Security Flaws May Be Microsoft's Undoing

tarpitt writes: "According to this article in the LA Times, repeated software flaws in Microsoft products has begun to raise concerns that they 'threaten the stability of a major piece of the world economy and to raise questions about Microsoft's future.' Flawed security is seen as a stumbling block to accepting Microsoft sponsored on-line services. It is also driving discussion about making software manufacturers liable for damages caused by flawed products." This piece in eWeek on troubles with XP's automatic updates is an interesting companion; releasing often doesn't seem to be enough. Update: 01/15 15:00 GMT by J : Bruce Schneier's January Crypto-Gram came out this morning, and is also topical: "Microsoft treats security vulnerabilities as public relations problems. Until that changes, expect more of this kind of nonsense..."

Comments

Ahem...

[nurightshu]

...begun to raise concerns...

Begun to raise concerns?! That's like saying, "In other news, repeated appearances of the star Sol on an approximate 24 hour basis have begun to raise concerns that it may do so tomorrow."

Microsoft never built operating systems with security in mind. The last time I checked, the security testing group at MS consisted of two Norwegian Black rats, a four-year-old, and a blind, deaf, chimpanzee with a drinking habit. It still hasn't occurred to them that improving their security might, in fact, be a good thing.

There, I feel better.

Re:Ahem...

[servasius_jr]

The last time I checked, the security testing group at MS consisted of two Norwegian Black rats, a four-year-old, and a blind, deaf, chimpanzee with a drinking habit.

This allegation you're making is both hurtful and untrue. That chimpanzee is a friend of mine, and I'll have you know that he only drinks socially, and conducts himself with the utmost professionalism.

Re:Ahem...

[Rogerborg]

• The last time I checked, the security testing group at MS consisted of two Norwegian Black rats, a four-year-old, and a blind, deaf, chimpanzee with a drinking habit

Typical anti-MS FUD. When I asked Microsoft PR to verify this, they assured me that the "rats" are in fact Siberian hamsters

Why are they worried about autoupdate?

[wo1verin3]

There are hundreds of quicker ways to have your windows box become unstable...

Installing programs --> unsupported
Installed additional hardware --> unsupported
System booting --> unsupported
Using a monitor --> unsupported
Bypassing a circumvention device --> unsupported
DVD Playback --> unsupported

ever try to get help from MS, or esculate a real bug with them for any of the above?

How much worse could the software be without updates? :)

Re:Product liability

[AtrN]

I think it'll go the way of the car industry with hot rods looked down on. Machines (h/w + OS) will need to be certified before they can be "driven" on the public roads ('net). People who drive (admins) need licenses (MSCE, oh god no!) before hooking the machine to the 'net. Cops look out for drivers (probe open relays etc...) and eat donuts while reading /.

Security flaws in XP?

[Rinikusu]

that's the most stupJ00 4r3 0wn3d!id thing I've ever heard! My Windows XP box h45 b33n h4x0rd h4h4h4h4h4! sorry, I don't know what's wrong with my keyboard10wn3dj00 it keeps messing up.. but anyway, Microsoft security is perfectly fine here

Re:Liability.

[IronChef]

Your mistake is wanting to fix the problem rather than litigating a solution. Silly rabbit, you must be some kind of Canadian or something!

Quote of the day

[mcrbids]

Ok, Quotes of the day;

First:

"Microsoft treats security problems as public relations problems," said Bruce Schneier of Counterpane Internet Security in Cupertino, Calif.

And then:

"We're going to make our systems more resistant and more resilient," said Microsoft's director of security assurance, Steve Lipner. "We want to be unquestionably, unequivocally the best."

Director of Security Assurance ??!?!

If you can imagine a more Dilbertified position within a company....