Slashdot Mirror
Microsoft Expands MAPP, Shares Attack Data With Incident Responders
Trailrunner7 writes "Microsoft is expanding its MAPP program that shares attack and protection information with other security vendors and will now be sharing some data with incident responders, as well. The new system will enable organizations such as CERTs and internal IR teams to exchange information on specific attacks and general threats. Now, Microsoft is expanding and changing the MAPP program so that more people will have access to some of the data and the information will be available earlier. Until now, MAPP members get access to patch data 24 hours before the release. Microsoft will be giving that information to MAPP companies three business days before Patch Tuesday going forward. The new MAPP for Responders program is an extension of the existing system and is designed to allow incident response teams to share information among themselves and to benefit from the threat intelligence that Microsoft has, as well."
Don't they already share it with the NSA?
No matter how many shill stories hit the headlines about something "good" these big corporations are doing now, it won't make us forget the fact that they're perpetuating pervasive monitoring of their customers.
Microsoft et al won't ever get their rep back. They'll all, always, be the companies that installed backdoors and aiding spying on their customers in _foreign_ countries. Good riddance.
Microsoft Security wants to make sure that anyone discussing such an issue as this is firmly, completely part of the hive-mind: https://www.microsoft.com/security/msrc/collaboration/mapp/criteria.aspx
Microsoft whistles past the graveyard once again.
I deny that I have not avoided attaining the opposite of that which I do not want.
you want to show the world you care, MS? Windows 9 or whatever dick name you call it should be open source.
put up or stfu
New way to make more bucks - by faster access to patch
fuck them all!
gtfo shills and go polish knobs on some other site, try kuro5hin, i hear they like a bunch of circle jerk articles
Love the "use Linux or GTFO" mentality...
tell us which chair leg you like up your ass greased and ready
Waah waah, my open source religion does not allow me to read Microsoft news.
Looks like I'm going to assist to the huge catastrophic collapse of Microsoft within my timespan afterall. This is great, I already have my popcorn ready!
"Microsoft is also putting Azure cloud to work via the MAPP Scanner program, which uses Redmond's servers to scan Office documents, PDF files, flash movies, and URLS for potential malicious content .. The scanner works by spinning up VMs for every supported version of Windows, and opens the content in all supported versions of the appropriate application, then looks for signs of a threat."
..
Reminds me of that Japanese horror movie where this feller is trapped in a sand pit and has to continually shovel sand into a basket that some unknown entity draws up to the surface with a rope, only the sand is continually falling back into the pit. If he don't keep shoveling then he drowns in sand
AccountKiller
"This summary is not praising anyone, it is a factual story about MS changing their MAPP program. As someone working in security I find it interesting. We don't like facts now?"
...
I don't like this fact, in order to protect *MY* documents from hackers, I must upload them to a VM in the Azure cloud
AccountKiller
1. Set up multiple front companies and get them in the MAPP program
2. Use byzantine fault tolerance to thwart canary traps
3. Become a top "cyber-weapons" dealer
4. PROFIT!
"When information is power, privacy is freedom" - Jah-Wren Ryel
Why do you assume he's an OSS guy and not, say, a Mac guy?
Apple's fanboys usually have at least a 3rd grade understanding of grammar.