full-disclosure - Microsoft Outlines Security Plan (Balmer Blows Hard)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <20031011134650.GA9941@wolff.to>
From: bruno at wolff.to (Bruno Wolff III)
Subject: Microsoft Outlines Security Plan (Balmer Blows Hard)

On Fri, Oct 10, 2003 at 13:48:01 -0700,
  Jeremiah Cornelius <jeremiah@....net> wrote:
> 
> Computer security "is without question the number one priority for the 
> company," Mike Nash, vice president of Microsoft's security business unit, 
> said in a phone interview after Ballmer's speech. He added that employees 
> from across the company had been pulled to work on security efforts. 

Making money is their number one priority. Security is only important in
how it helps them make money.

I asked one of their security people at a security conference if they
had any plans to make software like Outlook, Word and Excel safer for
end users to use by removing dangerous features (in particular ones that
made the difference between code and data hard for end users to determine)
and was told that they won't be doing that because end users like features
and features sell new copies of the software.