Microsoft achieves security Milestone
Posted by Matthew on Thursday October 31, 2002 @11:17AM
from the rose-colored-glasses dept.
Matthew writes: SAIC today announced that it has received an NAIP Common Criteria certificate for successfully performing a security evaluation of Windows 2000.
“SAIC is proud to have contributed to this Common Criteria milestone event and congratulates Microsoft for attaining this significant achievement in computer security,” said Duane Andrews, SAIC corporate executive vice president. This is the first time that any operating system has acheived Assurance Level 4, making Windows 2000 the most secure commercially available operating system.
In related news, Microsoft today released a hotfix for a vulnerability in PPTP that allows denial of service attacks, and a cumulative patch for IIS, the Microsoft web server, that eliminates two buffer overruns that could be exploited to give hackers administrative access.


Subject:Hackers
Apparently, Windows is secure as long as you don't allow hackers to get to it. But then, so is a Commodore 64.
Comment by Matthew — October 31, 2002 @ 11:19 am
Subject:No Subject Given
This reminds me of Novell's old “C2 Security Certified” deal, where if you read the fine print you found that the certification only applied when all networking was turned off. I think MS did the same thing a few years back.
Comment by Squid — November 1, 2002 @ 1:05 am