Consumerization of IT–How to address this
Bring Your Own Device or Consumerization of IT are fairly hot themes in a lot of customer organizations. When I talk to customers, there are typically different reactions, once we bring this up. Some tell us, that it is not part of their strategy; some tell us that they plan to do it but that they have a hard time figuring out, how to secure such an environment; very, very ...
10 Years of Trustworthy Computing at Microsoft
Before joining Microsoft a little bit more than 10 years ago, I ran a team at PricewarehoureCoopers on e-Business Risk Management – classical security consulting in the Internet bubble time. When I announced that I will leave PwC and join Microsoft, I got interesting reactions (and remember, this was 2001). Mainly they were along two lines: Oh, you are joining a desktop company? ...
10 Reasons to migrate off Windows XP
I would like you to sit back, close your eyes and think about the year 2001. Think about how you used technology back then, how you used the Internet. Now, let’s take it a little bit further back in history and think of the year 2000. Just after we realized that the Year-2000-Problem was handled very well by the industry. How you used technology, how you used the Internet, the ...
Office 365 Becomes First and Only Major Cloud Productivity Service to Comply With Leading EU and U.S. Standards for Data Protection and Security
A long title but this was the title of the official press statement yesterday. Compliance is always a key question in the public cloud space. Therefore it is very important for us that we now achieved three things: Office 365 is compliant with EU Model Clauses, Data Processing Agreements and ISO 27001 among other standards. Office 365 is the first and only major ...
By Roger Halbheer, on May 20th, 2008% There is an interesting article on the value of the Malicious Software Removal Tool (MSRT – the tool we release monthly to clean PCs) and the fight against storm. It gives you some insight how our Malware Protection Center works and what they did against storm. A pretty interesting reading (even though I do not . . . → Read More: Our Malicious Software Removal Tool and Storm
By Roger Halbheer, on May 20th, 2008% As you probably know: I am Swiss. We have a saying in Switzerland (I do not know whether something like this exists in English as well) that the kids of the shoemaker always have the worst shoes… So, what about the security professionals? No, I am not talking about their shoes but what about the . . . → Read More: Security Pros ignoring their own message
By Roger Halbheer, on May 20th, 2008% You might know Brian Komar. He wrote numerous books on PKI and Certificate Management and he is a well-known speaker at quite some events like TechEd and IT Forum. Now, nCipher organized a Webimar on Best Practices for Microsoft PKI & Certificate Management.
If you are interested, you might register at the link above. . . . → Read More: Best Practices for Microsoft PKI & Certificate Management
By Roger Halbheer, on May 20th, 2008% Cert.org published guidance on how to secure your browser. Here you would find them if you are interested: Securing Your Web Browser
I am just not clear, how the browsing experience for my mom and dad would be…
Roger
By Roger Halbheer, on May 20th, 2008% There has been a lot of discussions in different blogs on the attacks on IIS servers. Microsoft Security Response Center has publised a post on it: Questions about Web Server Attacks
Roger
By Roger Halbheer, on May 20th, 2008% Are you working on Office System 2007? Ever looked for a command, you knew in 2003 exactly where it is but you were unable to locate it? Well, do not get me wrong: Since I am used to the Ribbon, I love it – really. And my wife is all of a sudden able to . . . → Read More: Public Testing for Office
By Roger Halbheer, on May 20th, 2008% If there would be a price for the “Dumbest Thief of the Month”, this guy deserves #1: Texan tries to cash $360bn cheque
Roger
By Roger Halbheer, on May 20th, 2008% I just read this article called 8 Dirty Secrets Of The Security Industry, which seems pretty nasty. Let’s briefly have a look at them:
Vendors do not need to be ahead of the hackers; they only need to be ahead of the buyer: Wow, this is a bad statement – but how true is . . . → Read More: 8 Dirty Secrets Of The Security Industry
By Roger Halbheer, on May 20th, 2008% I wrote on that already earlier. We make processes and tools available how we internally do Threat Modeling. To make it clear: this has nothing to do with the Security Development Lifecycle but much more with Microsoft’s own IT department.
The reason for this post is that we just released version 2.1 of the . . . → Read More: How Microsoft IT does Threat Analysis
By Roger Halbheer, on May 20th, 2008% Quite a while ago, I blogged on Virtual Labs, an offering we are making to you to get your hands dirty with our products and give you the opportunity to work with different hands-on labs.
There is the VirtualLabs offering, containing MSDN and TechNet labs.
The idea behind them is: It’s simple: no . . . → Read More: Testing our Security Technology
|
|
|