1) No, there is no 'BulletProof' OS, but proper programming methodologies do exist and I seriously doubt that you could make the argument that Microsoft has ever heard of them. Properly secured APIs and restricted system access are the hallmarks of a properly designed OS - not spaghetti code and unnecessary applications (IE, Media Player, etc...) that have been 'innovated' into the root of the OS. The only thing protecting us, as argued in the article, is the obscurity of MS' APIs. My money is on Linux being the more secure OS 100% of the time - not because they are Open Source, but because they have implemented a security framework in their design and actually stick to it.

2) If you want to rant and rave at MS you will have to pay for it - the level of the person you get to yell at is purely defined by the size of your wallet and even if you pay enough to get an audience with Bill Gates you will still get the same response... 'your business is important to us, we appreciate your

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/82/12625#12625