Flutterby™! : Microsoft apologizes

Next unread comment / Catchup all unread comments User Account Info | Logout | XML/Pilot/etc versions | Long version (with comments) | Weblog archives | Site Map | | Browse Topics

Microsoft apologizes

2001-11-19 18:31:48+00 by Dan Lyke 0 comments

In a move that completely vindicates full-disclosure of bugs and security holes, Microsoft has admitted that they knew of the latest IE bug for a week before it went public, despite earlier complaining that they first heard of the bug when it was announced to the public.

"We are obviously not going to respond instantly. We have to sieve the wheat from the chaff to determine how reliable the vulnerability warning is," said Laver. "Until we can investigate the issue, we are not going to issue a bulletin, as that would create a crying-wolf situation."

In other words: The only way to get Microsoft's attention is to publish the complete exploit, including code, otherwise they'll sit on it while they "sieve the wheat from the chaff".

[ related topics: Privacy Microsoft moron ]

comments in ascending chronological order (reverse):