Desktop platforms Toolkit

Story: '10 new XP SP2 flaws' revealed

• 
• 

If it's rubbish then why is Microsoft investigating it still? Either Microsoft states that they're still investigating and will report their findings in due time OR they call it rubbish and at the same time don't mind if the exploit code is published in public on, say, the ZDNet UK frontpage. Because then we'll know in days how rubbish it really is.

Answer me this. How come that exploits for well known Open Source solutions are almost always disclosed in public first to then get fixed within days and even hours while exploits for Microsoft products are often disclosed in private first for weeks and even months on end to then get fixed in a monthly patch cycle by fixes that sometimes do more harm then good?

How come that the Internet itself is heavily depended on all sorts of Open Source and Public Domain solutions (Apache, BIND, SMTP, POP3, Linux, HTTP, etc, etc) around the globe on thousands upon thousands upon thousands of machines without a single global disaster year in, year out while Microsoft products have several each year? I mean, if you want to put your name in the history books then go and kill BIND or Apache worldwide. It's never been done before so that should give you headlines. Whereas killing Microsoft products on a global scale isn't surprising anymore. It's more a question of when rather then if. Then again, in the Microsoft case you're paying for that service. Maybe that's the difference. As long as you pay for it you're actually saying: I want more of this. Don't really bother with security and privacy, I'll pay for the next release anyway. Either directly or indirectly by purchasing hardware from a vendor that's hooked on one of those Microsoft taxes.

• 
• 

• 
• 
• 

Full Talkback thread