Re: [SC-L] ZDNet: Microsoft to hunt for new species of Windows bug

2006-01-10 Thread Gadi Evron
Steven M. Bellovin wrote: I like this line: This kind of threat has not been anticipated before, from Microsoft. Mobile code hasn't been anticipated? C'mon! I think they meant 'features that allow you to execute code have not been seen as a security issue before. We have no idea where and

Re: [SC-L] ZDNet: Microsoft to hunt for new species of Windows bug

2006-01-09 Thread Steven M. Bellovin
In message [EMAIL PROTECTED], Kenneth R. v an Wyk writes: Following the recent Microsoft WMF flaw, there's an article in ZDNet talking a bout how Microsoft is now going to scour its code to look for flaws similar to a recen t serious Windows bug and to update its development practices to prevent