Valentine actually dictated it, but it did actually happen. Brian&#x27;s mail was something along the lines of, &quot;I&#x27;m tired of reading about the latest security vulnerability in the NYT, so...&quot;. And I think it was six weeks, not a month.<p>Source: me, who worked there (in VS, not Windows) at the time.<p>EDIT: oh, yeah, forgot about the Gates mail. References are buried in this link: <a href="http:&#x2F;&#x2F;www.microsoft.com&#x2F;security&#x2F;sdl&#x2F;story&#x2F;#chapter-1" rel="nofollow">http:&#x2F;&#x2F;www.microsoft.com&#x2F;security&#x2F;sdl&#x2F;story&#x2F;#chapter-1</a><p>I stand by the B. Valentine version, just can&#x27;t find a link.