Microsoft criticizes Google for 'gotcha' approach to bug disclosure

Microsoft has criticized Google for deliberately publishing details of a vulnerability in Windows 8.1 two days before a fix was due to be released. Google published details of the bug as part of its Project Zero initiative, which it claims gives companies enough advanced warning — 90 days exactly — to fix vulnerabilities before they go live. Microsoft, however, says it told Google that it was planning to introduce a fix using its "well known and coordinated Patch Tuesday" update, and that the search giant's behavior endangers customers.

"Although following through keeps to Google’s announced timeline for disclosure, the decision feels less like principles and more like a "gotcha," with customers the ones who may suffer as a result," w...

Continue reading…



Continue reading...