11–20 of 165 posts
Google is just a bunch of hypocrites. Do you remember what happened when they're new ReCaptcha was reverse engineered? Let me remind you: https://news.ycombinator.com/item?id=8728336 Disclaimer: I work for TAGA (The Arrogant Google Assholes)
Personally, I don't think Google should bend to the internal red tape of other companies. You are going to start maintaining this long list of exceptions based on other peoples priorities. There is a published 90 day policy, they gave 90 days notice, figure it out. There is also details missing about the communication between Google and Microsoft. Like when they asked for an extension, etc.
Google is just a bunch of hypocrites. Do you remember what happened when they're new ReCaptcha was reverse engineered? Let me remind you: https://news.ycombinator.com/item?id=8728336 Disclaimer: I work for TAGA (The Arrogant Google Assholes)
Do you know if Microsoft actually talked to Google about waiting a couple more days, or are MS just saying that in their press release?
>"We asked Google to work with us to protect customers by withholding details until Tuesday, January 13, when we will be releasing a fix," Microsoft's senior director of research Chris Betz said in a blog post.
This is crazy. By now the world really knows about Microsoft's second-tuesday-of-the-month policy for patches. If Google isn't willing to wait the two additional days such that the patch can be deployed within the regular update window, this means that Google effectively gives MS only 60 days to react and fix issues (because once they missed the second patch day, the vulnerability will be disclosed before the third).…
Earlier quoted context omitted.
Didn't they give MS 90 days to patch? (That's two or three patch Tuesdays).
If Google insists on exactly 90 days without any consideration for patch Tuesdays, this means that, if unlucky, MS will only get 60 days (if they got the announcement right after a patch Tuesday)
This is crazy. By now the world really knows about Microsoft's second-tuesday-of-the-month policy for patches. If Google isn't willing to wait the two additional days such that the patch can be deployed within the regular update window, this means that Google effectively gives MS only 60 days to react and fix issues (because once they missed the second patch day, the vulnerability will be disclosed before the third).…
So is this what the disclosure issue is going to look like when packaged up for the masses? No historical context on how the ongoing disagreements are the latest in decades of ongoing discussion? Or any mention of the events that shaped the popular ideas today? Just a sour blogpost and some bland quotes of agreement and disagreement from an internet so large you can always find quotes for the positions you want to portray. We're so fucked.
Edit: And apparently it worked on us too. Of course external messaging is going to paint the other guy as the unreasonable one.
This is crazy. By now the world really knows about Microsoft's second-tuesday-of-the-month policy for patches. If Google isn't willing to wait the two additional days such that the patch can be deployed within the regular update window, this means that Google effectively gives MS only 60 days to react and fix issues (because once they missed the second patch day, the vulnerability will be disclosed before the third).…
What if other people already know about the breach? Would you prefer the joy of ignorance, or would you rather protect yourself by some means?
I am in general a huge Google fan, but in using Google services I realize that I am not much of a customer (I purchase extra storage and buy stuff on the Play Store); advertisers are the customers.
Microsoft on the other hand gets its money from computer users and it seems like they have a much more customer focused mentality.