Microsoft to Introduce Faster Security Disclosures

Starwax writes "Here's a very interesting strategy by Microsoft. After years of complaining about irresponsible disclosure of security alerts by grey hats, Microsoft will now confirm and discuss the vulnerabilities in a new pilot project launching on Tuesday. Advisories will be issued within one business day of a publicly reported security hole along with guidance and mitigation."

Comments

Security Through Selective Publicity

[Doc Ruby]

Microsoft will now announce that Microsoft will announce security alerts within one business day of their reporting to Microsoft. Microsoft announces that any security holes not announced by Microsoft must therefore not exist. It's the industry standard: "We have a policy that we are not being hacked."

Re:i hate to sound like a total dunce

[filtur]

but what is a grey hat?

Someone who can't decided on whether to be a black hat or a white hat. Kinda like Michael Jackson

Re:i hate to sound like a total dunce

[commodoresloat]

It's a big cone shaped hat you have to put on before you sit in the corner.

Re:Business Day?

[SnprBoB86]

"where do you draw the line?"

I'm not sure where you draw the line, but I can tell you that if you would take a bullet for a server... you've crossed it, wherever it is...

microsoft sucking less

[poor_boi]

Does anyone else get a sinking feeling in their tummy every time Microsoft does something right, something better, or something intelligent? I like hating them. If I can't hate them, I'll have to hate something else. And I haven't been paying much attention to worthy targets over the past few years. I'm afraid I might have to turn my hate inwards if they improving. And that can't be good.