[Am-info] M$ and the security suit
Jeff Wasel
jeff@wasel.com
Mon, 6 Oct 2003 19:07:45 +0100
Hi All,
I'm surprised I haven't seen any comments on the suit that's been filed
against M$ in California. Apparently a woman who was the victim of identity
theft on the net is suing M$ over their shifty software, and is applying for
class action. The case premise is that the security flaws inherent in M$
products allowed thieves to lift her data.
We've argued in several papers here at the LSE in favour of litigation
against M$ for this very reason. This might finally be the back door attack
needed to curb not only their monopolistic practices, but to shred the
"protections" of UCITA, in regards to the lack of liability and fiduciary
responsibility placed on software vendors.
I'm cautiously optimistic. It may not get class status, as everyone is
effected differently by
poor security, but it could finally be a challenge to all vendors that they
are responsible for the actions and effects of their products upon
individuals, companies and markets. On that same note, there's an
interesting 25 page document at
http://www.ccianet.org/papers/cyberinsecurity.pdf that lays out a convincing
case that M$' software is a threat to national security. Granted it's
written by folks who comprise the consortia funded by Oracle, Sun and others
to hound M$, but it is still tightly reasoned and well-written.
Anyway, what say you all?
Hope everyone's doing well-
Jeff
Jeff Wasel
Doctoral Candidate
The London School of Economics
Department of Information Systems
Tower One, Fifth Floor
Houghton St.
London
WC2A
j.j.wasel@lse.ac.uk
07764-944781