full-disclosure - How to Report a Security Vulnerability to Microsoft

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Wed Apr 13 17:25:38 2005
From: nocmonkey at gmail.com (Danny)
Subject: How to Report a Security Vulnerability to
	Microsoft

It appears as though this discussion suffers from several major problems:

1) A lack of understanding the concept that Microsoft is a
corporation, and like most businesses (including yours if you have
one), they are driven by the bottom line - profit.  If you don't like
this, then you will have to change the global economic framework and
basic accounting principles for business continuity.

2) Positive actions yield positive results.  Walk your talk, and take
action if you want to see change in the industry.

3) Don't neglect the fact that other corporations profit from
Microsoft's security problems.  Maybe even yours?  The trouble will
be, finding a balance. :)  Anyway, my point is that you have to look
at the big picture; rather than just trashing Microsoft for trying to
work with the infosec community.

...D