Feeds

McAfee dismisses Microsoft's security overtures

As does Symantec...

Top three mobile application threats

McAfee has dismissed Microsoft's release of information to allow security vendors to build products that will interoperate with Vista.

The security vendor says the information is not fit for purpose.

A statement from McAfee worldwide corporate communications vice president Siobhan MacDermott said:

We did receive a document from Microsoft yesterday that contained the SDK for Windows Security Centre only. We continue to have questions pertaining to this document and have asked Microsoft for meetings and/or additional clarification about what MS has sent us. To date, we have not had any cooperation from MS and no response on McAfee's repeated requests to review the information.

Contrary to what it says publicly, Microsoft has not cooperated with the leading security providers. In fact, we have not received anything at all from Microsoft concerning PatchGuard.

From McAfee's perspective, it is not at all acceptable for MS to wait until a service pack and not offer us kernel access until after the launch of Vista. We urge MS to give security vendors this access as quickly as possible and not wait until the eleventh hour so that we can offer our customers the best protection.

Meanwhile, Symantec released a statement condemning Microsoft for doing too little too late:

With regards to Microsoft and their announcement regarding security provisions in the Windows Vista operating system, Symantec has yet to actually see the final detailed information needed to address our concerns regarding Windows Security Centre or PatchGuard. While we are encouraged by their statements and are hopeful their actions will indeed lead to customers being allowed to use whatever security solutions they would like on the Vista operating system, the operative question is exactly when will the final detailed information be made available to security providers?

It is important to note that the Vista operating system is slated to ship to OEM within the next few weeks. Therefore, security providers would need to have the final detailed information to address their concerns about Windows Security Centre and PatchGuard provided to them in a timely manner.

Microsoft initially said it had already released enough information for security vendors to get their products working with Vista. Security firms disagreed. There followed some backroom dealing with the European Commission followed by the release of more APIs. ®

Mobile application security vulnerability report

More from The Register

next story
NO MORE ALL CAPS and other pleasures of Visual Studio 14
Unpicking a packed preview that breaks down ASP.NET
Captain Kirk sets phaser to SLAUGHTER after trying new Facebook app
William Shatner less-than-impressed by Zuck's celebrity-only app
Apple fanbois SCREAM as update BRICKS their Macbook Airs
Ragegasm spills over as firmware upgrade kills machines
Cheer up, Nokia fans. It can start making mobes again in 18 months
The real winner of the Nokia sale is *drumroll* ... Nokia
Mozilla fixes CRITICAL security holes in Firefox, urges v31 upgrade
Misc memory hazards 'could be exploited' - and guess what, one's a Javascript vuln
Put down that Oracle database patch: It could cost $23,000 per CPU
On-by-default INMEMORY tech a boon for developers ... as long as they can afford it
Google shows off new Chrome OS look
Athena springs full-grown from Chromium project's head
prev story

Whitepapers

Top three mobile application threats
Prevent sensitive data leakage over insecure channels or stolen mobile devices.
Implementing global e-invoicing with guaranteed legal certainty
Explaining the role local tax compliance plays in successful supply chain management and e-business and how leading global brands are addressing this.
Boost IT visibility and business value
How building a great service catalog relieves pressure points and demonstrates the value of IT service management.
Designing a Defense for Mobile Applications
Learn about the various considerations for defending mobile applications - from the application architecture itself to the myriad testing technologies.
Build a business case: developing custom apps
Learn how to maximize the value of custom applications by accelerating and simplifying their development.