Microsoft s’enfada perquè li han publicat un virus
Computer Terrorism va descobrir el maig
passat una vulnerabilitat de L’Internet Explorer. Microsoft va
desconsiderar la vulnerabilitat i en 5 mesos no va fer res. A finals
de novembre Computer Terrorism ha publicat el codi font d’un possible
virus aprofitant la vulnerabilitat i ara Microsoft està
enfadada perquè no se li va comunicar res abans de publicar-se
el virus.
[@more@]
”Microsoft is alleging that Computer Terrorism broke
with that practice. “Microsoft is disappointed that certain
security researchers have breached common industry practices and
published proof-of-concept code potentially harming computer users,”
a company spokesman told vnunet.com.
”Microsoft continues to urge security researchers to
disclose vulnerability information responsibly and allow customers
time to deploy updates so that they do not aid criminals in their
attempt to take advantage of software vulnerabilities.”
However, senior security research analyst Simon Robinson
argued that Computer Terrorism had no choice. The Internet Explorer
flaw was originally published in May but at the time was considered
to form only a minor security threat.
”It should never have been classified as a low-level
vulnerability,” Robinson told vnunet.com.
“It should have been a moderate risk. When we picked up that it
could be exploitable, we were astonished at how easy it was.”
By going public the firm sought to warn end users that
they were facing a severe risk. “We had a strong belief that is was
already being exploited in the wild,” said Robinson.”
