Re: [Full-disclosure] Microsoft Windows Help Centre Handles Malformed Escape Sequences Incorrectly

[Benjamin Franz <jfranz@xxxxxxxxxxx>]

On 06/11/2010 02:40 AM, Christian Sciberras wrote:
> In my humble opinion, he could have waited a couple more days just in 
> case Microsoft decided to do the unprecedented.
> In which case, I progressive change of policies at Microsoft are 
> better than a couple of users getting hacked from pron sites...
As I said: Travis indicated in his original post he believes the exploit 
*was already being used in the wild*. So NOT releasing it wouldn't 
protect users. It would just keep it "secret" from everyone except 
Microsoft *and the black hats who were already using it*. While 
maintaining a false air of intact security for everyone else.

That is better, how?

-- 
Benjamin Franz

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/