September 9th, 2002, 07:37 PM
Microsoft 'spins' again
DISCLAIMER: This is a rant that exposes my personal views on a certain subject. These views are not to be constued as fact, and you are free to form your own opinions by utilizing the links I have provided.
We all remember a couple of weeks ago when a flaw was discovered in IE concerning SSL certificates. Microsoft informed the public that the flaw was actually in windows telling us the severity of its nature and the risk it posed was negligible. Now we all know that M$, the honorable corporation that it is, would never LIE to its adoring public. Why then, was the following statement made?
Hmmmmm....is the TRUTH too much for we, the lowly consumers, to ask? I wonder how many people, during the period of time between the two statements, went ahead and made online transactions secure in the knowledge that all their credit card info was safe because M$ said it was. We have laws that protect us from faulty cars, infant seats and McDonalds 'Happy Meal' toys, but when it comes to software companies, we are simply screwed. No kiss, no roses, no dinner...just screwed and left laying prostate in the dust. Get ready folks...it's time that we took a stand and started harrassing our Representatives and Senators for the protection we deserve.
UPDATE Microsoft late Wednesday said that a flaw in its Windows operating system could allow hackers to gain unauthorized access to thousands of computers.
Microsoft issued a security alert, calling the flaw "critical." The flaw affects how more than a dozen Microsoft products, including programs for Windows and the Macintosh, handle digital certificates, which are used to certify the authenticity of a Web site or of software code.
The flaw could let a Web site with a valid certificate issue a second, invalid one, which could enable unauthorized access to a computer as well as, among other things, the theft of user passwords or credit card numbers.
"You're on my site and I say, 'Click here to go to Amazon.com.' But I don't really take you to Amazon.com. I can pretend to be Amazon.com and get you to enter in your credit card number," explained Gartner analyst John Pescatore.
View the original story concerning the flaw here.
Then get the latest spin here.
It isn't paranoia when you KNOW they're out to get you...
September 9th, 2002, 07:49 PM
This is just my opinion, but so much for "trustworthy computing" and Microsoft's pledge to close these holes before they become a problem. I am not anti-Microsoft by any means, but how do they expect the world to buy into Passport and .Net and allow them to store personal info in their repositories if they can't keep it secure.
I realize that *nix has issues, too, but I haven't seen where the *nix distributors are creating this huge network platform to integrate the world. With problems such as these I couldn't trust Microsoft to run my business.
Time is a created thing -- to say \"I don\'t have time\" is like saying \"I don\'t want to.\"
September 9th, 2002, 09:46 PM
You hit it on the head Allen for example an average patch by M$ costs a company about $3,000.00 US hour to apply (testing, deploying, try one patch on 50 PC's let alone a few hundred or thousand). I forget the number this year but if the OS was a car it would more or less be bought on the lot (PC MFG) delivered to your driveway (your PC) and you would be lucky to drive it down your own block before it broke down (get networked) when you hook it up and begin the endless process of PATCH..seems to me like an old tire innertube with lots of patches on it reminds me of 50's cartoons.
I believe that one of the characteristics of the human race - possibly the one that is primarily responsible for its course of evolution - is that it has grown by creatively responding to failure.- Glen Seaborg