Bill Gates gave a keynote on their current approach to security, and the contents of SP2, due out 1H 2004. From what I heard, Bill "gets it." He addressed about 4 of my top 6 complaints and remediations. Quite a change from the rhetoric of five years ago. But it is an Augean stable, and they have a long way to go.
Of course, the devil is in the details, and we will have to see. On Wed, Feb 25, 2004 at 02:38:32PM -0500, Kenneth R. van Wyk wrote: > Greetings, > > It's been a rather quiet week so far here on SC-L. I guess that everyone > is either at the RSA conference (http://2004.rsaconference.com/) or > otherwise too busy. I've been watching some of the reports that have been > appearing in the trade press regarding announcements and such at the RSA > conference > (http://news.com.com/2009-7355_3-5163628.html?part=rss&tag=feed&subj). > Most of the announcements seem to me to focus on new and upcoming products. > While that's all well and good, I don't see anyone addressing issues of > software security -- which probably shouldn't come as much of a surprise > since software security is not even addressed in the conference > theme/agenda (http://2004.rsaconference.com/agenda.aspx). Disappointing... > > Perhaps some kind SC-L subscriber that's at the conference will pass along > any "software security sightings"? ;-) > > Cheers, > > Ken van Wyk > -- > KRvW Associates, LLC > http://www.KRvW.com