full-disclosure - Microsoft wins Homeland Security Bid ( Reuters)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

From: Brad.Bemis at airborne.com (Brad Bemis)
Subject: Microsoft wins Homeland Security Bid (
 Reuters)

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

>  No. Customer demand should play the *least* part in security 
>  evolution.  The *main* thing that security analysts and security 
>  developers should focus on are the capabilities of the 
>  opposition, whomever they may be.  Your foe is not your 
>  customer, and if he is he will not lead you toward
>  pleasant waters. Again, your thinking is dangerous.

I am not arguing with you.  I am just stating a point of fact.  An
unfortunate fact, but a fact nonetheless.  It is not the thinking that is
dangerous, it is the result of economic drivers that product development
companies place emphasis on and use to determine the focus of their
initiatives.  Stating that security 'should' be the primary driver is 100%
correct and I place a great deal of support behind those companies who
address the issue of security because it is the right and necessary thing
to do.  However, security did not become a big deal for most product
development companies until customers began demanding it.

Thank you for taking the time to address this issue and lend it the
credence that it deserves, but this will be my last post to this thread (3
is the upper-level topical limit in my opinion  ;-)       

Thank you for your time and attention,

========================
Brad Bemis
========================

-----BEGIN PGP SIGNATURE-----

iQA/AwUBPxWhC5DnOfS48mrdEQJbJwCfaQYiziyzS1hMX6qBr4WftlDAC7IAn0ed
emp1mrNkgdCvOCeTvAxvQ6UN
=TCEo
-----END PGP SIGNATURE-----