5 ms·
The disclosure is irresponsible. The post published today contains information on how to exploit the bug with a working code for POC, confirmed to work. The w
by user5994461 10y ago
The disclosure is irresponsible.
The post published today contains information on how to exploit the bug with a working code for POC, confirmed to work.
The windows patch is published today. It's gonna take weeks to propagate to the windows computers around the world.
- joshuamorton 10y agoThe windows patch contains mitigation techniques for the vulnerability, likely enough for an attacker to to reverse engineer. Its better to have the details out in the open so that users can take action to mitigate in the meantime.
- JonathonW 10y agoWindows Defender updates (malware definitions and engine updates) don't run on the same schedule as other Windows updates-- they're downloaded at least three times daily, and installed immediately once they're downloaded. IIRC, they're also not disabled by the UI switch that disables other Windows updates. A user would have to go pretty far out of their way in mucking around with things that shouldn't be mucked around with in order for this update to take "weeks" to propagate to them.