Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Not one Microsoft product on Kaspersky’s top 10 vulnerabilities list

thenextweb.com

Post reply on HN
Print view View original

51–60 of 137 posts

Re: Not one Microsoft product on Kaspersky’s top 10 vulnerabilities list

#51

Post by Locke1689 »

tptacek wrote: post #42
jcheng wrote: post #31

Earlier quoted context omitted.

That's not really how secure coding works at Microsoft though. There aren't more eyes on the code, just more developer training and more processes in place. (At least that was my experience working there from 2006 to 2009.)

There are more eyes on the code too, though: virtually everything Microsoft ships gets a 3rd party review.

We also have mandatory security training for all developers. Turning every developer into a security reviewer helps a lot.

It's nothing compared to the knowledge I got by working in app sec or teaching network security, but it's pretty good for increasing the base of knowledge among general developers.

Re: Not one Microsoft product on Kaspersky’s top 10 vulnerabilities list

#52

Post by dllthomas »

tptacek wrote: post #42
jcheng wrote: post #31

Earlier quoted context omitted.

That's not really how secure coding works at Microsoft though. There aren't more eyes on the code, just more developer training and more processes in place. (At least that was my experience working there from 2006 to 2009.)

There are more eyes on the code too, though: virtually everything Microsoft ships gets a 3rd party review.

... that still isn't "many eyes" on any particular piece of code, in the sense of the saying, though.

Re: Not one Microsoft product on Kaspersky’s top 10 vulnerabilities list

#53

Post by Corrado »

bprater wrote: post #18

Is it getting safer to say that antivirus software may soon be a thing of the past?

My question is, would you run Windows 7/8 without any anti-virus software at all? Do you feel that comfortable? After years of Linux/OS X I can safely say that I won't use an OS that requires anti-virus ever again.

Re: Not one Microsoft product on Kaspersky’s top 10 vulnerabilities list

#54

Post by ecounysis »

encoderer wrote: post #38
ecounysis wrote: post #22

Glancing at the list, I see there are only four companies in the world who cannot claim they don't have a single product on Kapersky's top 10 vulnerabilities list.

But the fact that the largest software company in the world is among them is what's notable.

Yes. I wonder what percentage of vulnerabilities 11-20 belong to Microsoft?

Re: Not one Microsoft product on Kaspersky’s top 10 vulnerabilities list

#55

Post by budgi3 »

Someone wrote: post #36

Reading http://www.securelist.com/en/analysis/204792250/IT_Threat_Ev... , I find it surprising that the Netherlands manages to be the best malware exporter in the world (third in 'production', close behind Russia and the USA (both with a much larger population), but also in the top 10 for 'least consumption', a list that neither Russia nor the USA made). Does anybody have any idea how that comes about? The only reaso…

Amsterdam is a criminal epicenter

Re: Not one Microsoft product on Kaspersky’s top 10 vulnerabilities list

#57

Post by romland »

And to think that a free (as in it didn't cost me a cent unless I want to pay for it) piece of software protected me from most of this. The phenomenon known as NoScript is quite marvelous in doing its job without eating much of my CPU cycles :-)

Of course, when you get down to the bottom line you know it's not a huge technical feat, but really, neither is anti-virus software. It's a matter of foresight and hard work. Donate today :)

(Disclaimer, I am in no way connected with NoScript other than being a happy user)

Edit: After posting this I realize it comes across as a bit of advertising and not contributing much to the conversation, I was about to delete it, but I stopped myself and wanted to add: I am -truly- happy not having to (even though I do) worry about what links I can click.

Re: Not one Microsoft product on Kaspersky’s top 10 vulnerabilities list

#59

Post by BryanStarbuck »

sriramk wrote: post #5

This is the result of nearly a decade of work from MSFT, across the board. They built better tools, drilled security into every new hire all the way to the execs, made it a part of every engineering and product process imaginable. Happy that is finally being acknowledged on the outside.

I agree with this comment from my time working there. Microsoft engineered their way to this level of success.

Re: Not one Microsoft product on Kaspersky’s top 10 vulnerabilities list

#60

Post by drivebyacct2 »

xer0x wrote: post #58
drivebyacct2 wrote: post #13

Beat by Oracle and Adobe. Something to truly be proud of. Aw, no one else finds this to be a strange brag? Should we make a list of all of the companies that aren't up there?

I agree, this is a really weird post.

Careful, that's a suicidal comment.
Post reply on HN