Why does MS struggle so much with security?
Why does everyone struggle so much with security?
Google's Project Zero exposes unpatched Windows 10 lockdown bypass
121–126 of 126 posts
Re: Google's Project Zero exposes unpatched Windows 10 lockdown bypass
#122Re: Google's Project Zero exposes unpatched Windows 10 lockdown bypass
#123Why does MS struggle so much with security?
They do not struggle - Microsoft have one of the more sensible and well functioning security organizations in the software world. This just is not a very important bug.
Re: Google's Project Zero exposes unpatched Windows 10 lockdown bypass
#124Earlier quoted context omitted.
First of all, Google has no responsibility to give any period of time. It isn't a "dick move". Second, the researcher in question: 1) Never gave a required date for disclosure. 2) Upon requesting the right to disclose, was told no and he followed suit. 3) Was initially offered a bug bounty of $1300, which was upgraded to $5000. He apparently never bartered on that issue at all. So your entire post was completely irre…
Bartering on reward money before disclosure can easily look like -or be- blackmail.
Not true. Bartering in this sense meaning suggesting that the reward is at a level consistent with a non-critical bug while this is. Not "Pay me more or I'll release it".
Re: Google's Project Zero exposes unpatched Windows 10 lockdown bypass
#125Earlier quoted context omitted.
Why does everyone struggle so much with security?
ChromeOS been secure since the get go. Just seems weird Google can do it and MS struggles so much. Now you get GNU/Linux out of the box but security intact.
Are you aware that ChromeOS comes without the GNU userland?
Re: Google's Project Zero exposes unpatched Windows 10 lockdown bypass
#126Earlier quoted context omitted.
He might have or not but I have. Not as complex but similar mission critical and distributed. 90 days is nothing as outlined. Once you go life or death situations, regulatory environment applies, backward compatability matters, ... Everything takes endless. It is not code, commit, test and deploy. Intake, Risk Analysis, project planning, approvals, alignments, etc. So many more processes. We should not fool ourselves…
>>Welcome to Enterprise development. That is assuming whoever you are replying to is foreign to enterprises.
In that case - if you are not - congrats! Seems like you ended up in well organized places :)