Tag: Microsoft

  • Days of Risk

    [This was originally published on the OSVDB blog.] The last few months have seen a lot more talk about the “Days of Risk”. In short, vendors like Microsoft say the days of risk are the time between vulnerability information (or an exploit) being released and a system being patched. So if a new vulnerability is…

  • My Own PR Assault against Microsoft

    [This was originally published on attrition.org.] Infoworld broke a story on Microsoft’s plans for waging a public relations war against “linux” over taking too long to fix security vulnerabilities. The article by Kieren McCarthy outlines Microsoft’s planned smear campaign against its biggest rival, Linux, currently dubbed “Days of Risk”. With the decision to smear Linux in the media,…

  • Microsoft’s Responsible Vulnerability Disclosure, The New Non-Issue

    [This was originally published on attrition.org] For almost a decade, a debate over the concept of Full Disclosure has reared its ugly head. Carried out on BBSs, newsgroups, security conferences, mail lists, parties, coffee shops and everywhere else, the Full Disclosure debate can be called “long standing” to say the least. As with everything in the computer…

  • Full Disclosure – Effective or Excuse?

    [This was originally published on attrition.org.] A comprehensive look at the practice of Full Disclosure, problems associated with it for vendors and security companies, and examples of full disclosure put to the test. (3300 words) The world of computer security has developed a wicked game of politically correct ‘cat and mouse’. This game is played…

  • #194: Concern

    [F.U.C.K. is an e-zine that I started on January 24, 1993 and ended on January 24, 2000. One concept is that articles should be timeless if possible, so they were not released with dates. As such, the date on this blog is not exact but I will try to use a date as close as…

  • #137: My Win95 Experience

    [F.U.C.K. is an e-zine that I started on January 24, 1993 and ended on January 24, 2000. One concept is that articles should be timeless if possible, so they were not released with dates. As such, the date on this blog is not exact but I will try to use a date as close as…