Secure defaults are important
If you use 10% of the features 90% of the time, the other features can be disabled
This has long been a problem with Unix systems
- Default network services include many dangerous ones
- Most systems still need field-stripping
New Microsoft security initiatives include a close examination of defaults