Trustworthy Computing Initiative

[vass0922]

http://news.com.com/2010-7355_3-5109...g=nefd_gutspro

That sounds perfectly reasonable, until one reads that "Microsoft will make an exception to the above release schedule, if we determine that customers are at immediate risk from viruses, worms, attacks or other malicious activities. In such a situation, Microsoft may release security patches as soon as possible to help protect customers."

Given that the majority of Microsoft security bulletins deal with these very problems, I wonder whether this new policy really improves security. Or does it mean that Microsoft will be more selective about what it deems an "immediate risk" to customers, as it strives to reduce the number of security bulletins (and associated negative media coverage?)

Microsoft likely will seldom release a bulletin patch outside its assigned monthly schedule. That would undermine its new policy and put the company in the unfortunate position of having to defend what makes one problem "more critical" than another and warrant a special release.

[John Prophet]

smoke and mirrors.

They are just like politicians and others in the sense that as long as they have some sort of "program" in place they have a sort of built in excuse to work off of.