Google discloses another Windows security issue after deadline exceeded
1–10 of 152 posts
Re: Google discloses another Windows security issue after deadline exceeded
#2Doubling the deadline to 180 days is probably reasonable IMO.
Re: Google discloses another Windows security issue after deadline exceeded
#3Doubling the deadline to 180 days is probably reasonable IMO.
Might be, but I'm sure if it's important they would allocate resources to getting it fixed ASAP.
I doubt the fix for this and testing takes 90 days, or even 45 days.
Re: Google discloses another Windows security issue after deadline exceeded
#4Doubling the deadline to 180 days is probably reasonable IMO.
Might be, but I'm sure if it's important they would allocate resources to getting it fixed ASAP. I doubt the fix for this and testing takes 90 days, or even 45 days.
This apparently _does_ take that long, but should absolutely not.
Re: Google discloses another Windows security issue after deadline exceeded
#5Doubling the deadline to 180 days is probably reasonable IMO.
Half a year? I wouldn't assume these guys at Google are the only ones discovering these vulnerabilities. Longer period won't improve Windows security. All it can do is keep better image of MS.
Re: Google discloses another Windows security issue after deadline exceeded
#6Earlier quoted context omitted.
Might be, but I'm sure if it's important they would allocate resources to getting it fixed ASAP. I doubt the fix for this and testing takes 90 days, or even 45 days.
This apparently _does_ take that long, but should absolutely not.
Right. If they extended it to 180 days, it would take them 200 days to fix it. 365 days ~> 400 days.
Re: Google discloses another Windows security issue after deadline exceeded
#7Doubling the deadline to 180 days is probably reasonable IMO.
Might be, but I'm sure if it's important they would allocate resources to getting it fixed ASAP. I doubt the fix for this and testing takes 90 days, or even 45 days.
From the comments in the article
Microsoft informed us that a fix was planned for the January patches but has to be pulled due to compatibility issues. Therefore the fix is now expected in the February patches.
So, they met the deadline and fixed the vulnerability, but due to compatibility issues had to pull it before being released through Windows Update.
Re: Google discloses another Windows security issue after deadline exceeded
#8Earlier quoted context omitted.
Might be, but I'm sure if it's important they would allocate resources to getting it fixed ASAP. I doubt the fix for this and testing takes 90 days, or even 45 days.
This apparently _does_ take that long, but should absolutely not.
Either Google is sending Microsoft bug reports like rapid-fire, and Microsoft has already fixed dozens of them that we haven't found out about - or for some strange reason, Microsoft didn't fix the only two bugs Google reported in the last 90 day period.
If that's the case, then either Microsoft forgot about them, or they carefully orchestrated a PR scandal against Google (wouldn't be the first time - like the time they built an unauthorized Youtube app that Google specifically told them not to build, and then notified the whole media about it, putting words in the reporters' mouths).
Re: Google discloses another Windows security issue after deadline exceeded
#9Doubling the deadline to 180 days is probably reasonable IMO.
Other companies fix such bugs in days.