4 ms·

> As of today, we still have not received any information that these exploits have been used to obtain customer data. We know our customers are eager for update

• detaro 9y ago
  The original Project Zero announcement also contained the fact that they aren't aware of in-the-wild exploits, does that mean they say they themselves are overreacting, or are they merely providing information?
  • a012 9y ago
    It's too early to say, it's not known _yet_. Are you waiting for a first case to fix your bugs?
    • detaro 9y ago
      Where are they saying anything about not fixing bugs? And like it or not, with the issues of the available patches breaking machines, virus scanner incompatibilities, ..., organisations will have to make decisions about when to patch.
      • a012 9y ago
        I said they said like "the world is just overreacted, and if you insist to promptly applying patch they'll provide". It's about their tone in their first statement. And you're misleading my point here.
        • detaro 9y ago
          And I really do not see how you get a "the world just overreacted" tone from this post or specifically your quote, I did not intend to mislead from your point. Their overall communication strategy has been pretty bad, but this instance seems fine to me. It's providing information. I guess they should even provide more information against patching, since they don't talk about the issues fixes can cause.
        • hoffs 9y ago
          It seems like you're the one misleading and claiming something that isn't there.
• tlrobinson 9y ago
  It always bugs me when companies say they don't have any evidence of an exploit being used. It's completely meaningless without knowing how hard they looked. https://en.wikipedia.org/wiki/Argument_from_ignorance https://en.wikipedia.org/wiki/Argument_from_ignorance