F0dder, just because kernel hooks are needed/used now doesn't mean they will be in Vista. It's a pretty significantly changed architecture, as far as I understand. The need for kernel hooks I would say is something of a kludge, to make up for previous OS's lacking in terms of kernel protection, etc. MS didn't do a proper job of it so A/V companies needed to. There's been no clear indication of exactly *why* anyone needs access to the kernel, provided they are given API's to perform the functions they need (
which MS now says they will do for SP1).
Note also that according to what I've read MS's OneCare is subject to the same limitations - i.e. it can't access the kernel directly either. Of course they built the underlying systems so they could build whatever they want into it, but the point is that those protections are separate from OneCare and OneCare doesn't need to work with or interfere with them to do its job.
As far as the driver signing, I agree with you again. It'll never happen but I think the verification should be done by a 3rd party and, as I said before, have different levels or types of verification.
It seems to me like a lot of misinformation has been spread by both sides. It's hard to tell whether A/V companies are full of crap, or MS, or both (probably both). But MS seems pretty emphatic in
the latest news that they have been misrepresented and misquoted, etc. So that's interesting.
Carol, other A/V companies have specifically come out and said they do *not* need such access. It's not just that they're keeping quiet.
Anyway, I wonder why these companies aren't shouting at Apple for not having more vulnerabilities in OS X. I mean clearly Mcafee is losing revenue from all the Mac people who don't need to buy their products.

The saga continues!
- Oshyan