<?xml version="1.0" encoding="UTF-8" ?>
<?xml-stylesheet type="text/xsl" href="http://blogs.msdn.com/utility/FeedStylesheets/rss.xsl" media="screen"?><rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:slash="http://purl.org/rss/1.0/modules/slash/" xmlns:wfw="http://wellformedweb.org/CommentAPI/"><channel><title>Lessons learned from the Animated Cursor Security Bug</title><link>http://blogs.msdn.com/b/sdl/archive/2007/04/26/lessons-learned-from-the-animated-cursor-security-bug.aspx</link><description>Michael Howard here. 
 A core tenet of the SDL is to take and incorporate lessons learned when we issue a security update, and there is a great deal to learn from the recent animated cursor bug, MS07-017 , so I want to spend a few minutes to go over</description><dc:language>en-US</dc:language><generator>Telligent Evolution Platform Developer Build (Build: 5.6.50428.7875)</generator><item><title>Microsoft postmortem on ANI bug</title><link>http://blogs.msdn.com/b/sdl/archive/2007/04/26/lessons-learned-from-the-animated-cursor-security-bug.aspx#9570103</link><pubDate>Mon, 27 Apr 2009 04:45:11 GMT</pubDate><guid isPermaLink="false">91d46819-8472-40ad-a661-2c78acb4018c:9570103</guid><dc:creator>Paul's Down-Home Page: Exchange, messaging, collaboration, security, and more</dc:creator><description>&lt;p&gt;Michael Howard has posted a great postmortem and lessons-learned piece on the animated cursor vulnerability recently patched in Windows. I love to see this kind of open discussion of how Microsoft's security development lifecycle (SDL) is working in practice,&lt;/p&gt;
&lt;img src="http://blogs.msdn.com/aggbug.aspx?PostID=9570103" width="1" height="1"&gt;</description></item><item><title>One Tool Does not Rule them All</title><link>http://blogs.msdn.com/b/sdl/archive/2007/04/26/lessons-learned-from-the-animated-cursor-security-bug.aspx#9415938</link><pubDate>Fri, 13 Feb 2009 00:44:14 GMT</pubDate><guid isPermaLink="false">91d46819-8472-40ad-a661-2c78acb4018c:9415938</guid><dc:creator>The Security Development Lifecycle</dc:creator><description>&lt;p&gt;Hello, Michael here... Over the last couple of years, I've released information about various Microsoft&lt;/p&gt;
&lt;img src="http://blogs.msdn.com/aggbug.aspx?PostID=9415938" width="1" height="1"&gt;</description></item><item><title>Resilience is NOT necessarily a good thing</title><link>http://blogs.msdn.com/b/sdl/archive/2007/04/26/lessons-learned-from-the-animated-cursor-security-bug.aspx#8447194</link><pubDate>Thu, 01 May 2008 19:14:23 GMT</pubDate><guid isPermaLink="false">91d46819-8472-40ad-a661-2c78acb4018c:8447194</guid><dc:creator>Larry Osterman's WebLog</dc:creator><description>&lt;p&gt;I just ran into this post by Eric Brechner who is the director of Microsoft's Engineering Excellence&lt;/p&gt;
&lt;img src="http://blogs.msdn.com/aggbug.aspx?PostID=8447194" width="1" height="1"&gt;</description></item><item><title>Perchè la sicurezza applicativa è così... OSTICA ??!?</title><link>http://blogs.msdn.com/b/sdl/archive/2007/04/26/lessons-learned-from-the-animated-cursor-security-bug.aspx#5823445</link><pubDate>Fri, 02 Nov 2007 02:59:54 GMT</pubDate><guid isPermaLink="false">91d46819-8472-40ad-a661-2c78acb4018c:5823445</guid><dc:creator>Noticias externas</dc:creator><description>&lt;P&gt;Semplice!!! Perchè non sempre è chiaro cosa sia esattamente !! Il primo mito da sfatare è che la sicurezza&lt;/P&gt;&lt;img src="http://blogs.msdn.com/aggbug.aspx?PostID=5823445" width="1" height="1"&gt;</description></item><item><title>Perchè la sicurezza applicativa è così... OSTICA ??!?</title><link>http://blogs.msdn.com/b/sdl/archive/2007/04/26/lessons-learned-from-the-animated-cursor-security-bug.aspx#5822678</link><pubDate>Fri, 02 Nov 2007 02:18:15 GMT</pubDate><guid isPermaLink="false">91d46819-8472-40ad-a661-2c78acb4018c:5822678</guid><dc:creator>Mario Fontana-Architetture Applicative e Sicurezza</dc:creator><description>&lt;p&gt;Semplice!!! Perch&amp;#232; non sempre &amp;#232; chiaro cosa sia esattamente !! Il primo mito da sfatare &amp;#232; che la sicurezza&lt;/p&gt;
&lt;img src="http://blogs.msdn.com/aggbug.aspx?PostID=5822678" width="1" height="1"&gt;</description></item><item><title>Fuzz Testing at Microsoft and the Triage Process</title><link>http://blogs.msdn.com/b/sdl/archive/2007/04/26/lessons-learned-from-the-animated-cursor-security-bug.aspx#5016386</link><pubDate>Thu, 20 Sep 2007 21:54:17 GMT</pubDate><guid isPermaLink="false">91d46819-8472-40ad-a661-2c78acb4018c:5016386</guid><dc:creator>The Security Development Lifecycle</dc:creator><description>&lt;p&gt;Scott Lambert here. I work on the Security Engineering Tools team where we're responsible for researching,&lt;/p&gt;
&lt;img src="http://blogs.msdn.com/aggbug.aspx?PostID=5016386" width="1" height="1"&gt;</description></item><item><title>Windows Vista Security at 180 Days</title><link>http://blogs.msdn.com/b/sdl/archive/2007/04/26/lessons-learned-from-the-animated-cursor-security-bug.aspx#3445733</link><pubDate>Thu, 21 Jun 2007 20:02:52 GMT</pubDate><guid isPermaLink="false">91d46819-8472-40ad-a661-2c78acb4018c:3445733</guid><dc:creator>Windows Vista Team Blog</dc:creator><description>&lt;p&gt;Windows Vista recently passed the 180 day mark since it was made available to business customers. Just&lt;/p&gt;
&lt;img src="http://blogs.msdn.com/aggbug.aspx?PostID=3445733" width="1" height="1"&gt;</description></item><item><title>O bugu w ikonkach</title><link>http://blogs.msdn.com/b/sdl/archive/2007/04/26/lessons-learned-from-the-animated-cursor-security-bug.aspx#2407763</link><pubDate>Fri, 04 May 2007 12:19:47 GMT</pubDate><guid isPermaLink="false">91d46819-8472-40ad-a661-2c78acb4018c:2407763</guid><dc:creator>Wampiryczny blog</dc:creator><description>&lt;p&gt;Ciekawa analiza tego, dlaczego błąd w plikach ANI znalazł się r&amp;#243;wnież w VISTA mimo zastosowania SDL. Błędy zawsze się zdarzały i będą się zdarzać. Najważniejsze jest to, by z błęd&amp;#243;w wyciągnąć lekcję na przyszłość. Microsoft zacz&lt;/p&gt;
&lt;img src="http://blogs.msdn.com/aggbug.aspx?PostID=2407763" width="1" height="1"&gt;</description></item><item><title>The Security Development Lifecycle - Vista bug </title><link>http://blogs.msdn.com/b/sdl/archive/2007/04/26/lessons-learned-from-the-animated-cursor-security-bug.aspx#2406232</link><pubDate>Fri, 04 May 2007 09:49:14 GMT</pubDate><guid isPermaLink="false">91d46819-8472-40ad-a661-2c78acb4018c:2406232</guid><dc:creator>Walter Stiers - Academic Relations Team (BeLux)</dc:creator><description>&lt;p&gt;A very interesting blog: The Security Development Lifecycle It has recent posts on Security Education&lt;/p&gt;
&lt;img src="http://blogs.msdn.com/aggbug.aspx?PostID=2406232" width="1" height="1"&gt;</description></item><item><title>Microsoft Shares Lessons Learned from the Animated Cursor Security Bug</title><link>http://blogs.msdn.com/b/sdl/archive/2007/04/26/lessons-learned-from-the-animated-cursor-security-bug.aspx#2375410</link><pubDate>Wed, 02 May 2007 18:09:22 GMT</pubDate><guid isPermaLink="false">91d46819-8472-40ad-a661-2c78acb4018c:2375410</guid><dc:creator>JrzyShr Dev Guy</dc:creator><description>&lt;p&gt;Last month, a critical security bug was found in most versions of Windows. This bug generated a lot of&lt;/p&gt;
&lt;img src="http://blogs.msdn.com/aggbug.aspx?PostID=2375410" width="1" height="1"&gt;</description></item></channel></rss>