Gates Seeks to Plug Security Holes

Bill Gates, the chairman of Microsoft, has redeployed 7,000 of his computer programmers from work on new software programmes to fixing security holes in the existing Windows operating systems.

In an emailed memo, Mr Gates told programmers that their first priority should be ensuring the security of Windows 2000 and Windows XP. The move follows a series of security flaws in the systems, including one that let hackers remotely-control computers through the internet without their victims knowing.

The urgent "code review" includes a two-day training seminar for all programmers called "writing secured code," aimed at making sure embarrassing bugs do not show up in the future.

The Seattle Times reported that, in his memo to workers, Mr Gates said: "All those great features won't matter unless customers trust our software. So now, when we face a choice between adding features and resolving security issues, we need to choose security".

The most serious bug found so far allowed a hacker to run a programme on any computer by luring the user on to a website. Hackers used the programme to access users' credit card numbers or bank details and pass them on to fraudsters.

Russian researchers found the flaw, called a "buffer overrun," for which Microsoft has now released a fix that can be downloaded from the company's site.

Michael Silver, a computer industry analyst, told USA Today that users are tired of the constant security alerts. "Companies don't want new features, they want products that work and are secure," he said.

However, there was a warning that Microsoft may not be able to avoid security lapses in the future, despite Mr Gates's order to his employees.

Wayne Rash, of industry magazine Software Development Times, said: "It's like trying to turn an oil tanker with an oar. I don't think two days of seminars and a couple of weeks of downtime will have a significant effect".