News for hackers. Stuff that matters.
Re:Google's Project Zero exposes unpatched Windows 10 lockdo... by alkonaut on Saturday April 21, 2018 @04:17AM (#16890485)
For a bug that should take no more than a few days to patch and test 90 days seems like more than enough for a product with automatic security updates.

For a bug with completely unknown scope and very difficult fixes (such as the recent intel issues) the story might be different. But 90 days here? Why would Microsoft need more than that?

Re:Google's Project Zero exposes unpatched Windows 10 lockdo... by mjw1007 on Saturday April 21, 2018 @04:57AM (#16890606)
Because of an "unforeseen code relationship", they say. What more could we want to know?

It sounds like some other piece of MS software is relying on .NET not performing the checks that it should have been performing.

Re:Google's Project Zero exposes unpatched Windows 10 lockdo... by lvh on Saturday April 21, 2018 @07:20AM (#16890981)
Is Microsoft allowed to make arbitrary business decisions that prevent it from responding to security vulnerabilities or is backwards compatibility given a special pass?

They own an operating system. We get to hold them responsible for whatever choices they make that impact security.

Re:Google's Project Zero exposes unpatched Windows 10 lockdo... by smoyer on Saturday April 21, 2018 @07:11AM (#16890950)
Windows attempt to always remain backwards compatible has left a huge tangled mess of dependencies. I applaud Microsoft's attempts at this but a slow cycle of breaking changes would allow a much better long-term system. Of course, that also means you have to be committed to some sort of long-term roadmap (something that appeared to be lacking between XP and Longhorn/Vista/7).
Re:Google's Project Zero exposes unpatched Windows 10 lockdo... by thomasz on Saturday April 21, 2018 @07:26AM (#16890996)
The last time they did that was with the launch of vista. People were not pleased.