<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	>
<channel>
	<title>Comments on: Again, Microsoft sacrifices security under pressure</title>
	<atom:link href="http://www.wrgross.com/blogs/security/2006/07/23/again-microsoft-sacrifices-security-under-pressure/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.wrgross.com/blogs/security/2006/07/23/again-microsoft-sacrifices-security-under-pressure/</link>
	<description>All manner of goodness respecting the secure operation of digital systems.</description>
	<pubDate>Sun, 20 May 2012 01:39:49 +0000</pubDate>
	<generator>http://wordpress.org/?v=2.6.1</generator>
		<item>
		<title>By: David</title>
		<link>http://www.wrgross.com/blogs/security/2006/07/23/again-microsoft-sacrifices-security-under-pressure/#comment-3</link>
		<dc:creator>David</dc:creator>
		<pubDate>Wed, 23 Aug 2006 13:01:00 +0000</pubDate>
		<guid isPermaLink="false">http://www.wrgross.com/blogs/security/2006/07/23/again-microsoft-sacrifices-security-under-pressure/#comment-3</guid>
		<description>Hey Bill,

Kristy told me you had a blog. I thought I would see if I could recapture the JMU magic ;-}

&#62;Microsoft delivers “their most
&#62;secure operating system, ever,” 
&#62;but when business users complain &#62;about the features, the feature
&#62;is removed, or disabled.

Ahhh, but is not data availability also a goal of security? What if the employee was hiding kiddie porn in that encrypted folder. Is the company not responsible for the misuse of that system?

&#62;Microsoft EFS is not overly &#62;challenging to set up, and allows &#62;decryption by a pre-specified &#62;authorized agent.

I agree with this whole heartedly and an home users that use XP Professional can set up EFS to encrypt the folders they need to keep private already.

&#62;Instead of removing a feature good &#62;for home users who may not care &#62;about data recovery agents, &#62;Microsoft opts to yank the whole &#62;feature.

I agree that it an interesting move, but given that it was an additional download and that there are other "additional downloads" that do the same thing, I am not convinced it is really a huge deal.

David</description>
		<content:encoded><![CDATA[<p>Hey Bill,</p>
<p>Kristy told me you had a blog. I thought I would see if I could recapture the JMU magic ;-}</p>
<p>&gt;Microsoft delivers “their most<br />
&gt;secure operating system, ever,”<br />
&gt;but when business users complain &gt;about the features, the feature<br />
&gt;is removed, or disabled.</p>
<p>Ahhh, but is not data availability also a goal of security? What if the employee was hiding kiddie porn in that encrypted folder. Is the company not responsible for the misuse of that system?</p>
<p>&gt;Microsoft EFS is not overly &gt;challenging to set up, and allows &gt;decryption by a pre-specified &gt;authorized agent.</p>
<p>I agree with this whole heartedly and an home users that use XP Professional can set up EFS to encrypt the folders they need to keep private already.</p>
<p>&gt;Instead of removing a feature good &gt;for home users who may not care &gt;about data recovery agents, &gt;Microsoft opts to yank the whole &gt;feature.</p>
<p>I agree that it an interesting move, but given that it was an additional download and that there are other &#8220;additional downloads&#8221; that do the same thing, I am not convinced it is really a huge deal.</p>
<p>David</p>
]]></content:encoded>
	</item>
</channel>
</rss>

