full-disclosure - How to Report a Security VulnerabilitytoMicrosoft

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <425C69B9.7070407@pwarchitects.com>
Date: Wed Apr 13 01:35:26 2005
From: dk at pwarchitects.com (dk)
Subject: How to Report a
	Security	VulnerabilitytoMicrosoft

mcbain@....com wrote:

> And yes making the disclosure private does earn Billgates more money.  But thats not WHY they want it private and honestly , putting your billg flaming aside (lol) , you know thats the truth.  0day and worms which is the alternative, terrorist activity is not what they want.

Perhaps, but do not let it lapse that they /are/ the richest corporation 
on the planet based in a capitalist, free-market driven nation. They 
_exist_ to turn a profit for the Company and the Shareholder first, 
that's the whole point Mike. If they do not they cease to exist.
Most companies tend to "Do it right" when all these interest align 
nicely, as they sometimes do (e.g. electronic crimes). When they do not 
is when we see the flames from users/consumers. MS can improve, and they 
should.

-- 
dk