Google posts Windows 8.1 vulnerability after 90 days

Re:Google posts Windows 8.1 vulnerability after 90 days by dragonwriter on Friday January 02, 2015 @08:01PM (#8829484)

> Even if patches were available, it would be far better to wait for most devices to be patched before releasing a full exploit.

The practice of a firm 90-day release schedule increases the probability that vendors will fix patches and take steps to assure that they are deployed to most devices within that period. But that only works if the practice is firm.

[ Parent | on HN ]

Re:Google posts Windows 8.1 vulnerability after 90 days by cheald on Friday January 02, 2015 @08:29PM (#8829561)

This is a great point. The article bemoaned Project Zero's rigid deadline as unreasonable, but I think you have it right - a known and standard deadline doesn't leave anyone surprised.

[ Parent | on HN ]

Re:Google posts Windows 8.1 vulnerability after 90 days by giovannibajo1 on Saturday January 03, 2015 @04:37AM (#8830346)

Yes, that is exactly what I am asking. I want ready-to-use exploit for vulnerabilities in major Android versions after 90 days from disclosure to Google from Project Zero.

[ Parent | on HN ]