3 ms·
Quick question on the timings of this. The report says that "This bug is subject to a 90 day disclosure deadline." - does that mean it was discovered 90 days ag
by pedrow 9y ago
Quick question on the timings of this. The report says that "This bug is subject to a 90 day disclosure deadline." - does that mean it was discovered 90 days ago and has been published now, or it was discovered on May 6 (as dates on the comments seem to suggest) and Microsoft has responded very quickly? In either case it seems strange not to have waited a couple more days because (for my system, anyway) I was still running the vulnerable version even after the report was made public.
- mattcoles 9y agoIt was discovered May 6th. MS has responded and fixed very quickly. I'm not overly familiar with Windows but I've seen multiple people saying that Defender patched itself without requiring any action on their part.
- iofiiiiiiiii 9y agoTheir policy is to publish when a fix is available. Yes, Microsoft responded very quickly in this case.
- ifdefdebug 9y agoThey disclosed after Microsoft had released an advisory for this issue (see comment 11) so it was public anyway.