Re: Security Research (Was: Scarfo keylogger, PGP )

2001-10-17 Thread David Jablon
About that MS security response initiative ... I think, if you view their security response team as a completely separate independent entity from the MS development team, you'll find that they're making a valiant attempt at doing an impossible job. Scott Culp is just trying to rally the

Re: Security Research (Was: Scarfo keylogger, PGP )

2001-10-17 Thread Carl Ellison
At 08:52 PM 10/16/2001 -0400, Steven M. Bellovin wrote: In message [EMAIL PROTECTED], Ben Laurie writes: Trei, Peter wrote: Windows XP at least checks for drivers not signed by MS, but whose security this promotes is an open question. Errr ... surely this promotes MS's bottom line and no-one's

Re: Security Research (Was: Scarfo keylogger, PGP )

2001-10-17 Thread pasward
David Jablon writes: Not until vendors are held legally accountable for negligent design. Maybe someday, somehow, there will be a class action law suit. (I saw a recent infosec conference flyer that had some silly quote about the annual cost of viruses or something being in the

Security Research (Was: Scarfo keylogger, PGP )

2001-10-16 Thread Steven M. Bellovin
In message [EMAIL PROTECTED], Ben Laurie writes: Trei, Peter wrote: Windows XP at least checks for drivers not signed by MS, but whose security this promotes is an open question. Errr ... surely this promotes MS's bottom line and no-one's security? It is also a major pain if you happen to want