Microsoft Updates Guideline on Windows Driver Security

An anonymous reader shares a report: Microsoft has released an updated guide on driver security. This new guide offers advice that developers could use to ensure Windows drivers are secured against basic attacks and preventable flaws. The new guide -- also available as a one-document PDF -- is authored by Microsoft's Don Marshall and comes to replace an older help page. [...] While the driver security checklist is a must-read for any software developer and not just driver authors, the guide on assessing "threat modeling for drivers" is also something that software engineers should take a peek at.

Windows driver security?

[DontBeAMoran]

Just drive your own damn car!

Re:

[Anonymous Coward]

So can I summarize your position as follows?
1- I am smarter than everyone
2- I hate immigrants

Thanks for your contribution today.

Re:

[bondsbw]

Assuming the authors all have proper university degrees it is very hard to write crap code

I know plenty of CS grads who could barely comprehend basic CS 101 level concepts.

"must-read for any software developer"

[Anonymous Coward]

U...hu. I think I'll pass this boring document. The boring texts never end.

Re:

[omnichad]

Why run Windows in a VM at all if you're not going to give it access to let you work on your critical files?

Re:

[eaglesrule]

Windows in a VM allows for some very convenient 'undo' positions. Also virtual networking. The more the host machine is like a hypervisor the easier it is to secure it and maintain.

The actual guidelines

[Anonymous Coward]

Here's the actual guidelines document: https://docs.microsoft.com/en-us/windows-hardware/drivers/driversecurity/ [microsoft.com]

Windows security?

[OneHundredAndTen]

See definition of oxymoron.

a "one-document PDF"

[optikos]

Hmmm. You mean all these decades I could have had the entire multi-volume encyclopedia set in a multi-document PDF? Who knew? (It seems OP just learned what a PDF is: a single-document file-format; or is speaking to an audience 35 years ago who don't know what a PDF is.)