Oh, that is *very good*:

Let's suppose you put an NT file server on an
Internet-connected computer. What can the bad guys do?

Indeed. The recent Schneier/Shostack "Results, Not Resolutions" response to the Gates memo gives some idea of the magnitude of the problem. Basically, you don't add security like you add a feature: you think about it from the start. Even if MS pulls out all the stops it will be years before they have anything more that superficial improvements.

Now, will any of this affect their sales?


[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/54/10162#10162