Google Researcher Publishes Windows 10 Zero-Day Security Vulnerability

Re:Google Researcher Publishes Windows 10 Zero-Day Security ... by Dylan16807 on Thursday June 13, 2019 @07:40AM (#20173772)

> Perhaps they can find better teeth

Feel free to suggest!

But wanting something to be true isn't enough. And I can assure you, everyone wants that.

[ Parent | on HN ]

Re:Google Researcher Publishes Windows 10 Zero-Day Security ... by leereeves on Thursday June 13, 2019 @07:44AM (#20173787)

Why not publish the existence of the vulnerability without any details?

That is the only information most people will get from the disclosure anyway. Only the black hats are helped by disclosing the details.

[ Parent | on HN ]

Re:Google Researcher Publishes Windows 10 Zero-Day Security ... by dvdkon on Thursday June 13, 2019 @08:22AM (#20174039)

Blackhats knowing is what makes companies patch the vulnerabilities. Not enough people care about there being an undisclosed vulnerability for the company to expend resources.

[ Parent | on HN ]

Re:Google Researcher Publishes Windows 10 Zero-Day Security ... by leereeves on Thursday June 13, 2019 @08:41AM (#20174187)

Microsoft doesn't care about fixing vulnerabilities unless Google forces them to?

[ Parent | on HN ]

Re:Google Researcher Publishes Windows 10 Zero-Day Security ... by wysifnwyg on Thursday June 13, 2019 @09:33AM (#20174655)

Not many companies care about fixing vulnerabilities until they actually have to.

[ Parent | on HN ]

Re:Google Researcher Publishes Windows 10 Zero-Day Security ... by pixl97 on Thursday June 13, 2019 @08:09AM (#20173959)

Why not fix your bugs in 180 days?

[ Parent | on HN ]

Re:Google Researcher Publishes Windows 10 Zero-Day Security ... by peterwwillis on Thursday June 13, 2019 @09:28AM (#20174613)

Fines for companies that don't patch vulns within 90 days? This would encourage shifting left with security to make it easier to fix flaws so they don't overrun product deadlines.

[ Parent | on HN ]