Microsoft slams Google for publishing vulnerability in Windows 8
Senior Director of the Microsoft Security Response Center, Chris Betz, said in a blog post that Google knew Microsoft had a fix in the pipeline and was due to be released on "Patch Tuesday", however, Google went ahead with the disclosure just two days out, despite being asked not to do so.
In a post published on Google's security research site earlier, a researcher disclosed the vulnerability and how to execute the flaw. The vulnerability allows for an elevation of privilege in Windows 8.1, an example application was also included that could launch calc.exe using the method.
Betz argued that responding to "security vulnerabilities can be a complex, extensive and time-consuming process" and that Google should be more flexible and be willing to coordinate with other companies in the interest of the millions of people who depend upon on the software.
The Google researcher earlier defended the disclosure, saying they waited 90 days before letting the world know how to exploit it, following their company's public disclosure philosophy, which is meant to pressure companies into fixing vulnerabilities more quickly.
Betz argued that privately disclosed vulnerabilities are more likely to be fixed and less likely to be exploited by "cybercriminals" than ones that are publicly disclosed.
Google is unlikely to change it long-held philosophy though.
Posted:
Related Forum: PC General Forum
Source: http://www.neowin.net/news/microsoft-slams-google-for-publishing-a-security-vulnerability-in-windows-81
Related Articles
Comments
PintPosted:
Microsoft need to get off there butts and think about their customers who are at risk by this vulnerability
MusketPosted:
I can see why microsoft is mad. They can lose alot of money if users know they arn't completely protected.
GrownPosted:
Miss Microsoft needs to relax, lol. They're still rich and growing.
This is pretty funny to read lol. Microsoft is mad but still rich.
FlutterPlebPosted:
"There's a flaw on our system, we'll tell you how to exploit it, oh! And we're not gonna fix it :trollin:"
Latest Downloads
- 01. Jalopy: SaveGame (Pumped up LaikaGT)(0)
- 02. Assassin's Creed 3: Save Game (Game completed 8%, until Chapter 4)(3)
- 03. Supermarket Simulator: SaveGame (Quick start, 172 day, 65lvl)(0)
- 04. GoreBox: SaveGame (Ancient village of the Paleozoic era)(0)
- 05. Need for Speed: Most Wanted (2005) - SaveGame (0% career, 2 BMWs in the garage)(0)
- 06. [EU] CARX DRIFT RACING ONLINE - PROGRESS SAVE 6 SP DUO (CUSA15633)(5)
- 07. Fallout Shelter Modded Save PC(1)
- 08. Remember Me: SaveGame (The Game done 100%)(0)
- 09. The Long Drive: SaveGame (American pickup)(0)
- 10. Goemon's Great Adventure (US / NTSC) - Nintendo 64 Game Save(1)
- 11. The Long Drive: SaveGame (blue VW Beetle)(0)
- 12. Deadly Creatures | Complete Savegame(1)
- 13. Driift Mania | 100% Savegame(0)
- 14. LostWinds: Winter of the Melodias | 100% Savegame(0)
- 15. Lost Winds | 100% Savegame(0)
Latest Tutorials
- 01. The Redress Of Mira 100% Walkthrough | Trophy & Achievement(492)
- 02. Russian Pinocchio Quick Trophy Guide(599)
- 03. Venatrix Quick Trophy & Achievement Guide(589)
- 04. Call of the Sea 100% Platinum Walkthrough(699)
- 05. Wire Lips 100% Platinum Walkthrough(681)
- 06. The Expanse 100% Platinum Walkthrough | Trophy & Achievement(656)
- 07. Doctor Who: The Edge of Reality - PS4 Platinum P/Thru(577)
- 08. Doctor Who:The Lonely Assassins - 100% Guide(519)
- 09. DAYMARE 1998 PS4 - Full game 100% TROPHY WALKTHROUGH(492)
- 10. Stray Platinum Walkthrough | Trophy & Achievement Guide(504)
- 11. Raji: An Ancient Epic | Complete Gameplay Walkthrough(654)
- 12. Corpse Killer: 25th Anniversary Edition - Longplay(654)
- 13. Song of Horror: Complete Edition Gameplay Walkthrough(430)
- 14. Remoteness 100% All Trophies Walkthrough(643)
- 15. Detective Inspector Mysterious Clues Platinum Walkthrough(538)
"Microsoft slams Google for publishing vulnerability in Windows 8" :: Login/Create an Account :: 26 comments