Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
Security Holes That Run Deep
Mark Burnett, 2004-12-20

How a seemingly simply Microsoft bug betrayed its author's disdain for a wide range of secure coding principles.

Comments Mode:
Security Holes That Run Deep 2004-12-20
Anonymous (2 replies)
Security Holes That Run Deep 2004-12-22
michaels (1 replies)
Security Holes That Run Deep 2004-12-23
Anonymous
Security Holes That Run Deep 2004-12-26
Anonymous
Nothing new from MS here... 2004-12-21
Anonymous
Security Holes That Run Deep 2004-12-21
bazzargh
Failing Open vs. Closed 2004-12-22
Andy S.
Security Holes That Run Deep 2004-12-23
Anonymous
Security Holes That Run Deep 2004-12-29
Anonymous-Philippines (1 replies)
Guys,

Come on now, we all know that there is a trade off between security, functionality and ease-of-use.

Not to defend Microsoft or anything, but, if you consider that during those early times, the need of the market was to have an easy to use product that could connect to the internet. Microsoft provided this. It takes us one day to train a user to use microsoft windows, versus one week to train users on linux desktops. If you were the sys ad, which do you pick?

Granted, that now the ease-of-use and functionality has been addressed, Microsoft is now moving on to enhancing security. Should you blame microsoft for providing what the market needed the most?

just my 2 c worth.


[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/285/29708#29708
Re: Security Holes That Run Deep 2009-06-10
Anonymous - US







 

Privacy Statement
Copyright 2009, SecurityFocus