Software Security at Microsoft: ACE Team Tour, Part 3

Posted By: Duncan Mackenzie | Oct 23rd, 2006 @ 9:53 PM | 17,678 Views | 6 Comments

The Application Consulting & Engineering team (ACE Team) assesses all of Microsoft’s line of business applications for privacy and security vulnerabilities. This discussion among Ahmad Mahdi (Security Technologist), Ricardo Birmele (Security Technologist and Training Coordinator), Talhah Mir (Senior Security Technologist), Chris Lundquist (Performance Technologist), and Tony Dang (Privacy and Program Manager) talk about what it involved in the assessment process. Robert Scoble conducts the interview.

Part 2
Part 1
Media Downloads:
Rating:
0
0
#Oct 26th, 2006 @ 2:26 PM
jason818_253.33
jason818_253.33
Yippi skippy

Any one on the team get the job because they hacked into something they "shouldn’t" have? Big Smile

#Oct 27th, 2006 @ 3:54 AM
BillP
BillP
Haha, I was wondering the same thing.   Lot's of hackers/crackers end up getting good jobs with software companies and governments.

I love the guy's shades!
#Oct 28th, 2006 @ 8:56 PM
ahmad_aceteam
ahmad_aceteam
Hey that guy is me and yes, it took many many hours to find those shades! Smiley

Thanks for coming by, if you want to read more about the ACE (Application Consulting & Engineering) team, come by our blog here: http://blogs.msdn.com/ace_team

Ahmad
#Oct 28th, 2006 @ 8:57 PM
ahmad_aceteam
ahmad_aceteam
Oh and to answer your question, no we typically don't hire "black hat" hackers or "reformed" hackers around these parts.  Not that we know of anyway Wink
#Nov 2nd, 2006 @ 11:39 AM
Jim Carr
Jim Carr

yes, convincing the coo && cto 
the levels of associated risk they are vulnerable too
is a common problem right now. 
~color coded executive level reports with cool pies charts always does the trick...

you should have seen it in the 90's when terminology wasn't in paperback form.

#Nov 13th, 2006 @ 8:16 PM
TonyMaupin
TonyMaupin
Hey Ahmad, it's Tony Maupin, from past IOActive fame. Great to see you again. Very good interview, and still lady-killer I see. Wink Keep in touch.

Tony Maupin
Microsoft Communities