Feeds

McAfee dismisses Microsoft's security overtures

As does Symantec...

Mobile application security vulnerability report

McAfee has dismissed Microsoft's release of information to allow security vendors to build products that will interoperate with Vista.

The security vendor says the information is not fit for purpose.

A statement from McAfee worldwide corporate communications vice president Siobhan MacDermott said:

We did receive a document from Microsoft yesterday that contained the SDK for Windows Security Centre only. We continue to have questions pertaining to this document and have asked Microsoft for meetings and/or additional clarification about what MS has sent us. To date, we have not had any cooperation from MS and no response on McAfee's repeated requests to review the information.

Contrary to what it says publicly, Microsoft has not cooperated with the leading security providers. In fact, we have not received anything at all from Microsoft concerning PatchGuard.

From McAfee's perspective, it is not at all acceptable for MS to wait until a service pack and not offer us kernel access until after the launch of Vista. We urge MS to give security vendors this access as quickly as possible and not wait until the eleventh hour so that we can offer our customers the best protection.

Meanwhile, Symantec released a statement condemning Microsoft for doing too little too late:

With regards to Microsoft and their announcement regarding security provisions in the Windows Vista operating system, Symantec has yet to actually see the final detailed information needed to address our concerns regarding Windows Security Centre or PatchGuard. While we are encouraged by their statements and are hopeful their actions will indeed lead to customers being allowed to use whatever security solutions they would like on the Vista operating system, the operative question is exactly when will the final detailed information be made available to security providers?

It is important to note that the Vista operating system is slated to ship to OEM within the next few weeks. Therefore, security providers would need to have the final detailed information to address their concerns about Windows Security Centre and PatchGuard provided to them in a timely manner.

Microsoft initially said it had already released enough information for security vendors to get their products working with Vista. Security firms disagreed. There followed some backroom dealing with the European Commission followed by the release of more APIs. ®

The Essential Guide to IT Transformation

More from The Register

next story
NO MORE ALL CAPS and other pleasures of Visual Studio 14
Unpicking a packed preview that breaks down ASP.NET
DARPA-derived secure microkernel goes open source tomorrow
Hacker-repelling, drone-protecting code will soon be yours to tweak as you see fit
Cheer up, Nokia fans. It can start making mobes again in 18 months
The real winner of the Nokia sale is *drumroll* ... Nokia
Put down that Oracle database patch: It could cost $23,000 per CPU
On-by-default INMEMORY tech a boon for developers ... as long as they can afford it
Google shows off new Chrome OS look
Athena springs full-grown from Chromium project's head
Apple: We'll unleash OS X Yosemite beta on the MASSES on 24 July
Starting today, regular fanbois will be guinea pigs, it tells Reg
HIDDEN packet sniffer spy tech in MILLIONS of iPhones, iPads – expert
Don't panic though – Apple's backdoor is not wide open to all, guru tells us
prev story

Whitepapers

Designing a Defense for Mobile Applications
Learn about the various considerations for defending mobile applications - from the application architecture itself to the myriad testing technologies.
Implementing global e-invoicing with guaranteed legal certainty
Explaining the role local tax compliance plays in successful supply chain management and e-business and how leading global brands are addressing this.
Top 8 considerations to enable and simplify mobility
In this whitepaper learn how to successfully add mobile capabilities simply and cost effectively.
Seven Steps to Software Security
Seven practical steps you can begin to take today to secure your applications and prevent the damages a successful cyber-attack can cause.
Boost IT visibility and business value
How building a great service catalog relieves pressure points and demonstrates the value of IT service management.