* Posts by Christian Berger

4851 publicly visible posts • joined 9 Mar 2007

Mmm, what's that smell: Coffee or sweat? How to avoid a crap IT job

Christian Berger

With engineering companies, there are additional hints:

Like look at their patents. I noticed to late that my current company had a "perpetuum mobile" patent in there, signed by the management. Needless to say, it's one of those bad jobs. (and I have a contract still running for 60 weeks, 1 day and 42 minutes)

Then look at the products. Do they make sense? For example if they are network capable, do they support IPv6? If they have a filesystem and configuration files, how are they stored? My current company sells a device which has an ARM microcontroller and an SD-card, but the display is a simple 7-segment one, while the configuration can only in part be changed on the device itself, and is stored in a strange binary format.

Then there is often the cancer of VBA, meaning that instead of databases or simple text files, vital data will be stored in Excel-Sheets, making it impossible to do anything useful with it.

Christian Berger

Re: Nice to have the choice

Ohh I've done this as a trainee. Then I got a barcode scanner which would not only scan the barcode for you, but also type it in, faster than you can even read it.

You know who else hates Windows 8? Hackers

Christian Berger

Re: New proof-of-concept bootkit targets UEFI

Now, does it need "root" or hardware access to be installed? If yes, why should an attacker bother with that. If he has root access he already won.

The "invisibility", which is pointless as it's common sense to boot virus scanners from a separate removable disk, doesn't bring much advantage to the attacker.

Christian Berger

Re: That's not why hackers dislike Windows 8

So how much code does it take to read an object of a pipe in power shell? How much code does it take in Pascal, or Fortran, or Cobol?

Then think how much software supports the power shell?

The beauty of the Unix shell is that it is programming language agnostic. I can read the data with scanf in C or readln in Pascal without any extra work. It simply works with the standard input facility in your programming language. Nothing needs to be ported.

Christian Berger

Re: Imaginary scenarios

Well actually the pro-Appstore voices were from before we all learned how horribly bad appstores can be. And actually before Microsoft started its massive campaign promoting secure boot as a security feature, nobody even bothered with it. If people wanted it, they would have implemented it years ago. (e.g. via a PCI-card with its own BIOS ROM)

But of course everybody will suspect anti-competitive behavior at Microsoft. That's simply because they have a good track record at it. Ever since Windows 3.x they used technical measures to harm competition in unfair ways. Back then Windows gave you a "nonfatal error message" when you ran Windows under DR-DOS instead of MS-DOS. The list goes on since then. If Microsoft was a "fair" company, nobody would complain.

Actually Microsoft is in the unique position that they could actually advance the field of computing. They have research departments, they have money. They could invent a programming language which helps proving the correctness of code. (or at least certain aspects of that) Instead they ship out bad to mediocre software. The people with ambition are long gone, and todays Windows is pale to what it was supposed to be in the early 1990s when Microsoft got the designer of VMS to design the Windows NT kernel.

Christian Berger
Facepalm

I could ask the same

Because on Linux you don't install software by going to Google and typing "something free download", you go to your package manager, either graphically or by typing "apt-get install something" and it will install from secure sources you can even switch if you don't trust them.

Actually it's not just idiots. At university I was preparing a project with one of my colleagues. I told him to install "netcat". He went to Google and typed in "netcat free download" and was about to install what he got on the first result. I mean what else can Windows users do? There is no package management. All there (now) is is a Windows Store, which will suffer from the same problem all stores suffer from.

The way software is being distributed is the big problem on Windows. (and OSX, but that article is about Windows so excuse me for not mentioning it)

Christian Berger

The only reason why we didn't get "secure boot" yet...

...was the FUD which was there before. This has caused Microsoft to back away from their original plans 10 years ago to completely lock the BIOS. Now they have the 2 fig leaves of making it possible to turn it off and to issue signatures for Bootloaders.

Now what will happen will be a few Microsoft sponsored security researchers praising "Secure Boot" and/or showing that disabling it creates such "huge" security problems. Then after a year or so Windows 9 will require it to be on at all times. Ohh and of course there will be no foreign signatures since those will be seen as evil.

Christian Berger

That's not why hackers dislike Windows 8

The reason is more that you cannot actually do anything with Windows 8. It only comes with that weird PowerShell which is incompatible to the rest of the world. You need to install Cygwin, it doesn't have ssh by default, and the versions which have at least a bit of use cost a lot of money.

Windows is, particularly in it's newer versions, absolutely useless to anybody who actually wants to properly work with a computer. It's a toy for DAUs.

As for security, there is no actual new security in the system. Think of Secure Boot. A potential attacker would simply get his modified bootloader an modified kernel signed by Microsoft, either via economic/legal pressure or through illegal means. If anything it prevents people to replace parts of their system for ones they trust.

You will still be able to compromise Windows machines by setting up a website promising "free porn" if someone just downloads and executes a certain piece of software.

New iPad's innards: Good news for recent fondleslab buyers

Christian Berger

Dear Reg: This is one of the basic parts of a review

See? Others can open test-devices, too. So why can't you? Why do your reviews mostly consist of things already found in the press-release?

So please, at least boot Linux on the device and execute lspci and lsusb, then tear it down.

Apple's poisonous Touch silently kills the GNOMEs of Linux Forest

Christian Berger

Re: If you want to do OO, use an OO language.

@David: Seriously JAVA is not really a good example for OO languages. It combines all of the things you don't want to have. It starts with binary-only libraries, a weird bytecode, and that problematic C++ model of OOP.

If you like JAVA, you might want to look into modern versions of OO-Pascal like Freepascal or Lazarus.

Christian Berger

Re: Several issues

C++ is not really suitable for OOP as such. It implements some strange idea of OOP where messages are implemented by indirect function calls, and there are object copies without garbage collection.

So if you want to do OOP you won't need 99% of the features C++ has. That's why so many people write their own OOP system around C. Gnome did it, Microsoft did it, and probably a lot more people did it, too.

Microsoft building its own Phone hardware: Not 'If', but 'When'

Christian Berger

No they wont

They might, at most design their own phone, probably even just "designing" it as in "coming up with specifications". Microsoft surely won't produce it, they will out-source that to a Chinese company, possibly Foxcon.

One in seven North American home networks full of malware

Christian Berger

Re: WTF

Android is not "a Linux", it's just the Linux kernel bolted to some sick insecure userspace, designed by people not understanding the basic problems of software security.

Christian Berger

Correlations

There's probably a strong correlation between people who use an ISP which takes part in such a "Phorm" attack, and don't tunnel out their traffic to a trusted ISP, and people who have malware on their systems. So the measurement is skewed, at least a bit.

Where are all the open-source mobile projects?

Christian Berger

Re: I for one despise Android.

Well Cyanogenmod and some open "market" like fdroid are actually quite close to something tolerable.

However once the Raspberry PI gets a display, and a small "clamshell" case so it'll look like a little palmtop, we'll finally have proper hardware.

Maybe eventually we'll be able to get our own open source SoC designed.

Christian Berger

Re: Closed bootloaders - fragmented hardware

Actually it is a problem for Android. That's why only a small part of the mobile phones can be updated to the current version of Android. All the development needs to go through the hardware companies. They adapt Android so it'll run on their devices. Once they have no interest in maintaining support for a particular device, they'll simply drop it. That's one of the biggest problems with Android.

One also must differentiate between 2 markets where mobile phones are being sold to. One, and unfortunately the biggest, are network operators. Those people mostly care about one thing, control. They buy the hardware and "rent" it to the customers, or at least that's how they see it. They want to make sure they are not loosing any business. They want to make sure you cannot run VoIP software on it, or instant messaging. I mean they pay for the hardware, so they decide, seems fair, doesn't it?

The other market, which is still to small, is people simply buying a mobile phone independently of their operator. Thanks to the idea of a SIM-card this is easy enough for even non-technical users. Operators usually don't mind, after all they are not paying for it and trying to enforce only certain devices on their networks means a huge headache for them. In those devices the customer decides, that's why they always had VoIP or Internet radio or instant messaging. One of the early examples is the Nokia N770. Nokia even left out the GSM-Module so the sales-people wouldn't even try to sell it to the operators.

Christian Berger

Re: Closed bootloaders - fragmented hardware

Actually mobile operators, at least in Europe, are fairly open to people using any device they want, as long as it doesn't cause any kind of damage or disruption. So you get your SIM, refuse to get hardware from the operator and there you go. There are, as far as I know, already some mobile phones with leaked firmware which can do things its not supposed to do. Again I have not yet heard of any pressure from the operators.

If there's anything, there's more pressure from the hackers towards the operators so they'll finally fix their networks.

The hardware problem might slowly solve itself. Just look at the Raspberry PI. Put that into a proper case and you'll have a proper little device.

Christian Berger

Closed bootloaders - fragmented hardware

For PCs you need one single image, which runs on 99% of all PCs. On mobile devices every device is a completely new platform. Worse you have no way to enumerate your hardware.

So even if you get your kernel to run, it has no way to mount the root filesystem. Even if it somehow manages to do that, it has no idea how to access the graphics hardware or what display is connected to it.

On the PC this is different. You put your bootloader into the first sector on disk. It will be loaded into RAM and executed, you have a BIOS which fulfills you every disk and display related wish. You can already talk to the user. Every USB controller is the same, so you can access the USB. If you want to know what other hardware is there is the the PCI you can ask.

So why does that matter? Open source projects can only work if they have a certain level of efficiency. There is a certain maximum amount of work you can put into it for what you get out. That's also why most open source operating systems are unixoid. Unix is simply one of the most efficient systems. On no other system you can do so much with so little code.

And that's the problem, the mobile world currently takes far to much effort just to get your code running. Once there is standard hardware, we will see the same progress like on PCs.

Sony KD-84X9005 84in ultra-HD TV review

Christian Berger

Re: No need for the average consumer

Well 50 Hz is needed for old material, and it's one of the more sane standards. The US, for example have 60 Hz for monochrome only. For colour they have 60000/1001 Hz or something, which is a pain to edit and has no sane path to any other medium.

Christian Berger

Common misconceptions debunked

a) There are already a few 4k TV channels available. If you look around the feedhunter forums you will find screenshots of them, done by people messing with those transponders and VLC.

b) It doesn't make much sense for television. There's a maximum size for televisions in living rooms, and there's an optimal viewing distance at which the display becomes a "retina" display, and the pixels just fuse together. For 2K that's roughly the diagonal of the screen. For 4K it would already be half that. So if you had a 2 metre screen, you would have to set one metre away from it. If you had a living room with a 5 metre distance to the screen, you'd need a 10 metre screen.... That's likely not able to fit into your living room. If you have a larger living room, it's likely your viewing distance will also increase.

What it would make sense is for CAD. Imagine you want to design a layout for a PCB. The smallest structures you can have there are about 4 mil (0.1 mm). You want that at least about 4 pixels large on your screen. So every millimetre occupies 40 pixels of screen space. Given that today you are lucky to have a small 1000 pixel window (on a 1200 high screen, with all the menu bars and stuff), the maximum size of the part you can see is 25 mm. That's not really large. You need to work through a peephole. Now with 4K that would increase to perhaps 5 or 6 cm, large enough for many designs. You could finally have your whole design on the screen and won't need printouts any more. Plus it's not uncommon for an engineer to stand in front of an A0 sheet of paper within arms reach.

What's new in Windows Server 2012

Christian Berger

Serious question: Who cares?

I mean people who want a decent shell and a manageable system have moved to Linux years ago. Or if they still need some Windows server software, they run it inside a virtual image.

Pure Windows sysadmins are getting rare, and those who remain often cannot program. A shell is therefore quite useless to them.

A history of personal computing in 20 objects part 2

Christian Berger

Re: EPSON HX-20

I've heard of a bunch of people using an HX-20 at a restaurant. When it was time to pay, they secretly rolled up the note in the printer. As the waiter came, they pressed the button and the printer spit out the note. They had a hard time getting their money accepted. :)

Also, this is yet again one of those lazy articles. Everybody knows those old computers, and no one talks about the slightly more exotic ones back then, like the Canon Cat, which proved Apple and Microsoft wrong, by providing a user interface which was simple, efficient and powerful.

It's official: No 10 mandates 'open systems' options for Sir Humphreys

Christian Berger

Re: Open not only means "published standard"

Well have you ever seen a typical table in a text file on Unix? There's one escape character, usually the \, and that's only used to escape the field or record separators. So if you choose those wisely, you won't even have to bother with it. In that case you could even use the tab character which is universally understood, but hardly ever used in fields.

Christian Berger

Open not only means "published standard"

It also means that this standard is as simple as possible. And that's where office file formats fail.

If you have your data in a spreadsheet, it is unnecessarily hard to get it out again in order to do some data processing with it. It's so hard in fact that starting the application and exporting it to CSV is often considered to be the easiest option.

What we would need is a "grid-based" text editor, which displays structured files as a grid, but then places separators and escape sequences in the file when it is saved. That way we could get people off spreadsheets.

Similar options could be available for letters. Why have a full blown "word processor / crappy layout"-hybrid when all you need is input fields for the address and the text? That way you could also archive outgoing mail a lot easier.

Databases already go into that direction. If you make a dump of an SQL-database, you typically can get text, which you can read easily. They actually have an excuse for not storing it in a standard unixoid structured text file as their format is actually commands you can feed into the database server.

Apple puts less of its takings into R&D, hires more sales cultists

Christian Berger

Well there's one little fault in your argument

You assume that there will be something called "competition" among different actors on the market, and that some actors would act differently.

That's part of the "free market" ideology. Those people claim that consumers take multiple offers into account and act accordingly. For example, in that ideology nobody would not buy cars from a company which was actively involved in child abduction. In reality, even those opposed to child abduction merrily buy cars from that company, simply because they don't know. There is no such thing as a transparent market. There are always factors which obscure the view of the market.

That's why Nokia was surprised of the success of the N770, that's why people were surprised of the success of the Galaxy Note, that's why Thinkpads ship with Windows.

Christian Berger

Re: Apple has never done any R&D

Actually no. Apple focuses on one kind of user interfaces, the "panel of buttons" one. They added stopgap solutions to it, so you can still have it, despite of the limitations of mobile devices.

Apple, and to be frank everyone else in the industry, has stopped exploring new ways of making user interfaces. It's a pity that they never moved on beyond the Newton. Apple currently has no offering for users actually working with computers. Unfortunately Apple has even lowered the standards for the industry.

Do what Apple does is making "panel of buttons" interfaces more accessible for "idiots". That wouldn't be bad by itself, if only those "idiots" would stop claiming they are the crown of creation.

Huawei reaches out to critical German hacker over router flaws

Christian Berger

A little tip

There are at least 2 famous German security researchers whose first name is Felix. So it might be a good idea to also mention the second one. To make it worse one is "Felix von Leitner" the other one is "Felix Lindner", so even the last names are similar.

'We invented Windows 8 Tiles in the 1990s', says firm suing Microsoft

Christian Berger

I remimber

Way back in the early 1990s there was some bad software package for Windows which was sold for use with multimeters. It allowed you to have tiled displays of multiple values which were updated automatically.

What I still don't understand why Microsoft didn't just go for a tiled Window manager. Just split up the display into little 640x480 or 800x600 pixel rectangles and tell the applications they are "maximized". Few Windows GUI Applications can make use of more than that resolution anyhow.

Freesat downs own website after Downton quickie

Christian Berger

Re: What I don't understand is why you need a company for that

Well first of all the presentation. German TV now seems like it's just hurled at you. Endings of movies are cut and replaced by annoying loud trailers.

German TV is generally "louder". Even public TV channels have no tact and just scream at you.

German TV is hosted by idiots, there is no care, no fact checking, even the most obvious errors get through. Nobody tries to make television going beyond stereotypes. If you watch a documentation, any documentation, even the ones on arte, you'll just get a spoof of the same old thing. I mean a few months ago I've seen a BBC documentary about Betchley park, and they explained cryptographic attacks on stream cyphers. That would be impossible in Germany.

I could go on.

Christian Berger

Re: The third way

Actually DVB-EPG is far more than "Now and Next". So if you get, for example a VDR with the eepg-plugin you can get get best of both words. DVB-EPG has, depending on the channel and the storage capacity on the receiver, 1-4 weeks.

However I wouldn't use a motorized dish, I'd use a simple multifeed setup with multiple LNBs installed on a single dish. This is much cheaper and works quite nicely.

Christian Berger

Re: What I don't understand is why you need a company for that

Well the EPG problem is actually the main problem we in Germany have. There is a VDR-plugin for the Sky/Freesat EPG, but it crashes regularly.

BTW, UK television is, by a large margin, much better than German.

Christian Berger

What I don't understand is why you need a company for that

In Germany, FTA television is simply managed by the stations. They buy a transponder, they uplink themselves or buy uplink capacity, and you buy the equipment set it up and have TV. There's no intermediate in the loop.

It simply works, and it uses the DVB-EPG which, depending on the channel, shows you the programs to come for the next 1-4 weeks. Plus you still have teletext and you have a broad variety of DRM-free receivers.

Disney buys Lucasfilm, new Star Wars trilogy planned

Christian Berger

Can't be much worse

After all Lucasfilm and Disney have exactly the same problem. Both companies lost their "Mojo". They have lost what made them great, the spirit of trying something new.

Lucasfilm used to be a small company trying to make original movies. That's what made StarWars great.

Maybe it's time to move on. There are new people out there trying to re-invent science fiction.

http://www.youtube.com/watch?v=xO9ppicjlFg (unfortunately the subtitles don't quite capture the spirit of the original dialogue)

Or if you speak polish:

http://www.youtube.com/watch?v=ETAD1EMklIE

Brit 4G live TODAY: At last you can bust your data cap in 5 minutes

Christian Berger

Actually the discussion is missing the point

Of course it's expensive, but that's not the cool point about LTE.

What's cool about LTE is how it deals with practical restrictions.

For example you can use LTE on non-contiguous parts of the spectrum. Or you can use special low-bandwidth mobile stations.

Microsoft Surface popped open, poked, prodded

Christian Berger

Re: The really important number is "TTL"

I'm sorry, but in the real world, virtually everybody who actually does do work on a PC has Linux by now. It's just that over the years the amount of people who use their computers for work has shrunken by a great deal, so today you see most people using their computers as MP3-Players, gaming consoles or typewriters.

Microsoft aims to herd 70% of enterprise onto Windows 7 by mid-2013

Christian Berger

Re: This makes no sense (I hope you boys are checking your facts)

Maybe the "7" was a typo and Microsoft is aiming at 70% market share by 2013. Last time I counted (it was at a camping holiday) Windows was at roughly one percent with about one single laptop among about 100 I've seen.

Christian Berger

Most Windows software is

After all there was a "goldrush" in the 1990s and everybody was starting Windows projects. So most Windows software packages are designed for Windows 95. If they don't work there, it's usually because the developers experiment with new technologies as they go along. It's not uncommon to find software packages which use just about any technology from VBX components (the predecessor of Active X on win16) to .net, so they require an hour long installation procedure which includes multiple reboots and can break at any of its 30 or so steps. If you are lucky, it's automatic.

The situation is so bad, some people think that installation procedures are normal, although Windows perfectly allows you to just drop the .exe file somewhere and execute it. Monolithic executables are one of the main features of Windows.

Another systematic SCADA vuln

Christian Berger

Re: Technical solution ...

Shooting developers is, unfortunately, illegal in Germany. Then again most bosses greatly overestimate their ability to judge programmers.

And as one poster already mentioned, those who actually know about software development don't develop such software as they don't think they could do it. Even if they tried, they wouldn't survive the culture of idiocy there. The people still there either don't know any better or just go into "don't care" mode, and do whatever their bosses tell them to do.

Christian Berger

Re: To Paraphrase The Ogre

You forgot something.

Security starts with 2 things:

1. Get your developers to understand security.

2. Get your developers to care about security.

I mean in many situations, encryption isn't necessary. Think of railway control systems, all the information is public. The concern is that someone might inject messages. Making sure nobody can inject or alter messages is a totally different problem than encryption.

Then instead of putting a full blown computer somewhere, it can be more sensible to just use a tiny little purpose built machine which will just read a bit of text from a serial line and act upon it.

The main problem is that those systems are usually made by total idiots. Those are the people who write software for PLCs running on Windows and needing an SQL server. Those are the people who invent things like "OPC" OLE for Process Control, an OLE and DCOM based system doing about the same as SNMP, but at a somewhat higher complexity and without proper tools.

The problem is that engineers aren't taught proper computer systems. You can now get a degree in electronics without ever having used a Unix command line.

British IT consultant talks of his three years as an Iraqi hostage

Christian Berger

What I actually wonder is

Why does an IT consultant go to Iraq? It's not like the people down there have have much need for IT consultancy. I mean they probably did manage to keep some infrastructure working previously, and while the equipment may be gone, the people probably are still there.

It just doesn't seem to make much sense to send IT consultants down there, the people down there have more pressing needs.

4G: Bad coverage, crap battery life - but at least it's really expensive

Christian Berger

Actually LTE is designed to be a chameleon

It has lots of parameters, so it is possible to build special low-power low bandwidth devices. LTE is highly flexible in that regard. For example in Germany it's mostly marketed as an alternative to DSL and cable modems.

The main problem I have with LTE is that it doesn't seem to address the complexity of GSM/UMTS. As far as I know, you still need your GSM backend infrastructure to run LTE.

Headaches, delays plague Windows Store, dev claims

Christian Berger

No Learners

Why should Microsoft want to learn. If you look at the AppStore fiascoes and take a step back, you will notice that the concept itself is flawed, not just the execution.

If you allow simple payment you will attract a bad crowd, people who just hack together some primitive "farting" app to get rich in $1 increments. Therefore you'd need to be in good contact with your developers and weed out the ones you don't want.

However once you have a market, you will have to deal with a lot of developers, each one completely disorganized from the others. You suddenly have company barriers. You cannot just talk to the developers if you are inside the company which checks the apps and runs the market.

What should be done would be to go closer to the "distribution" model. Where everyone is responsible for their packets and there are publicly discussed rules. And if you, as a user, find yourself to disagree with the rules of one distribution/repository, you simply switch to another one.

Christian Berger

Shouldn't he be used to it?

I mean on Windows some applications simply don't run on some boxes. It's normal. I once had to deploy some real-life Windows software on 2 equal Windows 7 boxes. Both freshly installed, both exactly the same hardware. It worked on one, it mysteriously crashed on the other. After a re-install it worked on both.

The box checking the app might have been one of those odd ones which fail to run certain applications, maybe it even has a defective graphics card or something, who knows, who cares?

Microsoft doesn't need to care. Their success won't come from the Windows Store, it'll come, as usual, from hardware companies pre-installing it on their computers, and ARM computers locking out competitors via secure boot.

Dr No, Thunderball, Casino Royale? Vote now for the best Bond film

Christian Berger

Music wise

I'd have to say Goldfinger. The song to it is just catchy and just listen to the lyrics:

Well I've heard that it's gold, I've heard that it's a finger.

Now don't shoot me, I'm just the bloody singer....

https://www.youtube.com/watch?v=qGY7b1nAcis

Christian Berger

Re: Which Casino Royale?

Absolutely, and it's also the only one with the iconic "James Bond" theme.

Latest PS3 hack hits Sony with massive migraine

Christian Berger

And all just because they removed "Other system"

If they wouldn't have stopped people from running Linux on the PS3 they wouldn't have had that problem. Everybody would have been happy, except for the pirates.

WHITE WHALE spent 4 years trying to tell us something, then stopped

Christian Berger

It seems to be only able to do one formant

That's of course a main problem when imitating speech and explains why it's so hard to understand. English requires 2 formants.

Formants are, in the model of speech synthesis, resonant filters which come after the excitation.

Microsoft: Welcome back to PCs, ARM. Sorry about the 1990s

Christian Berger

Re: I'm sorry, but it's not WinRT that brings ARM to workstations

Well there are other points for Intel, but yes they'd take a huge hit.

If I was Microsoft I'd find a way to run legacy win32 applications on small screens, by re-compositing the gui. Since the GUI on Windows is managed by the operating system, this should be possible.

Hackers get 10 MONTHS to pwn victims with 0-days before world+dog finds out

Christian Berger

Well of course they do

If you disclose a security hole you risk getting sued by the company, at best you get a tiny bit of reputation.

If you sell the security hole on the black market you get real money.

Windows 8: An awful lot of change for a single release

Christian Berger

Re: Digital Research?

Well the main selling point of Windows NT was that it ran all Windows 3.x and 9x Software (as well as OS/2 and Posix, at least initially). However this was the 1990s and both programmers and API were preety bad by then. It was not uncommon for Windows 3.x and 9x Software to directly access the hardware since that was actually simpler than using some barely documented API. I remember a Telnet-Server for Windows 3.x which even brought its own Scheduler along.

So in the 1990s it was normal for your software to need administrator rights. For example if you had a POS system it somehow needed to talk to the serial ports. Few programmers back than managed to do that without running as Administrator, so everybody using a Windows 2000 system productively was essentially an administrator.

Then there are problems which weren't foreseen back then, like the application distribution problem. There simply were no software repositories with trusted software, or package manager. You were supposed to get an executable, run it and it is supposed to put all the necessary files onto your system.

Windows NT is not insecure because of Kernel design. It's insecure because of the Ecosystem around it which it inherited from Windows 3.x 9x.