Re: Microsoft software "riddled with vulnerabilities", trade body claims

From: Roger Abell (mvpNOSpam_at_asu.edu)
Date: 08/31/03 

Date: Sun, 31 Aug 2003 00:25:28 -0700

>From the mission statement found on the website of the
Computer and Communications Industry Association
whose membership includes Sun, Oracle, and AOL
"CCIA's mission is to further our members' business interests"
http://www.ccianet.org/membership.php3 

-- 
Roger Abell
Microsoft MVP (Windows, Security)
MCSE (W2k3,W2k,Nt4)  MCDBA
"joe" <joe.84@juno.com> wrote in message
news:063b01c36f5a$9da82c90$a001280a@phx.gbl...
Microsoft software "riddled with vulnerabilities", trade
body claims
Dept of Homeland Security should avoid Microsoft
By INQUIRER staff: Thursday 28 August 2003, 16:02
THE US Computer and Communications Industry Association
(CCIA) has urged the US Department of Homeland Security
to avoid using Microsoft software.
The Washington based association, which represents
members that generate over $200 billion, has issued an
open letter to Tom Ridge, Secretary of the department,
urging him to review his decision to choose Microsoft for
its desktops and servers.
It claims that last week's events relating to the Blaster
and SoBig worms, have highlighted problems in
cybersecurity.
The letter, from Ed Black, the association's president,
said:"We believe that for software to be truly secure it
must be well written from the outset with security
considerations given a high priority".
It accuses Microsoft of being more interested in economic
marketing and competition than security and said the lack
of diversity within a network system "amplifies the risk
emanating from any vulnerabilities that do exist".
It continues: "Our preliminary findings indicate the
severity of the security problems relating to some
Microsoft software".
The Blaster worm, it said, crashed the Navy Marine
intranet*, the CSX railway system, Maryland's Dept of
Motor Vehicles, Air Canada systems, and most seriously
earlier this year a nuclear power plant was downed by
Slammer.
Microsoft, it claims, isn't guiltless, because it is
continuing to "create software riddled with obvious and
easily exploited vulnerabilities". µ
* A SMALL correction here. The worm caused an intrusion,
rather than a crash, on this particular network.
See Also
Homeland Security awards Dell, Microsoft $90 million
contract

Relevant Pages

  • [NT] Cumulative Security Update for Internet Explorer (MS04-025)
    ... Get your security news from a reliable source. ... * Microsoft Windows NT Workstation 4.0 Service Pack 6a ... Navigation Method Cross-Domain Vulnerability ...
    (Securiteam)
  • SecurityFocus Microsoft Newsletter #75
    ... Microsoft's Internet Security & Acceleration Server with fault-tolerance ... The Microsoft UPnP Vulnerability ... Relevant URL: ...
    (Focus-Microsoft)
  • SecurityFocus Microsoft Newsletter #120
    ... Strengthening Network Security: FREE Guide Network security is a ... MICROSOFT VULNERABILITY SUMMARY ... Microsoft Windows File Protection Signed File Replacement... ... PlatinumFTPServer Information Disclosure Vulnerability ...
    (Focus-Microsoft)
  • Re: A 6% fix from Microsoft Security Bulletin MS03-040 - 828750
    ... Now if the geeks over at Microsoft could get "infected" with some of this ... The Internet is already mind blowing in the way it can bring people ... that creates an unacceptable risk of security compromise and we need to shut ... down all Internet browsing with IE. ...
    (microsoft.public.security.virus)
  • Re: A 6% fix from Microsoft Security Bulletin MS03-040 - 828750
    ... Now if the geeks over at Microsoft could get "infected" with some of this ... The Internet is already mind blowing in the way it can bring people ... that creates an unacceptable risk of security compromise and we need to shut ... down all Internet browsing with IE. ...
    (microsoft.public.win2000.security)
Quantcast