Microsoft hires hackers!

[William from NOLA]

Microsoft challenges experts to find flaws with new operating system

LAS VEGAS (AP) _ They've had security holes so big you could drive a virtual truck through them. So now, Microsoft is trying something different to make sure its next generation of Windows is really secure.

The company gave a test version of the Vista system to about three-thousand security professionals. Their mission: do everything possible to try to crack it.

Microsoft has long faced criticism over security problems that have caused customers to have disruptions and outages. But at a computer security conference in Las Vegas, company officials are trying to convince critics they've changed, and that there's really a new emphasis on security.

Hot off the AP wire

[joeyc]

hmmm, do you really think they will reveal ALL the holes they find?

[William from NOLA]

HA! Didn't think of that.

[Darthness]

i bet they'll find a ton of holes, but not tell microsoft.

thats what i'd do.

[two4fifteen]

unless theres a sort of contest on who can find the most, in which case i would tell them every one i find if it means microsoft awards me monetarily.

[Jonathan]

Perhaps they should study Linux and Mac to get some ideas. Windows doesn't have more viruses simply because it's widespread, it's because of the design.

Example: With windows, a file is either executable or not depending on the file extension. Get an email with "Check out this screensaver!", click on it, and you've just unleashed havoc on your computer.

A Linux user would have to read the email, save the attachment, give the attachment executable permissions, and then run the executable.

Add the fact that with Linux and Mac there is a strong separation between a normal user and the priviliged root user . Linux users are taught not to run as root, and Mac doesn't allow it unless the option is enabled first.

Microsoft? If you're the first to put your name in, you are the administrator (root) and have the power to do anything you want with the computer. And even if you aren't the admin you can still add dlls and other system files that have enough permission to damage the system.

There are lots of other things that make windows vulnerable.

[CaptainPioneer]

Its not the first time that Microsoft has done this nor is it the first company to do this... I know that Mac has done it and companies like McAffee and Citrix and Sun Micorsystems all use hackers to see if anything can or will be hacked. There is actually someone, I forget his nam but he was one of the worlds best hackers and he went to jail for it but now he runs a security company and has seminars all around the country in order to help safeguard a company and its users

[yowzatheman]

i need to show this to my friend. he would go crazy