A "No Kidding" Risk Analysis

[George Toft]

"We are not Microsoft bigots, we are Linux enthusiasts."

Here is a risk assessment for a serious flaw in some 
vendor-provided code.  In this scenario, when a person
registers at the web site for access, their password
is mailed to them (privacy requirement & upcoming Federal
Law).  The estimated time for this transaction is 6 days.

The flaw manifested itself when a user registered on the
site, and then, in the same browser session, logged in 
for the very first time, which of course, was during 
testing.  The flaw could not be tracked down.  During 
the risk analysis of the flaw, the consensus was:  "This 
will have zero impact to our members as everyone knows 
Windows can't stay up for 6 days."

I'm not kidding!  This is what business people are 
saying about Windows.

"We are not Microsoft bigots, we are Linux enthusiasts."

George