Look, I agree in principle with the report finding that 90% market share leads to huge security risk. Seems like kind of a no-brainer. Even if msoft was doing a better job (or any job) at securing their products, it would still be a no-brainer.

However, if you are going to publish a critical paper, and even more importantly, use your damn business title in the press conference, you better run it by your employer first. Now if he did that and they said run with it, then obviously AtStake is at fault.

If you want a position where you can publish this kind of report and not get fired, get a phd and get tenure at a university. That's the purpose of tenure, to protect academic freedom. Either that or run your own company. There is no such thing as tenure when you work for someone else.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/articles/7069/22639#22639