Google's Project Zero exposes unpatched Windows 10 lockdown bypass
1–10 of 126 posts
Re: Google's Project Zero exposes unpatched Windows 10 lockdown bypass
#2Original source: https://bugs.chromium.org/p/project-zero/issues/detail?id=15...
Re: Google's Project Zero exposes unpatched Windows 10 lockdown bypass
#3Denying the deadline extension to May 8th [1] is quite a dick move by Google, considering that it took them 6 months to fix the extremely harmful sitemap ranking bug in their search engine[2]. And after they fixed the bug, they only paid peanuts to the researcher for a bug that could've cost Google's customers tens of millions in misplaced ad campaigns.
1: https://bugs.chromium.org/p/project-zero/issues/detail?id=15...
2: http://www.tomanthony.co.uk/blog/google-xml-sitemap-auth-byp...
Re: Google's Project Zero exposes unpatched Windows 10 lockdown bypass
#4Why 90 days? Why not 30, 14, or 7?
Microsoft might have requested responsible disclosure for exploits affecting Windows, but what gave Google the right to set a deadline?
I feel the 2 US companies have a friendly competition with each other which can help secure their systems.
Re: Google's Project Zero exposes unpatched Windows 10 lockdown bypass
#5Original source: https://bugs.chromium.org/p/project-zero/issues/detail?id=15...
Could someone who’s more knowledgeable about how Windows works than I am provide a semi-technical explanation of how this works?
Re: Google's Project Zero exposes unpatched Windows 10 lockdown bypass
#6Why 90 days? Why not 30, 14, or 7? Microsoft might have requested responsible disclosure for exploits affecting Windows, but what gave Google the right to set a deadline? I feel the 2 US companies have a friendly competition with each other which can help secure their systems.
Nobody has any right to set a deadline. The 90 days is merely Google being courteous.
Re: Google's Project Zero exposes unpatched Windows 10 lockdown bypass
#7Why 90 days? Why not 30, 14, or 7? Microsoft might have requested responsible disclosure for exploits affecting Windows, but what gave Google the right to set a deadline? I feel the 2 US companies have a friendly competition with each other which can help secure their systems.
Nobody has any right to set a deadline. The 90 days is merely Google being courteous.
For something installed on so many devices, 90 days seems like an incredibly tight timeframe to change anything.
Re: Google's Project Zero exposes unpatched Windows 10 lockdown bypass
#8Denying the deadline extension to May 8th [1] is quite a dick move by Google, considering that it took them 6 months to fix the extremely harmful sitemap ranking bug in their search engine[2]. And after they fixed the bug, they only paid peanuts to the researcher for a bug that could've cost Google's customers tens of millions in misplaced ad campaigns. 1: https://bugs.chromium.org/p/project-zero/issues/detail?id=15.…
It seems that the researcher was relatively happy with the outcome. They could have certainly gone public far earlier if they had chosen to do so.
Re: Google's Project Zero exposes unpatched Windows 10 lockdown bypass
#9Denying the deadline extension to May 8th [1] is quite a dick move by Google, considering that it took them 6 months to fix the extremely harmful sitemap ranking bug in their search engine[2]. And after they fixed the bug, they only paid peanuts to the researcher for a bug that could've cost Google's customers tens of millions in misplaced ad campaigns. 1: https://bugs.chromium.org/p/project-zero/issues/detail?id=15.…
> that could've cost Google's customers tens of millions in misplaced ad campaigns
You're comparing an operating system security bug to advertisers' lives being made inconvenient.
Re: Google's Project Zero exposes unpatched Windows 10 lockdown bypass
#10Denying the deadline extension to May 8th [1] is quite a dick move by Google, considering that it took them 6 months to fix the extremely harmful sitemap ranking bug in their search engine[2]. And after they fixed the bug, they only paid peanuts to the researcher for a bug that could've cost Google's customers tens of millions in misplaced ad campaigns. 1: https://bugs.chromium.org/p/project-zero/issues/detail?id=15.…
[deleted]