The problem is the continued Microsoft 'innovation' that introduces features that are being exploited. Want to get rid of spyware? Get rid of Active X. Oh wait, you can't disable it completely. You can only have it annoy you every time a page sends an Active-X control. How about Outlook's feature that allowed it to auto-execute attachments? Or this new IE feature that allows the system to overwrite files. These types of innovations are contradictory to secure computing. Anyone who has ever done software development knows what happens to a system when security isn't part of the design criteria.

Microsoft's business requires that they move retail product out the door to stay profitable. Making existing systems secure does nothing for them. Increased security will be an upgrade you'll pay for later.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/articles/9004/27191#27191