Re: How to Report a Security VulnerabilitytoMicrosoft

[mcbain () aol com]

i guessing the *'s are sarcasm or flaming so let me respond.  
 
did i say "never" …… no.
 
I personally have only been effected once _severely_  after patch Tuesday. 
 
 But think about it,  the testing scenarios that exist on planet earth can not possibly be even accounted for let alone 
tested in Redmond.
 
 
-----Original Message-----
From: Valdis.Kletnieks () vt edu
To: mcbain () aol com
Cc: guninski () guninski com; full-disclosure () lists grok org uk
Sent: Tue, 12 Apr 2005 17:11:26 -0400
Subject: Re: [Full-disclosure] How to Report a Security VulnerabilitytoMicrosoft 


On Tue, 12 Apr 2005 17:00:46 EDT, mcbain () aol com said:

> Also, they do not "patch" they find the root of the problem which adds more 
time.

This explains why we *never* *ever* see stuff 2 days after Patch Tuesday where
people are reporting "this slight variant still works" because Microsoft always
gets to the *root* of the problem and fixes it *right*, rather than just fixing
the one already-known manifestation....

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/