Re: [SC-L] Any software security news from the RSA conference?

2004-03-02 Thread Mark D. Rockman
Mark Rockman, B.S., MCP - Original Message - From: "Alun Jones" <[EMAIL PROTECTED]> To: "'ljknews'" <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]> Sent: Friday, February 27, 2004 18:58 Subject: RE: [SC-L] Any software security news from the RSA

RE: [SC-L] Any software security news from the RSA conference?

2004-03-01 Thread ljknews
At 5:58 PM -0600 2/27/04, Alun Jones wrote: >Microsoft has a lot of code to contend with, and much of it is old - so a >lot of it has had to be scrubbed clean of imperfections, and some has had to >be re-written. A few years ago I heard the problem described as the opposite - that for Windows V.s

RE: [SC-L] Any software security news from the RSA conference?

2004-03-01 Thread Alun Jones
> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of ljknews > Sent: Friday, February 27, 2004 9:51 AM > > You must be thinking of a different Bill Gates than the one familiar > to me. I am thinking of the one who announced a few years ago that > Micros

Re: [SC-L] Any software security news from the RSA conference?

2004-02-27 Thread ljknews
At 2:08 PM -0500 2/26/04, Bill Cheswick wrote: >Bill Gates gave a keynote on their current approach to security, and >the contents of SP2, due out 1H 2004. From what I heard, Bill >"gets it." He addressed about 4 of my top 6 complaints and remediations. >Quite a change from the rhetoric of five y

Re: [SC-L] Any software security news from the RSA conference?

2004-02-27 Thread jnf
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 While I'm not there and not keeping up with it, I haven't really heard much about gates' keynote - im curious what exactly your top 6 complaints are? I think overall security wise with windows my top one is that its so over integrated and that it

RE: [SC-L] Any software security news from the RSA conference?

2004-02-27 Thread Dave Paris
ng the blathering of someone like this. Kind Regards (and in somewhat of a cranky mood), -dsp > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] > Behalf Of Mark Curphey > Sent: Thursday, February 26, 2004 7:33 PM > To: [EMAIL PROTECTED] > Subject:

Humor: Re: [SC-L] Any software security news from the RSA conference?

2004-02-27 Thread Dave Aronson
On Thu February 26 2004 19:32, Mark Curphey quoted: > According to Gordon, if developers could reduce the error and > vulnerability rate by a factor of 10, it would "probably eliminate > something like 90 percent of the current security threats and > vulnerabilities. This factoid brought to y

RE: [SC-L] Any software security news from the RSA conference?

2004-02-26 Thread Gary McGraw
I am here at RSA waving around the software security banner. This is my first time at RSA. We certainly talked about this at my panel with Ches, Avi Rubin, and Paul Kocher. Also, I am busy talking about Exploiting Software with the trade press, and that is going well. Software security is getti

Re: [SC-L] Any software security news from the RSA conference?

2004-02-26 Thread Mark Curphey
I thought this was interesting. I missed it but I am sure the message will please many on this list (myself included) Bill Cheswick <[EMAIL PROTECTED]> wrote: > Bill Gates gave a keynote on their current approach to security, and > the contents of SP2, due out 1H 2004. From what I heard, Bi

Re: [SC-L] Any software security news from the RSA conference?

2004-02-26 Thread Bill Cheswick
Bill Gates gave a keynote on their current approach to security, and the contents of SP2, due out 1H 2004. From what I heard, Bill "gets it." He addressed about 4 of my top 6 complaints and remediations. Quite a change from the rhetoric of five years ago. But it is an Augean stable, and they have

Re: [SC-L] Any software security news from the RSA conference?

2004-02-26 Thread Mark Curphey
Looks like the link I was pointing to didn't make it Here it is again http://news.zdnet.co.uk/internet/security/0,39020375,39147413,00.htm And the text below Software makers could eliminate most current security issues if they only tried harder, according to a Homeland Security advisor An a