Security Flaws May Be Microsoft's Undoing

tarpitt writes: "According to this article in the LA Times, repeated software flaws in Microsoft products has begun to raise concerns that they 'threaten the stability of a major piece of the world economy and to raise questions about Microsoft's future.' Flawed security is seen as a stumbling block to accepting Microsoft sponsored on-line services. It is also driving discussion about making software manufacturers liable for damages caused by flawed products." This piece in eWeek on troubles with XP's automatic updates is an interesting companion; releasing often doesn't seem to be enough. Update: 01/15 15:00 GMT by J : Bruce Schneier's January Crypto-Gram came out this morning, and is also topical: "Microsoft treats security vulnerabilities as public relations problems. Until that changes, expect more of this kind of nonsense..."

Comments

The psychology of security ...

[YeeHaW_Jelte]

"We're going to make our systems more resistant and more resilient," said Microsoft's director of security assurance, Steve Lipner. "We want to be unquestionably, unequivocally the best."

Nobody should say Microsoft isn't taking security serious; they've even got a official 'no worries mate' person.

"Yes sir, I positively assure you that security is no problem whatsoever, I just checked with our very talented programmers, and they, on their part, assured me that they knew of no faults in our great software, and thus, I feel secure to absolutely assure you that you are safe as a lamb."

"But our server just got hacked this morning"

"So? How is this our problem sir? I suggest you contact the hackers and work it out with them. Good day sir."

Re:Impossible

[jlower]

I disagree. Many of the virus problems that have plagued MS are because they included features along with brain-dead defaults that made it easy for viruses to propagate.

For example, hiding known file name extensions by default often tricks users into launching an executible attachment when they think it's a jpg or somesuch.

For example, executing code automatically, especially in preview windows was a stupid default.

The list goes on and on. The bottom line is the features and defaults were seemingly determined by marketing personel.

Re:Call me a troll if need be

[talks_to_birds]

troll

t_t_b

Nelson from Simpson's

[bobobobo]

Ha ha.

Re:They're no worse than the average...

[tomknight]

Umm... I'm sure you really mean illogical and ungrammatical. But then, you must be right, given your mission statement. Or maybe (just maybe) you're actually not a suitable person to criticise other people's grammatical errors?

I sacrifice my karma on tha altar of smugness...

Tom.