Microsoft Attempts to Secure IIS
billmaly writes: "Yahoo has this article about trying to make IIS more secure. Among steps is to have it install in its most secure state, putting the onus on sysadmins to remove it from that state. It looks like Microsoft may be trying to do the right thing from a security standpoint, at least on paper."
And when will the Linux distributions ship with all the services off?
So, like what are they going to do?
Step 1: Install IIS
Step 2: Uninstall IIS
--JLockard - "Some mornings, it's just not worth chewing through the leather straps." - Emo Phillips
Thank god. Now all they have to do is provide a WindowsUpdate-esque way of keeping IIS secure. Since we know these holes can be exploited via the web, then Microsoft should be able to detect them and patch them, right?
You'd think so.
"Forty-two," said Deep Thought, with infinite majesty and calm.
"...it's incumbent on Microsoft, being in the leadership position we're in, to help drive forward the industry in this area,'' Brian Valentine, senior vice president of the Windows Division at Microsoft.
:)
Which means Microsoft has found someone to steal it from.
/*drunk.. fix later*/
I think the keyword here is 'Attempt'
I think the keyword is Astroturf.
From billmaly's story submission:
It looks like Microsoft may be trying to do the right thing from a security standpoint, at least on paper."
How does this stuff make it to slashdot's front page? C'mon, this is just blatant astroturfing!
___
The way to see by faith is to shut the eye of reason. --Ben Franklin
I can't get to the article right now, but I'd be surprised if MS isn't trying to recover its stance from insurance companies starting to charge a higher premium and rate for "hacker coverage" if you run IIS.
You cannot apply a technological solution to a sociological problem. (Edwards' Law)