[Am-info] ZDNet UK: Microsoft: Users may have to pay for security

Roy Bixler rcb@bix.org
Wed, 9 Oct 2002 14:36:56 -0500


This story is from the RSA security conference in Paris which I found
interesting for a couple of reasons.  One was this section describing
an exchange with Microsoft CTO Craig Mundie:

    Asked why it has taken Microsoft 25 years to get trustworthy
    computing into the forefront of its efforts, he said: "Because
    customers wouldn't pay for it until recently." Admitting this was
    a flippant answer to a flippant question, Mundie said that chief
    information officers had only recently begun to demand security,
    and it is only in the last ten years that Microsoft has attempted
    to play in the security-requiring worlds of banking payroll and
    networked systems.

It's stunning that he thinks that there was no significant demand
for security until recently.  In what cave has he been living?

It was also nice to get confirmation that, contrary to insinuations
made when spreading FUD about open source software, Microsoft will not
take legal liability for security flaws in its software.

The full story is here:

http://news.zdnet.co.uk/story/0,,t269-s2123526,00.html