Contributed by grey on from the they say Windows 2003 is "Secure by Default" too dept.
Microsoft security program manager is OpenBSD fan: http://www.computerworld.com.au/index.php/id;1563959173;fp;16;fpid;0
Actually, for those who have kept track, this shouldn't be too surprising as Microsoft has been known to borrow ideas and even code from OpenBSD in the past as mentioned previously on deadly here and here.
(Comments are closed)
By gabriel (200.221.124.40) on
Comments
By danimal (209.130.193.226) on
Comments
By dq (68.167.163.180) on
By Anonymous Coward (209.98.142.70) on
Comments
By krh (207.75.178.67) on
Comments
By Anonymous Coward (128.231.88.3) on
At his talk during a MS sec conference in DC last April, he used the argument that there are three factors in selecting a system to use; namely, ease-of-use, cost, and security. His example as it related to oBSD was (in paraphrase) 'if you want low cost and security, use Open BSD, but that isn't easy to use'; and, i would venture for the unfamiliar end-user, he's most certainly right. For some of us, that isn't quite so true. He did give oBSD air-time and gave it a moment of "securist thing out there" sort of talk (for a brief moment). His argument on ease-of-use seems to have fallen into two categories: too difficult to admin, and administrators will not secure it properly; too difficult for end-users, and they will look for some way around the security (in which case, perhaps it isn't really secured? This seems to be a flaw in the second branch of the argument).
He was by far the most lively and most interesting speaker at that conference that I saw and he had plenty of "war-stories". He is certainly worth seeing. As to the question of his dependability for 'pure' truth, unbiased towards his employer, of course not. Would you expect him to bite the hand that feeds him? He was not, however, spewing blatant advertising as has been accused. As could be expected of a professional, his advertising was present but rather subdued; he had the occaisional moment -- like that given to oBSD -- for awarding points to 'the competition'.