This is very clever. By co-opting the entire internet community, they can pretend it's not their fault. Very slick...

Why would you have autorun enabled for USB sticks? Why would have desktops with RPC and other ports open by default? If you read the analysis of conficker on sans.org diary and other places, you'll see that the major vectors were easily preventable -- if it wasn't for MS's attitude of 'security is the last priority'.

The analogy might be a little extreme, but I'm an Indian so it does spring to mind: this is like Pakistan saying "I need more money to fight terrorism" while doing *nothing* to prevent it in the first place.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/articles/11546/35331#35331