3 ms·
Alice: "My bug isn't particularly severe, and there are similar issues from Bob and Carol. If it isn't going to protect customers, what is the point in fixing i
by braythwayt 9y ago
Alice: "My bug isn't particularly severe, and there are similar issues from Bob and Carol. If it isn't going to protect customers, what is the point in fixing it?"
Bob: "My bug isn't particularly severe, and there are similar issues from Alice and Carol. If it isn't going to protect customers, what is the point in fixing it?"
Carol: "My bug isn't particularly severe, and there are similar issues from Alice and Bob. If it isn't going to protect customers, what is the point in fixing it?"
- oh_sigh 9y agoThat preexisting exploit has been known since at least August 3 2017, so it's not like MS is scrambling to fix these.
- lvh 9y agoBecause attackers only need 1 of the bugs to work? The argument only tenuously holds for disclosure to begin with, but it doesn’t make sense at all for patching. Also, the other bug has been known, with POC, for more than half a year.
- VMG 9y agoit seems that cartels are sometimes very useful
- Dylan16807 9y agoFirst off, this is about disclosure, not fixing. Second, you're neglecting the time aspect. This is a valid argument: "There's a similar issue that microsoft hasn't bothered patching for months, so what's the point in keeping it secret?" This is not a valid argument: "In a few months there will be a similar issue, so what's the point in keeping it secret?" So there is no loop leading to mistakes.