[adorno]

Because the last person you want checking code for mistakes is the person who wrote it

It's very doubtful that the same person that wrote the code would be the same that would be doing the security code. The original coders would be around as consultants, but, not likely to write the anti-malicious code. With a company as large as Microsoft, they can afford to have thousands of people doing the original coding of Windows, and perhaps hundreds of people doing the quality assurance and security checking.

So, who does the checking of the anti-virus/anti-malware checking for Norton or AVG or Avast? Perhaps the same people that wrote the original code?

[dayglored]

> who does the checking of the anti-virus/anti-malware checking for Norton or AVG or Avast?

Good question. I have no idea.

But I did look up connections between Microsoft and the big code analysis outfits, and found that Coverity lists Microsoft as a customer. Obviously that doesn't say anything about MS using Coverity to check Windows in particular. But they must use them for something -- Coverity is damned expensive software, and it enjoys a good reputation in the business, and so it's nice to know MS uses them for whatever they use them for.