The question then is
does Microsoft use this for their own products?
Microsoft has released a new software tool to help developers write secure applications by highlighting the system changes created when their wares are installed on Windows machines. The Attack Surface Analyzer, released on Tuesday, is a free verification tool that analyzes the changes in system state, runtime parameters and …
given this paragraph - "Tuesday's additions come as vulnerability tracking service Secunia reported that failure to apply third-party patches – as opposed to updates from Microsoft – is "almost exclusively" responsible for the growing exposure of Windows machines to security threats." a further question might be -
Did you bother to read the article?
Biting the hand that feeds IT © 1998–2021