Microsoft does it again

[pickel]

Microsoft said it learned about the vulnerability after a self-described security consultant published details to an Internet discussion list, a practice that has increasingly frustrated executives who prefer researchers to quietly work with software vendors to resolve such problems before announcing them publicly.






http://story.news.yahoo.com/news?tmp...ft_hackers&e=1

Herein lies the problem:

The consultant, ...... wrote that he tried unsuccessfully to contact Microsoft "several times" by e-mail.

Unless you are a well-connected expert, getting through to someone at M$ who will listen is a problem, like any big corporation.

Maybe they need a special website for reporting security flaws? It'd probably be their most frequented site.

Cheers
Mick

[pickel]

"Maybe they need a special website for reporting security flaws? It'd probably be their most frequented site. "

Maybe if they provided some finacial compensation to the people who find these flaws and report them, it would be benefit all of us. I'm sure they could affort to pay.

[vass0922]

Originally posted by pickel
"Maybe they need a special website for reporting security flaws? It'd probably be their most frequented site. "

Maybe if they provided some finacial compensation to the people who find these flaws and report them, it would be benefit all of us. I'm sure they could affort to pay.

Are you sure they can afford that?
That's a LOT Of flaws ya know?

[ShawnD1]

What MS really needs to do is stop paying their debug guys per hour and start paying them per bug they find.

Originally posted by ShawnD1
What MS really needs to do is stop paying their debug guys per hour and start paying them per bug they find.

Nah, as vass pointed out, they wouldn't be able to afford that.

Cheers
Mick

[ShawnD1]

Then pay them in services or something. Maybe things like company massage girls, company drinks, company _____.

[Redwolf]

Originally posted by ShawnD1
Then pay them in services or something. Maybe things like company massage girls, company drinks, company _____.

I can just see it now:

NY Times Headline:
"MICROSOFT PARTNERS WITH PLAYBOY"

Boss: Alright guys, we need a Windows 2003 server Service Pack in 2 weeks, that eliminates at least 99.9% of the bugs!

Debug guy 1: That's gonna take more than 2 weeks.

Boss: So neglect sleep!

Debug team altogether: Awwww....

Boss: What are you guys complaining about. If you get this done, Hugh Hefner has agreed to let you guys have at the playmates!

*stunned silence*

Debug team altogether: HOORAY!!!!!

Debug Guy 1: Yes!

Debug Guy 3: Oh yeah!

Debug guy 2: What are we waiting for!

Debug guy 5: The sooner we get done, the faster we get to the playmates, right?

Boss: Right!

Debug team altogether: YAY!!!!!!

-2 weeks later, 1 hour to deadline-

Debug guy 1: Only one bug left!

Debug guy 4: Which one is this?

Debug guy 2: The euro conversion bug.

Debug guy 1: Done!

Debug team altogether: YAAAAAAAAAAAAYYYYYYYYYYYYYYYYYY!!!!!!!

Debug team altogether: WE DID IT! WE DID IT!

Debug Guy 1: Playmates here we come!

-silence befalls room-

Debug guy 6: Uhhh...when was the last time we showered?

Debug guy 1: Oh my GOD!!!

Debug team altogether: AHHHHHHHHHHHHHHHHHHHHH!!!!!!!!!!!!!!!!!!!!!!!!!!!!

Debug guy 2: To the community showers!

Debug team altogether: To the community showers!

[Droppyale]

redwolf

[vass0922]

Killed 99.9% of the bugs, but created 9999 more