[Full-Disclosure] Microsoft plans tighter security measures in Windows XP SP2

[Valdis.Kletnieks at vt.edu]

On Sat, 01 Nov 2003 18:08:05 +0200, Georgi Guninski said:

> The probable cost of buying Guninsky does not exist.
> m$ are lusers, and I am not a wh0re.

I know.  My point was that they would have been stupid if they had not
at least *considered* the idea.  Let's say the goal is to be able to claim that
they've done a good job, and known vulnerabilities found per month is down
80%.  Then we have:

1) Actually fix the software. Total rewrite, $200M.
2) Bribe all the major reporters of bugs. $20M.

Which of these sounds like a better deal for Microsoft? ;)


-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 226 bytes
Desc: not available
Url : http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20031101/aa985d32/attachment.bin