The Mac Observer

Skip navigational links

You're viewing an article in TMO's historic archive vault. Here, we've preserved the comments and how the site looked along with the article. Use this link to view the article on our current site:
Microsoft Will Never Plug All Its Security Holes Says Gartner Analyst

Microsoft Will Never Plug All Its Security Holes Says Gartner Analyst

by , 12:45 PM EDT, August 16th, 2000

Farmers have long known that monoculture crops are far more vulnerable to disease than mixed crops. Now the information technology world is belatedly discovering an analogous weakness exists in that vast software monoculture we call Microsoft products.

As Neil MacDonald, a Gartner Analyst points out in an article for CNET News, not only are there many security vulnerabilities in Microsoft's products, there is no way for Microsoft to provide a fix for all of them. Worse, Microsoft's business model provides little incentive for the software behemoth to waste resources in a futile attempt to find and plug all the security leaks.

According to MacDonald:

The constant inclusion of new features in Microsoft's software, and the bundling of new technologies into Microsoft's OS and application products, have created large, monolithic applications that are impossible to debug for all security vulnerabilities. For example, by various estimates, Windows 2000 contains 30 million to 40 million lines of code, and the development team involved thousands of people.

New technologies that Microsoft is working on for its Microsoft.net initiative are only going to increase the number of security vulnerabilities in the future. For instance, MacDonald says,

Microsoft's ActiveX programming model provides no mechanism for "sandboxing" code, Its digital signature mechanism provides insufficient protection for the use of ActiveX controls on the Internet.

But perhaps the most alarming evidence presented by MacDonald is of Microsoft apparent lack of concern:

Microsoft's development process has not fundamentally changed with respect to security. Microsoft still does not make security training mandatory for its developers. Microsoft has found that being reactive to security works well; it quickly fixes newly identified bugs. This approach is easier than preventing the vulnerabilities from occurring in the first place.

Security is important to Microsoft but only to the extent that it does not inhibit the adoption of its products.

Read the entire analysis from the Gartner Group for more information. It is a very good read.

The Mac Observer Spin:

This is a very significant event if you look at it outside the confines of Mac/PC partisan bickering. Most of the IT world and Wall Street pay little attention to the issues described in Mr. MacDonald's report, and the fact that Microsoft's Windows offerings are inherently insecure seldom makes any kind of headline in the least. For the Gartner Group to publicly slam the company in this manner hopefully marks the beginnings of a major shift in the world's outlook on Windows. Only time will tell of course.

Linux and MacOS alternatives to Windows are increasingly coming to favor in some circles, and it is interesting that this CNET article appeared timed for the LinuxWorld Expo taking place in San Jose, CA this week. More and more major corporations are testing Linux in search of a safer, more reliable and less expensive software solution than Microsoft can offer. In fact, this week the Linux deals announced are too numerous to mention here.

Recent Headlines - Updated March 26th

Thu,9:20 PM
7 Things We Learned when Fortune Named Tim Cook World’s Greatest Leader
8:22 PM
How To Sell, Trade In, or Recycle Old Macs or PCs
7:35 PM
Apple’s App Store, iTunes, iBooks, Software Update Briefly Down for Some Users
6:08 PM
The New MacBook Giveaway
1:21 PM
TMO Daily Observations 2015-03-26: Apple’s Revamped iTunes Radio Plans, Amazon’s Big Cloud Storage
12:20 PM
X-Doria Defense Shield Case for iPhone 6 - Beautiful Yet Passes Drop Tests
11:31 AM
Amazon Adds Unlimited Storage Options to Cloud Drive
10:32 AM
Apple Tasks Jimmy Iovine, Trent Reznor with Making a Spotify Competitor
9:02 AM
Apple TV Adds CNNgo Channel
Wed,9:15 PM
ACM 299: Happy Birthday OS X, and Cutting the Cable TV Cord
6:52 PM
How To Recycle Old iPhones, iPads, and Other Mobile Devices
6:45 PM
Kenu Stance Tripod for iPhone is Small, Folds Up and Even Opens Bottles
  • __________
  • Buy Stuff, Support TMO!
  • Podcast: Mac Geek Gab
  • Podcast: Apple Weekly Report
  • TMO on Twitter!