RE: Any software security news from the RSA conference?

[ljknews <ljknews () mac com>]

At 5:58 PM -0600 2/27/04, Alun Jones wrote:

> Microsoft has a lot of code to contend with, and much of it is old - so a
> lot of it has had to be scrubbed clean of imperfections, and some has had to
> be re-written.

A few years ago I heard the problem described as the opposite - that for
Windows V.something about 30% of the existing code was entirely replaced
(compared to corrected), which is more than _any_ organization can handle
safely on a project of that size.