Microsoft has hit out at Google for publishing details of a Windows vulnerability before they had a patch ready. The company says that Google’s actions have made “customers the ones who may suffer as a result”.
Microsoft says that Google’s ‘Project Zero’ could be jeopardising the security of Windows users.
“Specifically, we asked Google to work with us to protect customers by withholding details until Tuesday, January 13, when we will be releasing a fix. Although following through keeps to Google’s announced timeline for disclosure, the decision feels less like principles and more like a “gotcha”, with customers the ones who may suffer as a result. What’s right for Google is not always right for customers. We urge Google to make protection of customers our collective primary goal.”
With Project Zero, Google gives software companies 90 days to create a fix for any vulnerabilities before they publish details of them. Obviously in this case, Microsoft didn’t do anything about it, but now they say that they were indeed prepping a fix.
What do you think? Was Google right to do this?
Source: The Verge
Arse holes
I’m don’t blame Google on this, if M$ cared enough, they would have put the resources in to creating a patch sooner, regardless of the whole patch Tuesday thing or not.
I would blame Google for this as they never said the 90 day time line is coming up
I am pretty sure that Google would tell Microsoft if/when an issue is found as soon as it’s confirmed and let them know that they have 90 days, from there, it’s not hard to use a calender and figure out when 90 days are up and plan accordingly, Google doesn’t need to remind any company when time is nearly up.
I’m pretty sure they do cause it’s part of every terms and conditions for everything from prepaid subs to bank accounts and so on.
So unless you work for Google or Microsoft you don’t know anything. Google are meant to let the company know when the 90 days are up, it’s like lizards World of War craft they have to tell you when you’re game is nearly up or when the severs are going to be down for something
Wait, does Google’s Project Zero even have a terms and conditions? I mean, all they do is find and report security bugs and flaws, there’s no need for a terms and conditions except in the individual’s contracts.
Do you work for Google or Microsoft? If not then what do you know?
And in terms of games, no they don’t have to tell you squat, sure it’s great when they do, but they don’t have to, unless of course, it is pointed out in their terms or use or what ever. But even then, they don’t even need to have such a statement in the terms of use in the first place.
Anyways, it seems the bug itself has been fixed.
https://code.google.com/p/google-security-research/issues/detail?id=118
And I assume we won’t come to an agreement due to the way we see things so I’ll leave it here.
Reminds me of a kid who tries to do an assignment the night before and then throws a tantrum when the teacher refuses to extend the deadline she gave 3 months ago…
Good job Microsoft, you’ve just shown you have the equivalent mentality as your Xbox Live users.
You may want to take back that jab cause Microsoft and google can work together to stop you from having an email account with either of them not to mention stop you from posting on Youtube, getting onto Xbox LIVE.
Though I’m picking up you’re a PS4 DIEHARD fanboy that loves their PS4 so much that you’ll try to cram it down someone’s throat even though the new addon for the console makes it look a lot more chunky, you have just shown you’ IQ to be that of a bug with is about IQ25. I guess you have thrown a tantrum before and thrown something too. also don’t reply back to this as you’ll tracked and blocked for good
What if he owns all consoles? What if he just owns a Nintendo or PC etc. It’s asinine to make assumptions about people based upon a single comment.
And then to insult him by saying that he’s shown his “IQ to that of a bug” and end your response with, “also don’t reply back to this as you’ll tracked and blocked for good”.
Imho, if you yourself are an Xbox Live user, you’ve only proven his point, if not, then you’ve just proven your immaturity.
I’m not just an Xbox LIVE user, I’m also a PSN user along with World of War craft and a user of a few other programs that I will not go into detail cause those are private use only. All programs and memberships have Terms and Conditions that the company must abide by or they can face something that will make them have egg on their face.
It’s the same with gaming consoles besides Nintendo but they do have to inform you about new updates and such for the console, along with any computer too
“Assumptions are the mother of all mishaps” If anything you’ve only shown how low your I.Q and E.Q are. I find it ironically amusing at how you accuse me of throwing a tantrum 🙂
Anyway I don’t have accounts with either of them. Both have shown to be data-mining merchants. Believe it or not, but one can use the internet without having to sell one’s lifestory to Microsoft or Google.
“don’t reply to this as you’ll tracked and blocked for good.” Am I to understand that you are somehow going to ‘block’ me from the internet for merely having an opinion? My, my, don’t you have a bit of a god complex. By that I mean you call the kettle black while your soul is as dark as oil, making exceptions for yourself when you are guilty of the same crimes you condemn others for.
Such delusions and images of grandeur are mostly found in developing adolescences, who believe that their opinion is the only one that matters. If that is they case I recommend hastening your maturity. If you are not a teenager, than I express my utmost pity for your malformed mental development.
Ps. Message sent from Firefox, on Linux, from an account registered to an email from
ProtonMail.
I’m not just an Xbox LIVE user, I’m also a PSN user along with World of War craft and a user of a few other programs that I will not go into detail cause those are private use only. All programs and memberships have Terms and Conditions that the company must abide by or they can face something that will make them have egg on their face.
It’s the same with gaming consoles besides Nintendo but they do have to inform you about new updates and such for the console, along with any computer too about new updates to the OS that you are using, each company must abide by their own Terms and Conditions. In this case Google hasn’t even done that
so what microsoft is saying is that google should just report the problem to microsoft and then just forget about it and hope they fix it? I fail to see how this is “protecting the customer”
Google is in the wrong by publishing the data seeing as the 90 day window isn’t even up