full-disclosure - M$ - so what should they do?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

From: mvp at joeware.net (joe)
Subject: M$ - so what should they do? 

Oh absolutely. I've said it before, they aren't coding for the common good
of the people. They are a business, to think they would make changes for any
other reason than financial gain is silly. However, without changes and
improvement, they won't continue to grow and sell so they need to make
changes. 

If I owned a large software business I wouldn't just make changes because
philosophically they made me happy or someone else happy but wouldn't help
the bottom line of the company at all. I don't think most honest speaking
folks would say the same. 

Knowing the specifics of what people think need to be improved could help
someone in the company who has been fighting for that exact improvement.
Most times when I have spoken with MS Dev guys or QFE guys, they think the
same thing I do or many others do, however they don't have enough customer
comments to back them to get management to sign off on the change.
Additionally giving ideas on HOW something should be improved tends to go a
longer way than simply saying something sucks and needs to be improved. 

Finally, the number of requests they get for changes probably balances out
to 25-30% actually being able to be kept as the others all cancel each other
out in being equal and opposite requests. I see that on a small scale with
just the few tools I write and I maybe get only 100-200 emails a week with
requests.

 joe

-----Original Message-----
From: full-disclosure-admin@...ts.netsys.com
[mailto:full-disclosure-admin@...ts.netsys.com] On Behalf Of
Valdis.Kletnieks@...edu
Sent: Monday, June 21, 2004 4:00 PM
To: full-disclosure@...ts.netsys.com
Cc: Georgi Guninski
Subject: Re: [Full-Disclosure] M$ - so what should they do? 

On Mon, 21 Jun 2004 09:52:09 EDT, Michael Schaefer said:
> What would you suggest Microsoft do to improve ?

They will improve if and only if actually improving (as opposed to making
noises about improving) makes financial sense.