Drag-and-drop flaw mars Microsoft's latest update

TalkBack 19 of 90:

Next »

« Previous

• Thread View
• Flat View

I don't let them off so easily...

There will always be a way to infect a system, just as there will always be a way to crash a car. I expect that a person "driving" the web take some modicum of responsibility for their actions so as not to damage the network. Likewise, I expect them not to drive the wrong way up the street in their car. Yet, I can only go so far in blaming the user of the computer or the car for making dangerous either the network or the road.

If a manufacturer of vehicles were to design and install brakes that fail, say: only under certain road conditions; I do not give the manufacturer a bye and say, "ah well, there always is a problem. If people avoid those conditions, the roads will remain safe." I opine, instead, "You know there's a problem and you treat it as a public relations difficulty? Fix the hanged cars first, re-engineer your product for safety, then worry about your reputation!"

Similarly,I expect Microsoft to not "move on" and to not "excuse themselves" by downplaying the criticality of any intrusive mechanism with inappropriate ratings criterion. Ease of exploitation should not factor into a determination of criticality. Criticality should be determined on a strictly technical basis - how much power will the outsider gain over the machine through the flaw? I expect Microsoft to first fix the problem and then rate it. Only then can Microsoft move on.

Just as one failure of the brakes can ruin a life; one failure of security can ruin a livlihood. Just as a driver to some extent places their life in the hands of a manufacturer, so to does a computer user place their livelihood in the hands of the OS manufacturer. The calculus is the same and the standard of responsibility should be nearly identical.

Moving on is deliberate ignorance and deliberate ignorance is not a defense. Only true ignorance should be.

Posted by: John Le'Brecage   Posted on: 08/21/04 You are currently: a Guest | Members login | Terms of Use

Alert moderator to an offensive message

Subscribe to this discussion via Email or RSS

SponsoredWhite Papers, Webcasts, and Downloads

• Three Steps You Need to Know to Stop Data Loss Varonis Sensitive data exposed to misuse or loss... it is the stuff of nightmares ... Download Now
• Building the Virtualized Enterprise with VMware Iinfrastructure VMware VMware virtualization software has been adopted by over 120,000 enterprise ... Download Now
• Five Steps to Determine When to Virtualize YourServers VMware Server virtualization isn't just for big companies. Entry-level ... Download Now