Burnett, who specializes in Windows security, is the author of
Hacking the Code: ASP.NET Web Application Security, co-author of
Stealing The Network: How to Own the Box, and co-author of
Maximum Windows 2000 Security. In the 30-minute interview with Ziff Davis Media executive editor Mike Elgan, Burnett addresses weaknesses in current password practices, including what's wrong with the "secret question" that most sites use.
Burnett suggests a software security "consitution" that establishes the acceptable rules for application development. Additionally, he discusses factors that are changing in the hacking community -- pointing out that it's not the skills that have changed, but the motivations for hacking that have evolved. "We're writing the code today for tomorrow's security threats," Burnett notes.
Watch the interview in Windows Media Player by clicking
here.
Related stories: