> With things like this you have to be flexible Not really. Google offered Microsoft the same thing they offer every vendor they find a vulnerability in: ninet

> With things like this you have to be flexible Not really. Google offered Microsoft the same thing they offer every vendor they find a vulnerability in: ninety days. If Microsoft couldn't fit a fix into an entire quarter's worth of development, that's on them. Let vendors set the schedule for security fixes, and they will prioritize their own schedules over keeping their house in order. There is too much evidence of this to believe otherwise.