3 ms·
No, they did what any security researcher would do, Google or not. To be honest, their call is a perfect one. On the one hand, you don't tell anyone other than
by Ph0X 10y ago
No, they did what any security researcher would do, Google or not. To be honest, their call is a perfect one.
On the one hand, you don't tell anyone other than Microsoft and wait for them to patch as many people as possible while the bug is ACTIVELY being exploited and possibly thousands are getting hacked by the hour.
On the other hand, you tell people, and many are now able to patch it themselves RIGHT NOW, force an update on their machine, not use affected software, and potentially avoid a hack that would've happened if they didn't know.
So yes, it's not black and white, but I think their call of waiting a week was an okay one.