Re:Google's Project Zero exposes unpatched Windows 10 lockdo...
by lawnchair_larry on Saturday April 21, 2018 @02:12PM
(#16892503)
Statements like this suggest a fundamental misunderstanding of what a vulnerability is. Google will never be held responsible for someone else’s mistakes, no matter how they make those mistakes known.
Your speculation about the reasoning for the extension could not be more off. All you have to do is read their blog discussing their disclosure policy to understand why those exist.
Re:Google's Project Zero exposes unpatched Windows 10 lockdo...
by IncRnd on Saturday April 21, 2018 @02:18PM
(#16892541)
> Statements like this suggest a fundamental misunderstanding of what a vulnerability is.
That's simply absurd. Stop trying to turn a discussion into an argument.
> Your speculation about the reasoning for the extension could not be more off.
What was my speculation about Google's reasoning? I made no speculation whatsoever about Google's reasoning. Their stated reasonings in a blog post don't matter. Their actions matter.
Google is not a lawmaker, and if they continue to release 0-day exploits in this manner, even after being instructed otherwise by the vendors, at some point they will be made to shoulder some of the burdens of their having done so. Google knows this to be true, or they would not have held some recent vulnerabilities past their stated 90 day release window.
Thoughts about the relative technical merits of the companies or source codes doesn't come into play here. These are business decisions that affect real world companies and people.