5 ms·
Can someone describe the white hat credo with respect to 0 day exploits? Did he give Microsoft a head's up about these and a chance to respond before going pub
by cppsnob 15y ago
Can someone describe the white hat credo with respect to 0 day exploits?
Did he give Microsoft a head's up about these and a chance to respond before going public? Or does he just give a conference talk and post it to his blog, potentially providing the information allowing thousands of browsers to get compromised (assuming they weren't already) before privately letting Microsoft get a chance to patch it?
- Skalman 15y agoI don't know, but Microsoft doesn't care anyway (or so they say), according to http://www.computerworld.com/s/article/9217116/Microsoft_downplays_IE_cookiejacking_bug http://www.computerworld.com/s/article/9217116/Microsoft_dow... . But I do hope that he told Microsoft before the world.