...complexity is only part of the problem and IMHO the main problem is because the Windows API was originally developed with functionality/ease of use as the main priority and security a meager afterthought. So later, Microsoft realizes the importance of developing secure code and builds layer upon layer over the top of the origianl "swiss-cheese" API. That's like building a house with 3' concrete walls and blast resistant doors on top of a foundation made of balsa wood! I personally think it's time for Microsoft to start over, ...if Apple can do it they should be able to.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/252/27308#27308