main

Gates: We'll Make Security Our Forte

malebolgia   on 13 August 2004 - 19:04 · 36 comments & 2899 views

Advertisement (Why?)
Microsoft’s chief software architect, Bill Gates, plans on turning Microsoft’s security problems around, making them into a valuable asset. Already, Microsoft has made some great progress by releasing new security features present in SP2 for Windows XP, and by releasing guides to help administrators - e.g. setup a defense against viruses. Still Bill Gates knows more has to be done, a fact no one will disagree with.

There's no doubt that security is a major concern with Microsoft, especially after Computer Emergency Readiness Team (CERT) recommended that user's of Microsoft’s Internet Explorer browser consider switching browsers. Bill Gates says that Microsoft is committed to helping companies reduce network costs, and to reduce the complexity involved with securing Windows PCs. In order to do this, Microsoft has to continue to improve the security of it's products, and not freeze the effort like analyst believed it would after SP2 was released.

By now, everyone has their opinion about the security features in SP2. Some analyst believes that more could have been done; a viewpoint easy to say but hard to back up. Security may soon become Microsoft’s newest strength, but it will take a lot of hard work from Microsoft. They need to not only add new security measures to its products, but to also educate its customers.

News source: View More Information


The event will climax on Thursday, 23rd September, when Sony's guests and competitions winners will be given VIP access to the Alton Towers Park, including priority access to rides and exclusive access to gaming areas.

They will also be able to enjoy musical performances from various artists - including breakthrough urban acts, established chart artists and upcoming rock bands - as they zoom over sets installed in amidst the park's various spiralling attractions.

Sony is also planning a multi-artist finale within the Alton Towers' castle walls, to be followed by an after-show party in the Stateroom adjacent to the Alton Towers Hotel, with overnight accommodation and a chance for guests and competition winners to mingle with the artists.

The finale performance will also form the basis for a 90-minute televised trip around the PlayStation-tinted Alton Towers, something that Alton Towers' marketing manager Mike Lorimer believes will prove very popular.

"We are very excited to be hosting this event. Not only will it showcase our fantastic rides and attractions to a key audience on TV, but it will also allow every one of our guests access to some fabulous added experiences in the Sony PlayStation areas," he said.

SCE UK's marketing director Alan Duncan, meanwhile, said the new look of the event is important to the development of the PlayStation brand.

"The PlayStation Experience at Alton Towers reflects both our commitment to the evolution of sampling events and to creating original broadcast content which communicates the values of PlayStation to new and existing audiences," he said on Friday.


Post a comment · Send to friend Comments · There are 36 additional comments
(1 reply) #1 necrosis on 13 Aug 2004 - 19:17
I think they also need to update IE that hasent had anything done to it in years.
#1.1 todd` on 13 Aug 2004 - 19:18
It's had a lot done to it security wise with the release of SP2
#2 todd` on 13 Aug 2004 - 19:19
They did well with SP2.. a lot of things were patched up, but a lot of compatibility issues arrised..
(2 replies) #3 thenay on 13 Aug 2004 - 19:32
Sp2 is gr8, I've had no issues yet with it
#3.1 boo_star on 14 Aug 2004 - 04:46
Had my first BSOD yesterday that I've ever had with XP.

I believe it's a problem with my firewall though so I'll forgive it for that.

Was an IRQ_NOT_LESS_OR_EQUAL error if anyone cares
#3.2 Fredde87 on 16 Aug 2004 - 19:16
no thats a hardware issue you got... Incorrect drivers or something....
#4 SVT on 13 Aug 2004 - 19:48
Then what will I do with my "My other computer is your Windows box" t-shirts?

SVT
(4 replies) #5 bangbang023 on 13 Aug 2004 - 20:27
QUOTE
They need to not only add new security measures to its products, but to also educate its customers.

Educating the customers is going to be the hardest task of all, sadly enough.
#5.1 chacho on 13 Aug 2004 - 20:46
exactly, there are too many n00bs out there. although, i have no problem with n00bs. its n00bs that dont even attempt to educate themselves that piss me off.
#5.2 mikill on 13 Aug 2004 - 20:51
it might not be that hard if the customers put forth effort to educate themselves, kinda like meeting halfway maybe. there are a severe amount of un-educated pc users than used to be, due to more consumer buying of pc's.
#5.3 boo_star on 14 Aug 2004 - 04:51
That's basically the reason why MS are adding security features such as the Windows Firewall and the soon to be released AV package.

Most users will not or cannot be bothered to educate themselves, so MS has to remove the risk via programming.

I cringe every time my brother uses my PC. The guy is 29, but still manages to get a crapload of spyware/viruses attempting (only attempting thank the Lord and my AV program) to install themselves if he gets a few hours on my PC.

I've tried many times to educate him myself but it just does not work.
#5.4 Wolfsglen on 14 Aug 2004 - 15:08
Kind of a Catch-22 though, MS and Apple other companies purposely dumbed down Windows and MacOS and other software to appeal to the mass market (hell even linux is getting the same with KDE), now that same mass market is biting them on the ass with problems like this due to having comps but little knowledge about them.

Not that i believe that computer should be expensive or complicated to prohibit the regular user, that is just elitism, but it seems they made the jump too quickly without people having to learn.
(6 replies) #6 dellard14 on 13 Aug 2004 - 20:32
security to be microsoft's forte? i'll believe it when i see it.
#6.1 Jason on 13 Aug 2004 - 20:35
Start looking at 2003 Server and XP SP2 then.
#6.2 dellard14 on 13 Aug 2004 - 22:04
it's better, but it definately ain't their forte.
#6.3 MoRiA on 14 Aug 2004 - 00:24
Security might not yet be MS' forte but usability definatly is. I'm sticking with Windows at least until some Linux distro will actually WORK for me. I prefer to, funnily enough, use my computer, rather than wrestling with it to do the most menial tasks...
#6.4 Dr.Jones on 14 Aug 2004 - 02:31
Hehe, I mostly agree. But this kind of speech might get you shot in the face by some monkey linux fan boy
#6.5 mram on 14 Aug 2004 - 02:46
What would you believe? Honestly, seriously?

Linux advocates will see exploits, blind to the concepts of intelligent administration. They'll say "that last windows vulnerability took out 10,000 machines and stopped someones pacemaker", and cite that this is the end of Microsoft as we know it.

Microsoft advocates will compare number of vulnerabilities from one platform to another and illustrate stability in the codebase as well as resilience through the number of people using it and attempting to exploit. (IE-if Linux were the top dog, it'd have just as many exploits)

What difference does it make? Microsoft is making the statement that security is THE priority going forward. What other company does that? Hell, linux has the unwritten priority of "we just want to take over Microsoft's space." It doesn't even have a security mandate, you have to have a corporate license to do that (and thusly, I risk the wrath of all the OSS/Free/Linux zealots of this board by stating that in order for Linux to truly be secure one must pay more for the product than Microsoft, in a corporate environment)

The key differences between the examples above is simple: The products are both secure, and an idiot administrator can make either exploitable. With XP-SP2, you really have no excuses for exploitation, even without AV (AV would be the redundancy) if you just read the prompts on the screen and followed them. With Linux, it might be just as easy, but hey.

And again, we'd have people going round and round about "but windows has more actual exploits, omg if I run it i'll be haxored"... Baloney. Be a smart administrator.

My underlying point: If you don't see that Microsoft has made a stand (based upon the TCI announcement and subsequent actual action as a result: XP-SP2 and Win2003) and is still committed to improving on that commitment, then you'll never believe. Microsoft's track record: We goofed up on security, we're going to do better (TCI 2002) -- We're working on doing better, here's our new Server (2003) -- We're committed to security still, here's our client update (2004). 2005 and beyond will be R2 of 2003 which will make an already exemplary enterprise level OS even more secure, for even more stupid administrators.
#6.6 boo_star on 14 Aug 2004 - 05:02
QUOTE
and thusly, I risk the wrath of all the OSS/Free/Linux zealots of this board by stating that in order for Linux to truly be secure one must pay more for the product than Microsoft, in a corporate environment


Of course. If a company truly wishes to be secure then they have ti hire competent staff.

Sadly in a lot of companies security and competancy takes a back seat to usablilty and cost.

No problem with usability, MS wins hands down and rightly so (sorry guys but judging by what I've seen of the "average" user, they can barely open Word, let alone figure out *ni but to scrimp on cost with a loss of security, it just baffles the mind. We're talking £20-25k for an MCSE vs £30-35 for an MCSE/Linux Admin. One hour of downtime due to a virus or server problem probably costs the company twice the wage difference.

Example (not related to computers but relevant to the costs of downtime);

Fire in an underground tunnel in Manchester a few months back, loads of phone cables burnt, almost a complete telecommunications blackout in Manchester for a few days. There were companies there losing £100000's to £1000000's a DAY because of it.
#7 amdme3200 on 13 Aug 2004 - 22:16
I think Microsoft is doing a much better job with the releas of sp2 thats just the start of something great and better thing's to happen. Also educating customers I think is a great idea but it will be very hard to do.

(5 replies) #8 markjensen on 14 Aug 2004 - 00:21
They certainly aren't encouraging sharing the SP on P2P networks...
http://news.bbc.co.uk/1/hi/technology/3561430.stm

You have to get this through Windows Update, or order and wait for the CD. Will they also forbid sharing the CD with friends???
#8.1 MoRiA on 14 Aug 2004 - 00:27
While MS want to get the SP out to as many people as possible I think that they simply don't trust P2P networks enough. It would be easy enough for someone to insert a nice little virus into the SP and then suddenly everyone will be complaining about how MS let a virus into the SP itself... We might be able to check the MD5 hash against a known "valid" one, but most home users won't..
#8.2 Andareed on 14 Aug 2004 - 02:50
You can check the digital signature of the file itself. Anyone smart enough to download off of p2p should know how to check a digital signature.
#8.3 MoRiA on 14 Aug 2004 - 03:38
I disagree. I could tell my mum to "Go download WinXP SP2 off kazaa" and she would, no problem. However if I then said "Now check that it has a valid digital signature" she would have no idea where to start and I'd have to do it for her. The same goes for at least half of my MSN contact list...
#8.4 noyb on 14 Aug 2004 - 04:37
Kazza and the rest of that scourge would obviously be bad ways to distribute SP2 and would only be an invite for virus's. Bittorrent on the other hand would be a very good way for MS to distribute SP2 as it would require far less server usage than WU or other web download and a damn site cheaper than CD distribution. Im not saying that this should be the only way to get it, because that would be lame, but by adding a BT option as long as you get the .torrent file from MS site, they will be able to get it out with alot less effort and cost.
#8.5 boo_star on 14 Aug 2004 - 05:08
QUOTE
You can check the digital signature of the file itself. Anyone smart enough to download off of p2p should know how to check a digital signature.


I doubt most P2P users would be smart enough to do that sadly.

Hell, MS have even barred UK PC Mags from putting SP's on coverdisks (not sure about other countries)

But since they're giving away free disks (free from P&P/S&H) it's forgivable.
#9 Inspire on 14 Aug 2004 - 02:17
Good move Microsoft...
(1 reply) #10 Wiseman on 14 Aug 2004 - 04:31
i'm still waiting Windows Server 2003 Service Packs 1
#10.1 Jason on 14 Aug 2004 - 11:03
Kep waiting then as they have said its due next year.
(1 reply) #11 boo_star on 14 Aug 2004 - 04:43
QUOTE
plans on turning Microsoft’s security problems around, making them into a valuable asset


Sorry, had to comment on that. It's just bad english but making security issues an asset LOL

"New and improved Windows XP with added security vulnerabilities!"

Perhaps it should have read;

QUOTE
plans on turning Microsoft’s security problems around, making increased security a valuable asset
#11.1 STV on 14 Aug 2004 - 06:48
i think at means that they are going to use these "exisiting problems" as a way to show that they are not sitting on their collective asses. which is good for them and the user.

good for them because their transformation is actually taking place.

good for the user because the security holes are patched.

STV
(2 replies) #12 Starcom826 on 14 Aug 2004 - 08:44
Hahahahahhahahahhaha, omg i needed a good laugh.
#12.1 Jason on 14 Aug 2004 - 11:04
So did I from reading your comment
#12.2 OptiPlex on 14 Aug 2004 - 15:19
?????? wtf
(1 reply) #13 Jugalator on 15 Aug 2004 - 00:21
"Gates: We'll Make Security Our Forte"

Good good, now get to work and make a good firewall or something to show you're serious about it.

The SP2 firewall isn't too hot compared to, say, ZoneAlarm or Kerio.

I'm not asking for a ton of features, but is blocking outgoing connections too much to ask for.
#13.1 reddsoda on 15 Aug 2004 - 05:32
I don't think they want to invade the space of Zone Alarm or Kerio or others. SP2 firewall is good enough security for most everyone at this time.

but is blocking outgoing connections too much to ask for.

Actually outbound blocking would be a nightmare. There are dozens of coworkers in my IT dept that have trouble with filtering outbound connections. Most users aren't smart enough to know if app A needs to talk to this IP address. They get frustrated after a while when they get continual pop ups and eventually allow all outbound or remove the firewall completely. It would just be a nightmare for support to have both inbound and outbound blocked right now. Maybe in Longhorn. If you need outbound, then get the above mentioned products.

Commenting has either been disabled on this article or you are not logged in. Click here to login or register, its free!

Note: Anonymous commenting is disabled in order to keep the quality of responses to a high standard.

Advertisement (Why?)