I can not really agree. Security through Obscurity never works. The Source Code for Windows 2000 and possibly other Versions are in the hands of blackhats already. The damage done "undercover" is far worse and cannot be estimated. If the damage was known to the public there would be much more pressure on Microsoft and other vendors. As you say, Windows is insecure by design, not realeasing specifications will only make the blackhats glad who have access to sourcers others dont. A million scriptkiddies might do the more massive damage but i doubt that it would be more dangerous than 0,1% of the kids with special knowledge.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/82/12603#12603