Quote from the article:
It is very clear that either Microsoft does not have sufficient resources in place to properly review the security of their services and software (it only took me about 30 minutes to come up with the basics of the example exploit, why didn't they notice the same issues?) or that they are aware of the shortcomings but decided that attempting to gain market share was more important than their user's security.
The reason Microsoft sucks is they have billions of dollars and still botch it. That quote tells why: their priority is making more billions, not security, not the interest of the user (aside from what's minimally required to keep them interested or FUDded). Why would they waste time designing (they're already late getting in the internet game) and debugging when they can be making money? Then they can sell upgrades, too, and claim it's some "new technology" or "experience". I think something like Passport is far too important to put in the hands of a company with a track record like Microsoft, and I don't apologize for them one bit.
In reply to Re: Passport Security
by kwoff
in thread Passport Security
by tilly
| For: | Use: | ||
| & | & | ||
| < | < | ||
| > | > | ||
| [ | [ | ||
| ] | ] |