So how's Microsoft's Secure Future Initiative going?

Microsoft took a victory lap today, touting the 34,000 full-time engineers it has dedicated to its Secure Future Initiative (SFI) since it launched almost a year ago and making public its first progress report on efforts to improve security in its products and services. As Register readers likely remember, SFI was rolled out …

[Yorick Hunt]

... yawn...

Can someone please wake me up when they actually do something?

All this self-praise and bluster might be pretty for the board meetings, but means absolute diddly squat to those suffering from Microsoft's interminable ineptitude.

[Gene Cash]

Re: ... yawn...

Well the article IS saying they're not actually doing anything measurable, and there's a lot of words and no visible actions.

[froggreatest]

Re: ... yawn...

Most of the work inside is directly related to enforcing the advertised policies. Everyone gets red statuses these days and works on SFI.

Saying show me the evidence is valid but do you expect MS just listing all of the discovered weak points of every service and product they have?

[EricB123]

By Jove, I Think They've Got It!

""prioritize security above all else." This included linking cybersecurity performance to senior execs' compensation plans"

Whoa, this is starting to sound like they finally figured the only way to take security seriously!

[OhForF']

Re: By Jove, I Think They've Got It!

It sounds good but how do they measure "cybersecurity performance"?

The article seems to indicate they do it by counting developer hours assigned to their Secure Future Initiative which might not be the most useful metric.

[CJ_C]

Buggered my email

They have just stopped my use of IMP and SMTP with Outlook, so I can no longer conveniently use their mail. But I am sure I am much more secure. Great.