Slashdot Mirror


Microsoft Attempts to Secure IIS

billmaly writes: "Yahoo has this article about trying to make IIS more secure. Among steps is to have it install in its most secure state, putting the onus on sysadmins to remove it from that state. It looks like Microsoft may be trying to do the right thing from a security standpoint, at least on paper."

6 of 392 comments (clear)

  1. What about Linux by Anonymous Coward · · Score: 0, Redundant

    And when will the Linux distributions ship with all the services off?

  2. Two step process? by jlockard · · Score: 2, Redundant

    So, like what are they going to do?

    Step 1: Install IIS
    Step 2: Uninstall IIS

    --
    --JLockard - "Some mornings, it's just not worth chewing through the leather straps." - Emo Phillips
  3. About damn time! by Kencordia · · Score: 0, Redundant

    Thank god. Now all they have to do is provide a WindowsUpdate-esque way of keeping IIS secure. Since we know these holes can be exploited via the web, then Microsoft should be able to detect them and patch them, right?

    You'd think so.

    --
    "Forty-two," said Deep Thought, with infinite majesty and calm.
  4. Making IIS secure by Darth+RadaR · · Score: 1, Redundant

    "...it's incumbent on Microsoft, being in the leadership position we're in, to help drive forward the industry in this area,'' Brian Valentine, senior vice president of the Windows Division at Microsoft.

    Which means Microsoft has found someone to steal it from. :)

    --
    /*drunk.. fix later*/
  5. Re:keyword by kilgore_47 · · Score: 0, Redundant

    I think the keyword here is 'Attempt'

    I think the keyword is Astroturf.

    From billmaly's story submission:
    It looks like Microsoft may be trying to do the right thing from a security standpoint, at least on paper."

    How does this stuff make it to slashdot's front page? C'mon, this is just blatant astroturfing!

    --
    ___
    The way to see by faith is to shut the eye of reason. --Ben Franklin
  6. Also, the power of nasty insurance premiums by devphil · · Score: 0, Redundant


    I can't get to the article right now, but I'd be surprised if MS isn't trying to recover its stance from insurance companies starting to charge a higher premium and rate for "hacker coverage" if you run IIS.

    --
    You cannot apply a technological solution to a sociological problem. (Edwards' Law)