Microsoft in about-turn on hackers
Del.icio.us
Digg
Google
Spurl
Blink
Furl
Y! MyWeb
Share:
Sponsors:
Microsoft has stepped into the lion's den and revealed some the work that's been done on Internet Explorer 7 to a group of hackers.
The company showed the beta at the Hack in the Box Security Conference in Kuala Lumpur, Malaysia and was pleased with the result.
"It's the first time we've ever come out ahead of a product release to present and get feedback," said Tony Chor, group program manager at Microsoft's Internet Explorer team.Chor, and colleague Andrew Cushman, director of Microsoft's security engineering and communication group, spoke highly of the feedback they heard at the presentation, and preferred the term "security research community" for attendees, instead of "hacker."
"Hacker has a negative connotation, like a criminal," said Cushman. People such as attendees of the Hack in the Box conference approach security from a very different, very valuable perspective, he added.
"This community is a good source of information and we haven't availed ourselves of that source," said Cushman.
Chor went a step further, saying Microsoft has maintained an "adversarial" relationship with the hacking community in the past, but "that wasn't working. It just made them mad and we didn't benefit from their passion and expertise."
But the company is putting that past behind it, and its goal is to engage the "security research community" more in the future, presenting at more hacker conventions and giving them a chance to critique some of Microsoft's work ahead of releases.
Chor and Cushman also handed out their business cards liberally, and hope to get more e-mail responses from people, as well as notes on their blog, they said.
"People had a lot of good suggestions, and asked a lot of good questions," said Chor.
Some hackers at the show gave Microsoft high marks for showing off some new security features on the web browser and seeking their views, adding they would have liked to hear more technical detail on new features in IE7 Beta 2. Chor said he planned to increase the amount of technical detail in future presentations.
The Beta 2 version of IE7, currently under construction at Microsoft at Microsoft, will likely be ready by the end of the year, said Chor.
One new feature on the web browser is it runs in higher security "Protected Mode" by default, set at a lower user privilege. In protected mode, all downloads and other packages are automatically dropped in the "temporary Internet files" folder, so malware can't be deposited on the hard disk. In the temporary folder, IE and Windows treat the files as dangerous and they're given no privileges to move about.
With add-ons like a Google Inc. toolbar or ActiveX, IE7 Beta 2 will offer more permission prompts, since downloads such as ActiveX opt-ins can be an avenue for attack, Chor said.
Microsoft will license its "Protected Mode" innovation to other developers for free to help spread its use, and increase security, said Chor.
For businesses, Microsoft added a "Compatibility Mode" that works when a person is using the company's intranet and allows them to drop files wherever they want to on their PCs.
Article submitted by: Some1
Last Update: 10-04-2005
Category: Off Topic Info
The company showed the beta at the Hack in the Box Security Conference in Kuala Lumpur, Malaysia and was pleased with the result.
"It's the first time we've ever come out ahead of a product release to present and get feedback," said Tony Chor, group program manager at Microsoft's Internet Explorer team.Chor, and colleague Andrew Cushman, director of Microsoft's security engineering and communication group, spoke highly of the feedback they heard at the presentation, and preferred the term "security research community" for attendees, instead of "hacker."
"Hacker has a negative connotation, like a criminal," said Cushman. People such as attendees of the Hack in the Box conference approach security from a very different, very valuable perspective, he added.
"This community is a good source of information and we haven't availed ourselves of that source," said Cushman.
Chor went a step further, saying Microsoft has maintained an "adversarial" relationship with the hacking community in the past, but "that wasn't working. It just made them mad and we didn't benefit from their passion and expertise."
But the company is putting that past behind it, and its goal is to engage the "security research community" more in the future, presenting at more hacker conventions and giving them a chance to critique some of Microsoft's work ahead of releases.
Chor and Cushman also handed out their business cards liberally, and hope to get more e-mail responses from people, as well as notes on their blog, they said.
"People had a lot of good suggestions, and asked a lot of good questions," said Chor.
Some hackers at the show gave Microsoft high marks for showing off some new security features on the web browser and seeking their views, adding they would have liked to hear more technical detail on new features in IE7 Beta 2. Chor said he planned to increase the amount of technical detail in future presentations.
The Beta 2 version of IE7, currently under construction at Microsoft at Microsoft, will likely be ready by the end of the year, said Chor.
One new feature on the web browser is it runs in higher security "Protected Mode" by default, set at a lower user privilege. In protected mode, all downloads and other packages are automatically dropped in the "temporary Internet files" folder, so malware can't be deposited on the hard disk. In the temporary folder, IE and Windows treat the files as dangerous and they're given no privileges to move about.
With add-ons like a Google Inc. toolbar or ActiveX, IE7 Beta 2 will offer more permission prompts, since downloads such as ActiveX opt-ins can be an avenue for attack, Chor said.
Microsoft will license its "Protected Mode" innovation to other developers for free to help spread its use, and increase security, said Chor.
For businesses, Microsoft added a "Compatibility Mode" that works when a person is using the company's intranet and allows them to drop files wherever they want to on their PCs.
Article submitted by: Some1
Last Update: 10-04-2005
Category: Off Topic Info
Current rating: 5.54 by 22 users
| Would you recommend this article to a friend? |
| Not a Chance | 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | Absolutely |
Related News Stories
(15,184 reads) 03-29-2007
· Adobe Photoshop CS3 published(13,178 reads) 08-03-2006
· FBI calls for hacker help.(15,003 reads) 07-20-2006
· Become a Friend of Firefox.(12,764 reads) 07-15-2006
· Recently unearthed e-mail reveals what life was like in 1995(14,597 reads) 02-23-2006
· Inside Windows Vista ( Build 5308) + slide show(13,301 reads) 02-21-2006
· do-you-have-a.COM ? thinking-to-buy-a.COM ?(13,472 reads) 01-17-2006
· Websites judged in milliseconds(14,066 reads) 01-17-2006
· Stolen Corvette found after 37 years (Reuters)(13,672 reads) 01-17-2006
· Two patients in surgical slip-up (Reuters)(13,065 reads) 01-17-2006
· Goose Poop a Problem for Oakland Parkgoers (AP)
Please register or sign-in to post comments.