Slashdot Mirror


A Look at Microsoft's Security War Room

Josh Fink writes "C|Net has an interesting piece about Microsoft's Security War Room, or rather, shall I say rooms. This room came about when Microsoft's security chief, Mike Nash, had issues finding open conference rooms. The response; a dedicated room only for him and his staff to handle emergencies. "And while he was at it, why not have two? That way, the folks working on fixing a security crisis could have a little breathing room from those drafting the public and customer communications around the issue. ""

20 of 199 comments (clear)

  1. on the door? by mseidl · · Score: 5, Funny

    "No Penguins Allowed"

    1. Re:on the door? by PPH · · Score: 5, Funny

      That's on the front door only. How many back doors do these rooms have?

      --
      Have gnu, will travel.
    2. Re:on the door? by Anonymous Coward · · Score: 5, Interesting

      I'm posting anonymously because of NDA implications. I used to work at a network security firm that supplied MS with a security console for detecting, investigating, and mitigating attacks on their network. (Hint, they use the same one as the Pentagon's network security war room.) This system relied upon certain defacto standards in their networking gear, but MS had purchased gear that did not support that feature, and were blocking much of their gear that did. MS's proposed solution, distribute a few hundred Linux boxes all through their network to serve as probes.

      It was an unworkable idea, and we eventually worked around their problems in a different way, but it does indicate that some of the head security guys at MS may not be as opposed to Linux as you'd think. So long as they don't have to make it public, they seem happy to use OSS. Note, the servers that provide their security system run a highly customized version of either OpenBSD or Linux, depending on which version they're using.

  2. Interesting photo question... by dada21 · · Score: 5, Funny

    Anyone notice that all the swivel chairs are bolted to the ground? I wonder why they made them fixed and permanent.

  3. Billions of dollars in damages... by gerf · · Score: 3, Funny

    Viruses, backdoors, security holes, buffer overflows, trojans galore... and they get a room. Ooooh, they're so dedicated to security!

    1. Re:Billions of dollars in damages... by Smidge204 · · Score: 3, Funny

      They can't even keep people from breaking in and stealing their expresso supplies! No wonder they have so much trouble with security...

      =Smidge=

  4. The cabinets are unlocked by BadAnalogyGuy · · Score: 3, Funny

    They have a big sign out front indicating security, but they don't even have locks on the kitchen cabinets.

  5. Re:reality and spin rooms. by ByOhTek · · Score: 4, Interesting

    One dedicated fix team for all that code?

    That wouldn't make sense at all, there's too much for anyone to grasp. It would be like a dedicated fix team that cover Linux+KDE+OpenOffice. (replace Linux with OpenSolaris or *BSD if you like, KDE with Gnome or some other high-feature window/session/desktop manager if you like)

    It's to complex to keep aware of the ins-and-outs of everything - just one of those would be hard enough. Each project should have their own dedicated fix team - The top-string regular devs for the project (hence they understand the code), maybe one or two outsiders (another perspective), who normally work on the specific project, but drop everything and work on fixes if they occur.

    Also, it never said that they didn't (or for that matter, did) already have a dedicated team then (or now), simply that until '05, they had to share conference rooms.

    --
    Self proclaimed typo king, and inventor of the bear destroying coffee table (patent not pending).
  6. Two rooms by ShiningSomething · · Score: 5, Funny

    When I read there were two rooms, my first reaction was: one to work on the current security threat, a second to work on the security threats created by the first one...

  7. The reason for having a second room... by MiniMike · · Score: 5, Funny

    It's a backup for when the first room crashes!

  8. Are those liquor bottles? by Iphtashu+Fitz · · Score: 4, Interesting
    In the cabinet containing food supplies it looks like they have the following available:
    • a bag of pretzels
    • a couple bottles of hersheys chocolate syrup
    • one can of soda or juice
    • a couple containers of nondairy creamer
    • 3 bottles that look like liquor bottles
    All that to feed a group of engineers that "gets hit with an emergency and has to pull an all-nighter."

    Sounds like a typical geek diet to me.
    1. Re:Are those liquor bottles? by iONiUM · · Score: 5, Funny

      Yes, you are right. The GP either doesn't drink alcohol, or doesn't drink coffee. Either way, what the fuck is he doing on slashdot.

  9. Re:war room? by Geste · · Score: 5, Informative
    "Is it just me or is slashdot's headlines as of late running parallel to the average idiots way of describing everything as a war?"

    In somebody's defense, they probably just picked up the concept and terminology from large telcos. If you go to a large network operations center (say like what AT&T operates in Piscataway, NJ) you will find two or more good-sized conference rooms provisioned with 10-15 workstations each that sit idle 99 percent of the time. Just used in cases of major outages/problems or sometimes for network upgrades. Known as the "war rooms" for as long as I am aware.

  10. Disappointed by hcdejong · · Score: 4, Interesting

    I expected this, not some crummy office with a conference table.

  11. War Room? More like Scuffle Closet? by Spinlock_1977 · · Score: 4, Funny

    I've been in a few war rooms, control centers, command centers, etc etc etc over the years. Even helped design one a little. 4 Flat screens is all they've got? Four? That's no war room. Scuffle closet maybe?

    --
    - The Kessel run is for nerf herders. I can circumnavigate the entire Central Finite Curve in a lot less than 12 parse
  12. Re:From this state of the art bunker... by Locutus · · Score: 3, Insightful

    Didn't Bill Gates declare essentially, 'Mission Accomplished', when they shipped Windows 2000? You know, saying it was the most secure version of Windows. Then again when Windows XP shipped and the grand finale when he declared Windows Vista as the most secure OS available. That's right, not the most secure version of Windows, but the most secure OS available!

    Is he retiring from Microsoft to run for President? He's got the ethics to do so. IMO.

    LoB

    --
    "Anyone who stands out in the middle of a road looks like roadkill to me." --Linus
  13. Re:war room? by stranger_to_himself · · Score: 3, Funny

    I am interested in joining your war on the inappropriate use of the word 'war'.

  14. What a non-story by InlawBiker · · Score: 4, Insightful

    Seriously, a few photos of a conference room? And Harvey Keitel and an espresso machine? This is just a room where people sit down to discuss issues. Just like in every office everywhere in the world, except this one has some TVs on the wall. Can I please have that 10 minutes of my life back?

  15. Re:reality and spin rooms. by VE3MTM · · Score: 3, Insightful

    I'm sure they're vastly simplifying their processes. This seems to just be a triage centre (and a fairly rudimentary one too). I doubt the actual fixing takes place here, rather just co-ordinating that process.

    --
    09 F9 11 02 9D 74 E3 5B D8 41 56 C5 63 56 88 C0 Whoops, silly middle mouse button...
  16. Re:war room? by Fred_A · · Score: 3, Funny

    The proper name is "War on Security". It's not supposed to be used outside of Redmond though.

    --

    May contain traces of nut.
    Made from the freshest electrons.