full-disclosure - Microsoft Outlines New Initiatives in Ongoi ng Security Efforts To Help Customers

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

From: Ben.Dehner at valmont.com (Dehner, Benjamin T.)
Subject: Microsoft Outlines New Initiatives in Ongoi
	ng Security Efforts To Help Customers

-----BEGIN PGP SIGNED MESSAGE-----

What is interesting in this article is what Balmer does NOT say. 
Specifically:

- -- code auditing to prevent security problems
- -- Q/A testing of software to detect bugs
- -- testing of patches to prevent patch interaction and over-write
issues
- -- third party security testing
(Real software project managers care to add more?)

In other words, Micro$oft is not addressing the core issue of crappy,
insecure, bug-ridden code.  They are putting a few snappy front-ends
in place, along with  massive marketing, so that consumers can better
fix Microsoft's problems for them.

- -----Original Message-----
From: Richard M. Smith [mailto:rms@...puterbytesman.com]

http://biz.yahoo.com/prnews/031009/sfth071_1.html

Microsoft Outlines New Initiatives in Ongoing Security Efforts To
Help
Customers
Thursday October 9, 10:30 am ET  
Company Announces Technology Investments to Help Protect Windows
Users 

NEW ORLEANS, Oct. 9 /PRNewswire-FirstCall/ -- In a speech at
Microsoft
Corp.'s (Nasdaq: MSFT - News) inaugural Worldwide Partner Conference,
Chief
Executive Officer Steve Ballmer outlined new initiatives in the
company's
ongoing security efforts designed to address the increasing threats
faced by
computer users around the world. Ballmer announced new programs and
technology investments to be delivered over the coming months, all of
which
reflect a companywide focus on increasing the security of millions of
users
and critical business systems worldwide. Specific actions will
include
these: 

    -- Improved patch management processes, policies and technologies
to
help
       customers stay up to date and secure
    -- Global education programs to provide better guidance and tools
for
       securing systems
    -- Updates to Microsoft(R) Windows(R) XP and Windows Server(TM)
2003
with
       new safety technologies that will make Windows more resistant
to
attack
       even if patches do not yet exist or have not been installed

...

-----BEGIN PGP SIGNATURE-----
Version: PGP 7.0.4

iQEVAwUBP4WgTSU/oB/I/wyZAQFRlQf/Vx/gAYyHCU9MLDWSpNJaXVB8xuNmmDWf
v3DGOFJRlb1HsytG7InjSymTrK4IdbtC9cA7ooBcwQpnMPJ1zQewS6DQ/gU6pIaD
UJRH0zGQ45stuiy0VizONkuwhn3Yuow3Oauh+zQyJ2j6b3gW+XYymwee81DgGVH6
QgqGtlaiy6jKFYptkqzAIddzHMuVfxVEFkenGACESmTWkTQdVpnaEU4MDJP+i8gX
8eHBe1icktDFqB0ONjZs/qByRHyQ8xSgiNOwwsSBqN16/ZrLUJ7hdddnVR0Y0fsx
gv0xbyCKQLWPLh2bqlG3kWUzz46RYmsBeHXKd5Dcf5BIf9zLqVeV3Q==
=9/v9
-----END PGP SIGNATURE-----

The information contained in this E-mail message and the documents accompanying this message are
privileged and confidential, and may be protected from disclosure.  Please be aware that any use, 
printing, copying, disclosure or dissemination of this communication may be subject to legal
restriction or sanction. If you think that you have received this E-mail message in error, please
reply to the sender.

For more information about Valmont Industries, Inc., please visit our web site at www.valmont.com