| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <200307161732.h6GHWPU1001709@turing-police.cc.vt.edu> From: Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu) Subject: Microsoft wins Homeland Security Bid ( Reuters) On Wed, 16 Jul 2003 09:21:52 PDT, Brad Bemis <Brad.Bemis@...borne.com> said: > My point is that security is a process, not a product. Microsoft is going > to work very hard with the DHS to provide a secure baseline that takes into > account the sensitivity of information associated with the defense of > critical infrastructure assets. Comments stating that Microsoft will be > incapable of providing an appropriate service (or at least a service > comparable to any competitor in the marketplace) are biased and without > merit. OK. Even granting that Microsoft *is* trying to improve things, that's *STILL* no excuse for giving them a sole-source. Or for *ANY* vendor to get a sole-source. If they got stuff from two independent vendors, that would at least give you a snowball's chance of half your systems surviving any given attack. There's a *reason* why the IETF requires two independent implementations to move something to 'Standard', and why the Shuttle has 5 computers - one of which is a different architecture and software system. And if there's *any* agency in the federal government that needs to be bulletproof, DHS is it.... -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 226 bytes Desc: not available Url : http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20030716/72007387/attachment.bin
Powered by blists - more mailing lists