Ironworks Gaming Forum - Microsoft Discloses Software Flaw

Ironworks Gaming Forum (http://www.ironworksforum.com/forum/index.php)

- General Conversation Archives (11/2000 - 01/2005) (http://www.ironworksforum.com/forum/forumdisplay.php?f=28)

- - Microsoft Discloses Software Flaw (http://www.ironworksforum.com/forum/showthread.php?t=79512)

It's Thursday, time for the weekly M$ software bug report!

Microsoft Discloses Software Flaw From Wired magazine & the Associated Press.

Just to build your confidence in M$:

Quote:

A researcher with eEye Digital Security, Riley Hassell, found the Web server flaw in mid-April during testing of eEye's own hacker-defense software, but the discovery was kept closely guarded under an agreement with Microsoft until Wednesday.

Italics mine.

Makes you feel warm and fuzzy, don't it?
In the defense of M$, according to them, only about one-third of the world's web sites are running this version of their server software. So, they were only putting 33% of their marketshare at risk by holding this information. Oh well, no big deal, I guess.

Apple uses Apache. :D
Think Different.

That or they were protecting that 33% by not releasing info about it to anyone that might wish to exploit it. did they provide a solution when they made the announcement? I know it would be pretty irrisponsible to release info about a security failure to the general public before you provide a way to fix it.

<font color = lightgreen>RudeDawg, it's a shame you don't get paid for the M$Watch. It would almost be a full-time job! [img]graemlins/laugh3.gif[/img] </font>

Much as I dislike good old Micro$haft, I agree, Slackerboy is probably right. [img]smile.gif[/img]

Have to agree with Slackey here as well.
You don´t release vital info that is hurtful to criminals either ;)

Personally, I have had to patch alot of Mac´s here at the office lately as well.. They think different as well, only problem is that developers and mean people don´t! ;)