buuuuh. yes, eventually they might get their software right (or, let's just say, better than it was). but from a giant like micro$oft I would have expected something more.
let's not forget that those bugs have been found black-box by people with no association with microsoft. some of them were ridiculously evident overflows it seems unbelievable no one internally testing the software ever found them.
for others, it's admirable that people without access to source code managed to find them.
I wonder if code auditing/review, pentesting and *testing* in general were items in micro$oft agenda.
there's no excuse, for such a company, to produce so crappy software!

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/330/31963#31963