|
|
User Controls
|
New User
|
Login
|
Edit/View My Profile
|
|
|
|
ActiveMac
|
Articles
|
Forums
|
Links
|
News
|
News Search
|
Reviews
|
|
|
|
News Centers
|
Windows/Microsoft
|
DVD
|
ActiveHardware
|
Xbox
|
MaINTosh
|
News Search
|
|
|
|
ANet Chats
|
The Lobby
|
Special Events Room
|
Developer's Lounge
|
XBox Chat
|
|
|
|
FAQ's
|
Windows 98/98 SE
|
Windows 2000
|
Windows Me
|
Windows "Whistler" XP
|
Windows CE
|
Internet Explorer 6
|
Internet Explorer 5
|
Xbox
|
DirectX
|
DVD's
|
|
|
|
TopTechTips
|
Registry Tips
|
Windows 95/98
|
Windows 2000
|
Internet Explorer 4
|
Internet Explorer 5
|
Windows NT Tips
|
Program Tips
|
Easter Eggs
|
Hardware
|
DVD
|
|
|
|
Latest Reviews
|
Applications
|
Microsoft Windows XP Professional
|
Norton SystemWorks 2002
|
|
Hardware
|
Intel Personal Audio Player
3000
|
Microsoft Wireless IntelliMouse
Explorer
|
|
|
|
Site News/Info
|
About This Site
|
Affiliates
|
ANet Forums
|
Contact Us
|
Default Home Page
|
Link To Us
|
Links
|
Member Pages
|
Site Search
|
Awards
|
|
|
|
Credits
©1997/2004, Active Network. All
Rights Reserved.
Layout & Design by
Designer Dream. Content
written by the Active Network team. Please click
here for full terms of
use and restrictions or read our
Privacy Statement.
|
|
|
|
|
|
|
|
Time:
00:00 EST/05:00 GMT | News Source:
Network World |
Posted By: Robert Stein |
Google has a habit of telling the world when it finds a security problem in Microsoft software. The officials in Redmond like to wring their hands and complain about Google putting Microsoft customers at risk, but eventually they just acknowledge the bugs and fix them as best they can.
But there's nothing stopping Microsoft researchers from poking through Google software and finding bugs of their own. And that's just what they're doing now, announcing a new vulnerability disclosure policy for non-Microsoft products, and kicking off the program today with two security reports covering products made by none other than Google.
|
|
#1 By
15406 (209.87.228.158)
at
4/21/2011 8:02:00 AM
|
I'm of two minds on this. More eyes looking and more bugs fixed is always good, but considering MS's lousy security track record, shouldn't these guys be spending more time looking at MS products??? I also have to ask in this case, "What's the point?" MS announcing bugs in Chrome that were fixed last Sept and Dec?? Do we really need MS telling us about 4-6 month old fixed bugs in someone else's software? Or is this just another classic MS FUD job?
|
#2 By
95132 (74.160.83.32)
at
4/21/2011 3:53:20 PM
|
These were reported last summer to google, since they now have all been fixed, ms released the information so those still on the outdated versions can be aware of it, it's called responsible disclosure and MS practicing what they preach on that front regardless of if you agree with it or not. Do you ever give your bias a day off?
|
#3 By
218115 (68.44.220.197)
at
4/22/2011 7:23:53 AM
|
Yes... February 30th!
|
#4 By
15406 (99.240.77.173)
at
4/24/2011 8:14:20 AM
|
#2: You don't find it the slightest bit suspicious that MS, king of security flaws, feels it needs to announce the long-fixed bugs of its main rival? Meanwhile, Acrobat Reader gives it up on a monthly basis (for example) and MS isn't warning the world about that?
|
#5 By
95132 (74.160.83.32)
at
4/25/2011 11:04:23 AM
|
Feb 30th.. nice, myself I give try and give my bias's the weekends off.
I don't find it suspicious at all, nor a big deal, nor do I think ms was trying making a big deal out of it, simply noting it when the time was right just as their competitors do. As for adobe's latest problems the fix is out and Microsoft far as I know wasn't responsible for finding the adobe security bug so not sure why they would offer or be expected to have any extended comments, it not as if it's anything particularly new or out of the ordinary for adobe.
|
#6 By
15406 (209.87.228.158)
at
4/25/2011 11:46:44 AM
|
#5: Your assertions don't pass the smell test.
simply noting it when the time was right just as their competitors do
So, the time was right now? What makes now the right time for MS to announce old, fixed bugs in a product from it's #1 rival? Seriously, I'm looking forward to your answer. Now that the bugs have been fixed for months? Now??? To what end? btw I don't know if you're aware, but Chrome updates itself automatically. You have to go out of your way to have it not update itself, so I'm more than a little confused as to who MS thinks they're helping here. Anyone using Chrome already has the fixes, so tell me again why MS is doing this? Because, from here, it looks like a self-serving attempt to downplay the serious holes in IE by making a faux comparison to other browsers with significantly less security issues... "Yes, we know that IE gives it up monthly but we wanted to point out an ancient bug in Chrome so that you'll think all browsers are the same from a security standpoint and you may as well stick with IE because it's no worse than the others..."
|
#7 By
95132 (208.61.68.10)
at
4/25/2011 10:07:59 PM
|
"so I'm more than a little confused as to who MS thinks they're helping here"
--
Was the time right for Google in December (or maybe it was early January I forget) to release info and tool showing unpatched holes in IE, as well as some other browsers?
As for timing, now that the current version has patched all the holes why not now? BTW there are people out there using an outdated chrome, a minority for sure but they exist. You're going out of your way to look for conspiracies and malcontent where there are none. Bugs reported to google, bugs fixed many months later, bugs that were fixed disclosed month later, yawn. I know what it looks like to you, not only because you already stated it in the first post but having read your comments here somewhere on the order of the last 5 years (or so) it's clear just about anything Microsoft ever does you will look to find fault with in some manner or another, real or perceived. It gets pretty stale as has commenting on this post.
|
#8 By
15406 (209.87.228.158)
at
4/26/2011 8:14:19 AM
|
#7: You're comparing apples to oranges. Google was disclosing active, in-the-wild bugs to warn users and pressure MS to fix the things. MS isn't doing anything similar here other than casting stones at a rival.
As for timing, now that the current version has patched all the holes why not now?
Because it makes no sense if MS is to be believed at its word. Who is the audience for their announcements? IE users don't care, and Chrome users are already patched. This is just posturing.
BTW there are people out there using an outdated chrome, a minority for sure but they exist.
And MS cares so much about this subset of Chrome users that they feel the need to warn them about long-fixed bugs??? Please.
You're going out of your way to look for conspiracies...
No conspiracy here, just MS being MS. You appear to be going out of your way to come up with explanations for what they're doing that, frankly, don't really hold water. Don't go down the path that parkkker and St. Ketchum of Redmond followed, where you're so desperate to slap me down that you'll take on bizarre points of view just to be contrary, or so desperate to defend MS that you'll dismiss or deny their bad deeds.
It gets pretty stale as has commenting on this post.
No, don't pull the ripcord and bail now. I'm still interested in your theories of Microsoft's concern for unpatched Chrome users.
|
#9 By
95132 (208.61.68.10)
at
4/26/2011 4:25:35 PM
|
<i>You're comparing apples to oranges. Google was disclosing active, in-the-wild bugs</i>
No I'm not, and you didn't answer the question. It's completely relevant, had Microsoft done the same it would have been an irresponsible action in MS's and many others minds, and you would be posting about how Microsoft violated their own mantra to take a shot a Google,.
Which is it latch, did you want Microsoft to expose the bugs to the public before they were fixed violating their own position or after they were patched and folks (most anyway) had migrated to the patched releases? Also which is it you want, a company to have a policy about security bugs there employees find in third party products or just let each employee do whatever they feel like. You can't have these things both ways. As you should know I don't post just to be contrarian, nor often, and when I do about 1/2 the time it's not in particular favor of Microsoft.
Over and out and moving on, feel free to have the last word.
|
#10 By
15406 (209.87.228.158)
at
4/27/2011 8:30:51 AM
|
#9: It's completely relevant, had Microsoft done the same it would have been an irresponsible action in MS's and many others minds
It's moot since this scenario isn't very likely when flipped around. Google has demonstrated that it reacts quickly to bugs, whereas MS has a bit of a rep for sitting on some bugs and only doing something about it once they've been publicly embarrassed by a full disclosure.
Which is it latch, did you want Microsoft to expose the bugs to the public before they were fixed violating their own position or after they were patched and folks (most anyway) had migrated to the patched releases?
That's a false dichotomy. If vendor A with the bug fixes it in a prompt manner, there is no need for vendor B to announce anything months later. Vendor A can credit B in the bug notes if it feels like it. I'm not aware of any other vendor that reports on the security issues of a competitor long after the fact. You're trying to portray this behaviour as normal when I can't think of anyone else who does that. Can you? When was the last time Google announced bugs that MS fixed last year? And, if as you say this is perfectly normal, why isn't MS also reporting on all the long-fixed bugs from Apple, Adobe, Oracle, Mozilla, SAP, HP, etc etc etc etc etc? Oh right, because they aren't MS' #1 competitor right now.
|
#11 By
868449 (27.159.225.82)
at
12/8/2012 4:55:48 PM
|
An impressive share, I just given this onto a colleague who was doing just a little analysis on this. And he in reality bought me breakfast due to the fact I found it for him.. smile. So let me reword that: Thnx for the treat! But yeah Thnkx for spending the time to discuss this, I really feel strongly about it and really like reading even more on this subject. If feasible, as you turn out to be expertise, would you mind updating your blog with far more details? It truly is highly beneficial for me. Big thumb up for this weblog post!
<a href=http://www.freerunning3.com/nike-lunar-elite/>Nike Lunar Elite for kvinder</a>
<a href=http://www.newjordansoutlet.com/kids-jordans-air-max-c-295.html>discount cheap air jordan shoes</a>
|
#12 By
958801 (190.205.107.163)
at
12/15/2012 8:44:22 AM
|
Oh my goodness! an astonishing article dude. Thank you But I'm experiencing issue with ur rss . Do not know why Unable to subscribe to it. Is there anyone finding identical rss challenge? Any individual who knows kindly respond. Thnkx
<a href=http://jerseys205.10001mb.com/>Custom NFL Jerseys</a>
|
|
|
|
|