• Bing and the Video Preview (and Family Safety Settings)

    You might have seen recent posts on Bing getting under attack because of the video preview feature, which works (obviously) for “normal” videos as well as for porn…

    To be clear upfront: I am the daddy of two great sons at the age of 7 and 10, so at least the 10-year-old starts to get interested in such things.

    Let’s start with the feature discussion first. I went to Bing’s video search engine and searched for a term which definitely will return porn content (I did not dare to do it on my Microsoft notebook – I did it on my private PC smile_embaressed). This is what happens:

    2009,06%20-%20Safe%20Search[1]If I then click on “change” above, I see the default settings (which are preventing access to sexual explicit sites):

    2009,06 - Safe Search 2 And, when I then want to change it to “off”, I get the following warning:

    2009,06%20-%20Safe%20Search%203[1]  So far the facts as they are today. Now come the emotions and the discussions about what is good and what is bad. So, looking at my son, there are two scenarios we separate in our family:

    1. He wants to search content for his homework and stumbles upon sexual or any other inappropriate content: If he is protected then, that’s fine and this definitely helps. Bing covers this perfectly as he does not even think of turning the search filter off – in this scenario smile_wink.
    2. He wants to search sexual content: Well, there is a good chance that he will turn the filter off and ignore the warning. Let’s think about this for a moment: If we would hide it in the “options” or wherever, don’t you think it would just take an additional day at school to learn where he has to switch it off (if he even has to go to school to find that out)? To me it is just a false sense of safety if you think that you can protect your kid by hiding the option somewhere. I am convinced that we have to accept the fact that our kids are growing up in the digital age and (even with me) in certain areas know more about the technology than us.

    So, I am definitely convinced that turning all the possible filters on will drive my kids to the neighbor's house to look at the same inappropriate pictures as the policies there might be less restrictive. Just to leave me in a wrong sense of safety and without any control about what is going on with my kids – which would be really, really bad.

    From my point of view, this problem is part of the education of my kids. How do we raise them and what values are important to us. So, there are a few key tasks which are outside technology, which are the duty of parents (even though some tend to ignore this pretty often):

    • The kid’s PC has to be at a location where you can see from time to time, what they are doing. To me, if my son deliberately searches for porn (which is only one click away on the porn site anyway – where he has just to agree on being 18 as well), to me it is time to address the next step of his sexual education anyway.
    • Make sure that you show interest in what your kid is doing and accept the fact that he/she knows more than you. But let the kid educate yourself in such technologies. At least mine are pretty proud if there is something in this space he can show me I did not know.
    • Do not “pull the plug” as this will drive your kid to the neighbor’s house.

    Yes, I know that the world is evil out there and that we all have to work together to fight illegal content on the Internet. There is child porn and child abuse and a lot of people (like me) are working everyday to reduce this disgusting phenomenon. You should not get me wrong: I definitely do not want to play something like this down. But on the other hand, I am convinced that we should not feel like we can solve these problems with technology. It is our duty as parents to raise our kids in a responsible manner – this cannot be done by better search filters or parental controls. I know that there are cultural differences across the globe but at the end of the day it might change the way you educate the kids but not the ultimate goal.

    To finalize this post, let me add a few links:

    • Here is the link to the Bing blog talking about this: Smart Motion Preview and SafeSearch
    • If you want to know more how to protect your kids, check out our site on Protect Your Family. There is technology in there but a lot of age-dependant guidance most of it is about communicating with your kids.
    • On your local Microsoft site, you might find additional information, which is often done in collaboration with third-party organizations.

    Now, let me add a final statement: The opinions shared in here are my personal opinions and might be challenged as such.

    Roger

  • End-to-End Trust: The Internet – a safer place to work, play, learn and do business

    I often have the opportunity to keynote events on security. I rarely want to talk about products but much more about the way I see the development around security on the Internet.

    The reason why I do this presentation the way you see below is, that threats change and criminals evolved (and will still evolve) new ways of stealing money and valuable data. Therefore trust in the Internet continues to come under attack. It is kind of the classic tale of good versus evil – just this time the future of the Internet and business infrastructure are at stake. From my point of view, the industry is faced with a challenge- - either secure the Internet and gain user’s trust, or lose control to the bad guys and see the value of one of man’s greatest inventions dwindle.

    We recorded a presentation which will give you insight into next generation security and Trustworthy Computing’s vision for creating an Internet and Infrastructure Platform we can trust – from end to end!

    The video is a little bit more than 20 minutes. If you want the direct link, it is here: http://video.msn.com/video.aspx?mkt=en-us&vid=98967da4-50cd-42cd-8f3c-db0f1cac8ed8

    Enjoy and tell me what you think of it. Does it make sense to you?

    Roger

  • Welcome to reality: Apple Acknowledges OS X Malware

    A few years ago, we ran a huge event in Switzerland: We offered people in Switzerland to come to us (we were for a whole week at the airport in Zurich) with their PC and we check it for malware, patch it etc. We did this with a lot of partners and had live TV coverage at primetime in Swiss TV. A huge success and a lot of people came! However, we wanted to do it in partnership with Apple – well, I am not sure whether “partnership” would have been the right term: We offered them the Internet access, the network, the room, etc. They would just have had to bring the people.

    The Swiss team seemed to me to have wanted to join in but the ww management decided that they do not want to do that “as Apple does not have a security problem”.

    And then we had this funny event: Apple Recommends Running Multiple AV Engines and a day after Apple pulled the advisory Article was Bogus: Do Mac Users not need Anti-Virus Protection?

    Honestly, the whole discussion is ridiculous as Cybercrime is a fact of life and so is malware. As soon as Apple users become a profitable target on some scale, they will be attacked. Everybody who thinks differently puts their head in the sand.

    And now finally Apple arrived in today’s world: Apple Acknowledges OS X Malware and on their website they write:

    The Mac is designed with built-in technologies that provide protection against malicious software and security threats right out of the box. However, since no system can be 100 percent immune from every threat, antivirus software may offer additional protection.

    I think that this is a big and a very good move! I would now welcome Apple to join the industry communities like SafeCode to work jointly on getting products more secure or initiatives like 2CENTRE to train law enforcement. I am a big supporter of industry/government collaboration but when it comes to Law Enforcement, there are often not too many companies at the table.

    Security to me is not only products and processes. It is about partnerships!

    Roger

  • SafeSearch in Bing

    One more proof that we listen to you: We made certain changes to Bing in order rot help you to protect from sexual explicit content. Please read the corresponding blog post Safe Search Update.

    Even though this is very good news, it does not change my view that education of parents and children is at the foundation of the safe use of the Internet: Bing and the Video Preview (and Family Safety Settings)

    Roger

  • Microsoft awarded for Security

    This is probably one of the best news I read since a long time. I often said, that I am convinced that we are in a lot of areas around security leading the industry. The complexity of building multi-purpose software in a secure way started to be addressed by us back when we introduced the Security Development Lifecycle which we make available publically on the web.

    Today, Microsoft was recognized in the SD Times 100: 2009, an annual list from Software Development Times that acknowledges companies for being industry leaders in software development. Microsoft was awarded (as well as in other categories), alongside the likes of Coverity and Fortify a top spot in secure development. This is the first time since SD Times started publishing its “Top 100” list that Microsoft has been recognized in this category.

    You can read this story here: DOWNLOAD ISSUE 6/15/2009 NOW! from page 21 onwards

    Roger