Google updates disclosure policy after Windows, OS X zero-day controversy
(Ars):
http://arstechnica.com/security/2015/02/google-updates-disclosure-policy-after-windows-os-x-zero-day-controversy/
"In a blog post today, the Google Security team announced changes to
policies on full disclosure of bugs found by Project Zero, the
security research team that uncovered zero-day vulnerabilities
recently revealed in Microsoft's Windows 8.1 and Apple's OS X
operating systems. Those disclosures, which were made 90 days after
Google alerted Microsoft and Apple in accordance with Project Zero's
strict release policy, stirred controversy because they had not yet
been patched--and gave attackers time to leverage them before
Microsoft and Apple distributed fixes."
- - -
An appropriate introduction of some flexibility in this regard. Good.
--Lauren--
Lauren Weinstein ([email protected]): http://www.vortex.com/lauren
Founder:
- Network Neutrality Squad: http://www.nnsquad.org
- PRIVACY Forum: http://www.vortex.com/privacy-info
Co-Founder: People For Internet Responsibility: http://www.pfir.org/pfir-info
Member: ACM Committee on Computers and Public Policy
Lauren's Blog: http://lauren.vortex.com
Google+: http://google.com/+LaurenWeinstein
Twitter: http://twitter.com/laurenweinstein
Tel: +1 (818) 225-2800 / Skype: vortex.com
_______________________________________________
pfir mailing list
http://lists.pfir.org/mailman/listinfo/pfir
