full-disclosure - Bill Gates blames the victim

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <01a101c37255$4c7ccda0$550ffea9@rms>
From: rms at computerbytesman.com (Richard M. Smith)
Subject: Bill Gates blames the victim

Hi Robert,

   >>> As long as the patch is ahead of the virus, where
   >>> does the accountability really fall?

I'm curious about one thing.  How is the typical home PC user who runs
Microsoft Office suppose to learn that they now need to download a patch
to fix this latest critical security hole in Microsoft Word:

   http://www.microsoft.com/technet/security/bulletin/MS03-035.asp
   Flaw in Microsoft Word Could Enable Macros to Run Automatically
(827653)
   Originally posted: September 03, 2003

BTW, I tried downloading all of the security patches for my copy of
Office XP the other day but couldn't.  The update procedure requires the
original Office XP CDs which are 150 miles away at my other house.

For 3 or 4 years now, I've been asking Microsoft for a simple option in
Word to turn off Word Macros since I don't use them.  If this option
existed, these ongoing security holes with Word Macros wouldn't affect
me.  Any idea why Microsoft refuses to implement this rather obvious and
useful security feature?

Richard