WinXP raw socket security flaw?

[Medea]

Came across this and was wondering if this is a legit concern.

http://grc.com/dos/xpsummary.htm

Windows XP's new support of the full raw socket application programming Interface (API) allows for the creation of fraudulent and damaging Internet traffic. This has never been possible under Windows without first modifying the operating system with third-party device drivers ? which has never been done by malicious programs.

The security features built into all other raw socket capable operating systems (Windows 2000, Unix, Linux, etc.) deliberately restrict raw socket access to applications running with full "root" privilege. However, the Home Edition of Windows XP executes all applications with full administrative ("root&quot privilege. Thus, Windows XP eliminates the raw socket safety restrictions imposed by all other operating systems.

 

[HellRaven]

Yes, it certainly is a valid concern. Basically it makes it easier for hackers to mask their identities while online. It also makes it easy for them to mask the identities of their victims since many times they hack into a persons computer for launching DOS attacks.

It is true that it is possible for them to do this now, but it is much more difficult so not having the full socket standard implemented was a good thing. As Steve Gibson said on his website, Microsoft is refusing to re-implement the socket standard for Win95/98/ME for XP. They argue that it is possible to get around it already so there is no use in trying to block the hackers.

As he argued (and I agree with him), it is akin to locks on your car doors. You dont HAVE to lock them - someone could still get into your car if they want. However, it still can prevent thefts by making it just a little bit more difficult.