[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Full-disclosure] Microsoft Windows Help Centre Handles Malformed Escape Sequences Incorrectly
- Subject: Re: [Full-disclosure] Microsoft Windows Help Centre Handles Malformed Escape Sequences Incorrectly
- From: John Jacobs <flamdugen@xxxxxxxxxxx>
- Date: Fri, 11 Jun 2010 09:59:44 -0500
Consequently, in my humble opinion I think there should be less focus on the
emotional interaction between Microsoft and Travis' findings. Of course it's
easy for me to assert this; when I wake up in the morning I don't have the same
challenges of wading through a soup of emotional fog and displacing the
priority of actual vulnerabilities in favor of emotional interaction with
Microsoft.
While it's fun to be a Microsoft apologist, and even more fun to be ruled by
emotion, I would be ashamed to have published what Susan did. Even more
shaming is the call to arms which you so eagerly answered only to appear as
foolish as Susan herself.
It's hard to tell who the trolls are, perhaps Susan is indeed a troll, and
decided to fork the conversation about actual vulnerabilities and security
events and derail them by introducing drivel about interacting with Microsoft.
I believe this may be one of the disadvantages of an unmoderated list, perhaps
it encourages or enables others to treat it like a social networking site.
Date: Fri, 11 Jun 2010 11:40:55 +0200
From: uuf6429@xxxxxxxxx
To: jfranz@xxxxxxxxxxx
CC: full-disclosure@xxxxxxxxxxxxxxxxx; bugtraq@xxxxxxxxxxxxxxxxx
Subject: Re: [Full-disclosure] Microsoft Windows Help Centre Handles
Malformed Escape Sequences Incorrectly
In my humble opinion, he could have waited a couple more days just in case
Microsoft decided to do the unprecedented.
In which case, I progressive change of policies at Microsoft are better than a
couple of users getting hacked from pron sites...
Cheers.
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/