full-disclosure - CyberInsecurity: The cost of Monopoly

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

From: listmail at joeware.net (Joe)
Subject: CyberInsecurity: The cost of Monopoly

Isn't this a great country? We defend to death the rights for anyone to
speak their opinion. Even if the opinion is uninformed, shortsighted, or
silly.

I can't recall ever speaking to someone who actually bought a new
application from a vendor simply because their old version of the
application from the vendor was insecure or buggy. In fact, that would tend
to push them to look elsewhere. 

Microsoft in particular is huge for adding new features. So much so that
they were told by their customers to slow that down because introduction of
the new features had a good possibility to open up new security holes or
other problems.

One other point. If MS is so consistent in doing this (and I am not arguing
they aren't) and others are so consistently not doing it (and I am not
arguing they are); why is MS still so popular? 

  joe

-----Original Message-----
From: full-disclosure-admin@...ts.netsys.com
[mailto:full-disclosure-admin@...ts.netsys.com] On Behalf Of Choe.Sung Cont.
PACAF CSS/SCHP
Sent: Saturday, September 27, 2003 11:18 AM
To: full-disclosure@...ts.netsys.com

Micro$oft's business model is not selling software that is (relatively)
bug-free.  Rather, they like bringing products to market ASAP, regardless of
the security risks that these "products" pose to the consumer.  If they were
ever to release software that was free of such "problems", would they still
be able to sell new versions to the public?  I would think not...

V/r,
Sung J. Choe
PACAF CSS/SCHP, PACAF NOSC
Information Assurance Analyst
DSN: 315-449-4317, Comm: 808-449-4317