You seem kinda paranoid lately, Timster...

Personally, I think it's about time Microsoft started owning up to the mess it inadvertantly helped to create. It does have some benefits (if they'd up it to $500K they may get further, but it's a start.)

I can see a small bit of opportunity for abuse to anyone crafty enough to pull it off (Release virus laced w/ hints implicating some sucker, plant virus toolkit on a public computer in his neighborhood, gin up some fake IRC logs, call the cops, collect a Big Fat Check(tm)...) Otherwise, it's a nice way to get the script kiddies to rat on each other and at least do something to curb the copycats who can only modify the scripts that others have written.

Err, notice that I said "script kiddies" up there. Good luck catching any of the real talent with it... they usually don't brag in IRC. But like you said - as part of an overall strategy, it ain't bad.

Now all we gotta do is see these so-called efforts towards cleaning up the mess internal to Windows, the flaws and bad practices that helped facilitate worms and viruses so easily in the first place.

This brings me to your final statement. It is indeed a people problem, but certain OEMs certainly aren't helping by applying superficial solutions to fundamental flaws, ne?

/P

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/199/23859#23859