[linux-sec-uk] Microsoft wishes to post to this list

[Alex Hudson]

On Fri, 2003-12-19 at 10:24, James Davis wrote:
> a) Wrong list, thankyou. 

This gets my ++ ;)

> The important thing is that I reply to him with some answer that
> reflects the opinions of the mailing list. What do you think?

I think there are a number of tasks Microsoft could set themselves to
improve the security of their systems, and I suggest Microsoft focus on
these areas:

- implementing Zeroconf/rendezvous in a manner that doesn't bounce
people off IPs they are defending. [interop with other systems]

- publish the full, modern, specification of SMB, CIFS and their
Kerberos extensions so that other operating systems have a chance of a)
stateful/intelligent firewalling systems and b) allowing Windows to
interoperate in native GNU/Linux networks taking full advantage of
Kerberos

I could probably think of a few more given time.

Cheers,

Alex.