Oct 2005 - 02:54
I'm totally with you on that one brother.

Commenting has either been disabled on this article or you are not logged in. Click here to login or register, its free!

Note: Anonymous commenting is disabled in order to keep the quality of responses to a high standard.

Advertisement (Why?)