Re: Microsoft Windows Help Centre Handles Malformed Escape Sequences IncorrectlyFrom: Benjamin Franz <jfranz () freerun com> Date: Fri, 11 Jun 2010 08:01:08 -0700
On 06/11/2010 02:40 AM, Christian Sciberras wrote:
In my humble opinion, he could have waited a couple more days just in
case Microsoft decided to do the unprecedented.
In which case, I progressive change of policies at Microsoft are
better than a couple of users getting hacked from pron sites...
As I said: Travis indicated in his original post he believes the exploit
*was already being used in the wild*. So NOT releasing it wouldn't
protect users. It would just keep it "secret" from everyone except
Microsoft *and the black hats who were already using it*. While
maintaining a false air of intact security for everyone else.
That is better, how?
Full-Disclosure - We believe in it.
Hosted and sponsored by Secunia - http://secunia.com/