3 ms·

> Has Google ever released info about an unpatched critical bug on their own systems/applications? It seems pretty unreasonable to fault Google if the answer i

• jacquesm 10y ago
  Advance knowledge helps: such as: knowing well prior to the initial report that your people are working on something. Or you might decide not to record the flaw until a fix is in the works. There is so much missing in terms of transparency here. For instance: was there positive confirmation the message was received by the right people at the vendor? Was there any attempt at communication as the expiry date drew close? Of course the onus is technically on Microsoft but Google has been at this before and it did not look clean to me at the time. I can't believe I'm defending MS here. I'm all for competitors keeping each other sharp but it helps to keep in mind they're competitors first. One possible way around this is to set up something like project 0 independent of Google, Microsoft and so on and have all of them commit to contributing funding to keep it alive.