{"id":1524,"date":"2001-12-17T13:59:27","date_gmt":"2001-12-17T18:59:27","guid":{"rendered":"http:\/\/hill-kleerup.org\/blog\/wp\/?p=1524"},"modified":"2001-12-17T13:59:27","modified_gmt":"2001-12-17T18:59:27","slug":"security_of_a_d","status":"publish","type":"post","link":"https:\/\/hill-kleerup.org\/blog\/2001\/12\/17\/security_of_a_d.html","title":{"rendered":"Security of a Different Color"},"content":{"rendered":"

More analytical hi-jinx from the Register<\/i>, looking at how Micro$oft’s security modus operandi<\/a> sucks chunks:<\/p>\n

Bear in mind that most, if not all, of this virtual mayhem was not the work of elite computer criminals. It was committed by bored teenagers who cobbled together attack scripts that continue to be traded around the Internet like baseball cards. And regardless of the misery they have caused and continue to cause, and despite the profane amounts of money they’ve cost their victims, Microsoft’s spin has always been the same — a sort of smile and dissimulate medley that exonerates Microsoft, blames ‘hackers,’ and promises a brighter tomorrow. <\/p>\n

The author does a good job showing how M$’s intransigence at addressing security problems, both basic and specific, has forced security researchers further and further into full disclosure of security holes — which M$ then terms “information anarchy” and blames for the security problems in the first place.<\/p>\n

It’s as if you called the police to report a burglary, and they told you they’d step up patrols in that area (though they’d be plainclothes cops, so you won’t be able to confirm it), but they wouldn’t actually have anyone visit your house, because that would let other burglars know that someone was able to get into your house, and how.<\/p>\n

Does that strike anyone else as goofy? If not arrogant or criminal?<\/p>\n","protected":false},"excerpt":{"rendered":"

More analytical hi-jinx from the Register, looking at how Micro$oft’s security modus operandi sucks chunks: Bear in mind that most, if not all, of this virtual mayhem was not the…<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_seopress_titles_title":"","_seopress_titles_desc":"","_seopress_robots_index":"","_seopress_robots_follow":"","_seopress_robots_imageindex":"","_seopress_robots_snippet":"","_seopress_robots_primary_cat":"","_seopress_robots_breadcrumbs":"","_seopress_robots_freeze_modified_date":"","_seopress_robots_custom_modified_date":"","_seopress_robots_canonical":"","_seopress_social_fb_title":"","_seopress_social_fb_desc":"","_seopress_social_fb_img":"","_seopress_social_fb_img_attachment_id":0,"_seopress_social_fb_img_width":0,"_seopress_social_fb_img_height":0,"_seopress_social_twitter_title":"","_seopress_social_twitter_desc":"","_seopress_social_twitter_img":"","_seopress_social_twitter_img_attachment_id":0,"_seopress_social_twitter_img_width":0,"_seopress_social_twitter_img_height":0,"_seopress_redirections_value":"","_seopress_redirections_enabled":"","_seopress_redirections_enabled_regex":"","_seopress_redirections_logged_status":"","_seopress_redirections_param":"","_seopress_redirections_type":0,"_seopress_analysis_target_kw":"","_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[20],"tags":[],"class_list":["post-1524","post","type-post","status-publish","format-standard","hentry","category-hi-tech"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"jetpack-related-posts":[{"id":2692,"url":"https:\/\/hill-kleerup.org\/blog\/2002\/05\/16\/punish_microoft.html","url_meta":{"origin":1524,"position":0},"title":"Punish Micro$oft … and the Terrorists Win!","author":"***Dave","date":"Thu 16-May-02 12:18pm","format":false,"excerpt":"Simply amazing. Jim Allchin, the GVP for Platforms at M$, testified that forcing M$ to share informations with competitors could seriously compromise national security, including the war effort in Afghanistan....","rel":"","context":"In "Hi-Tech"","block_context":{"text":"Hi-Tech","link":"https:\/\/hill-kleerup.org\/blog\/category\/hi-tech"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":2981,"url":"https:\/\/hill-kleerup.org\/blog\/2002\/08\/27\/welcome_to_keys.html","url_meta":{"origin":1524,"position":1},"title":"Welcome to Keystone, Kops","author":"***Dave","date":"Tue 27-Aug-02 7:11am","format":false,"excerpt":"Denver airport security suffered another meltdown yesterday. A woman had been pulled aside after the initial screening and was queued up in the little plexiglass holding line for further wanding...","rel":"","context":"In "Politics & Law"","block_context":{"text":"Politics & Law","link":"https:\/\/hill-kleerup.org\/blog\/category\/politics-law"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":1501,"url":"https:\/\/hill-kleerup.org\/blog\/2001\/12\/23\/why_look_more_n.html","url_meta":{"origin":1524,"position":2},"title":"Why, look, more news on crappy Micro$oft security!","author":"***Dave","date":"Sun 23-Dec-01 5:36pm","format":false,"excerpt":"Dudes, when the frickin' FBI starts ragging on you about your security, yes, you probably have problems. Remember, folks: this is the company whose security strategy consists of swearing to...","rel":"","context":"In "Hi-Tech"","block_context":{"text":"Hi-Tech","link":"https:\/\/hill-kleerup.org\/blog\/category\/hi-tech"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":11805,"url":"https:\/\/hill-kleerup.org\/blog\/2008\/01\/30\/there_are_indeed_stupid_q.html","url_meta":{"origin":1524,"position":3},"title":"There are, indeed, stupid questions","author":"***Dave","date":"Wed 30-Jan-08 10:17am","format":false,"excerpt":"Especially when it comes to those \"security verification\" questions on e-commerce and banking websites. While the concept of security questions is easy to grasp, the questions themselves are deeply weird...","rel":"","context":"In "Hi-Tech"","block_context":{"text":"Hi-Tech","link":"https:\/\/hill-kleerup.org\/blog\/category\/hi-tech"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":9858,"url":"https:\/\/hill-kleerup.org\/blog\/2006\/10\/19\/well_that_didnt_take_long.html","url_meta":{"origin":1524,"position":4},"title":"Well, that didn’t take long","author":"***Dave","date":"Thu 19-Oct-06 9:18am","format":false,"excerpt":"Yesterday: Internet Explorer 7 was released to the public. Today: The first security flaw is reported. Woot!...","rel":"","context":"In "Hi-Tech"","block_context":{"text":"Hi-Tech","link":"https:\/\/hill-kleerup.org\/blog\/category\/hi-tech"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":5858,"url":"https:\/\/hill-kleerup.org\/blog\/2004\/07\/09\/security_is_a_c.html","url_meta":{"origin":1524,"position":5},"title":"Security is a “competitive advantage”","author":"***Dave","date":"Fri 9-Jul-04 9:44am","format":false,"excerpt":"Micro$oft is selling security as a \"competitive advantage\" that it has over the industry. Attendees at last year's event, in New Orleans, cheered when Microsoft Chief Executive Officer (CEO) Steve...","rel":"","context":"In "Hi-Tech"","block_context":{"text":"Hi-Tech","link":"https:\/\/hill-kleerup.org\/blog\/category\/hi-tech"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]}],"_links":{"self":[{"href":"https:\/\/hill-kleerup.org\/blog\/wp-json\/wp\/v2\/posts\/1524","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/hill-kleerup.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/hill-kleerup.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/hill-kleerup.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/hill-kleerup.org\/blog\/wp-json\/wp\/v2\/comments?post=1524"}],"version-history":[{"count":0,"href":"https:\/\/hill-kleerup.org\/blog\/wp-json\/wp\/v2\/posts\/1524\/revisions"}],"wp:attachment":[{"href":"https:\/\/hill-kleerup.org\/blog\/wp-json\/wp\/v2\/media?parent=1524"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/hill-kleerup.org\/blog\/wp-json\/wp\/v2\/categories?post=1524"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/hill-kleerup.org\/blog\/wp-json\/wp\/v2\/tags?post=1524"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}