Microsoft Admits to Hiding Flaw Details

Spongeform writes "eWeek has an interview with a Microsoft security official admitting to hiding details on software vulnerabilities that are discovered internally. The reason? Microsoft believes that full disclosure of every security-related product change only serves to aid attackers. However, companies using host-based IPS that rely on flaw information to build signatures are basically left at risk because of Microsoft's silent fixes."

Comments

hmm

[Anonymous Coward]

on the other hand linux dorks...you seem to be such freaking smartasses yet to seem to ignore the number of exploited linux machines out there.
which were exploited by freaking 12 year olds.
and why?
because of your great idea to disclose every security flaw.
well sorry but normal people are always gonna go with microsoft on this one.
they made the product so as long as the only one who knows about the bug is MICROSOFT they can patch it without ANY yes ANY problems for us users.
And the proof for this is ALL the freaking exploits for windows out there.They were possible because of public disclosure.If the idiot who found them would simply file the error to microsoft and maybe cash in on the find there would be no problems.
so to all the linux dorks screaming opensource is better more people fix more bugs:you are all idiots and the only bugs you can fix is the flies in your apartement.
These bugs are fixed by a minority of coders that actually know what they're doing.
99% of you shmucks out there just create security problems.AND so do 99% of the projects on sourceforge and freshmeat.

so just stop posting your idiotic comments because nobody cares about them.Not even the other idiots writting simmilar replies.You just want to cry about something because you're upset about god knows what(your pathetic lives maybe)