[Full-Disclosure] Gates: 'You don't need perfect code' for good security

Sat Nov 1 17:36:24 UTC 2003

If you take all of this together we have Microsoft is going to supply us with
code that does not work that will allows programmers who know what they are
doing to talk to any windows system in the world.

Cool.

On Fri, 31 Oct 2003, Andrew D Kirch wrote:

>
> You guys missed it, Gates is utterly right.  There is no such thing as perfect
> code.  Where he errs is that his code is utter and unremarkable crap based on
> poorly conceived designs based on a percieved difficulty of use problem.  The
> simple solution was to design it for the average person and then tell anyone
> who couldn't figure it out to get stuffed. Sadly that didn't happen here, or
> when dcom came out, or when activex sucked, or when dcom came out again, or
> every time they release Outlook (Express).
>
>
> On Fri, 31 Oct 2003 17:43:16 -0500
> "Brian Bruns" <bruns at 2mbit.com> wrote:
>

> > My favorite quote is...
> >
> > BG: Until we had this concept of Web services, software on the Internet
> > couldn't talk to other software on the Internet. The only thing that worked
> > was you could move bits - that's TCP/IP - or you could put up screens -
> > that's HTML - but software couldn't talk to software.
> >
> >
> > Its good to know my Putty application can't talk to my OpenSSH server, or
> > that my EXIM mail server can't actually talk to other mail servers.
> >
> >
> > :-)

_____
Douglas Denault
doug at safeport.com
Voice: 301-469-8766
  Fax: 301-469-0601