Security experts gave mixed reviews Thursday to the way in which a software-reliability company disclosed a bug in Microsoft's newest tools for building applications for its .Net framework and Windows operating system. Late Wednesday, Dulles, Va.-based Cigital told The Wall Street Journal of a flaw in Microsoft's latest tools for creating Windows and .Net programs after giving the software giant a little more than 12 hours to respond. Some security experts criticized the quick public announcement as irresponsible. "There is no way that Microsoft could fix this in a day," said Al Huger, vice president of engineering for vulnerability-information company SecurityFocus. "Full disclosure has to be coupled with responsible disclosure."
|