Slashdot Mirror


MS Asks Google To Delay Fuzzer Tool

eldavojohn writes "Polish Google security white hat Michal Zalewski has announced concerns that one of a hundred vulnerabilities his fuzzer tool found in IE is well known to third party hackers in China. His simple explanation provides an interesting counter argument to Microsoft's usual request that security problems not be released until they can slowly investigate them. From the article, 'Microsoft asked Zalewski to delay cross_fuzz's release, but he declined, in part because of his fear the IE vulnerability was already being explored by Chinese hackers, but also because the company's security experts had not responded to information he provided.' You can read about and download cross_fuzz for your own use."

3 of 205 comments (clear)

  1. Re:Article is dupe by Abstrackt · · Score: 3, Informative

    It's actually a follow-up. He finally got his response from MS but it was just them asking him to delay releasing the tool indefinitely.

    --
    They say a little knowledge is a dangerous thing, but it's not one half so bad as a lot of ignorance. - Terry Pratchett
  2. Re:When by jittles · · Score: 3, Informative

    I think this would hurt China just as much as it would hurt the US or Europe.

  3. Re:When by RoFLKOPTr · · Score: 3, Informative

    A trade embargo with China is not a thought to be taken lightly.

    Slavery is not to be taken lightly.

    That right there invalidates all your arguments, because that says you've been absorbing all the stupid propaganda and sensationalism about Chinese working conditions. Just because they don't make $50k a year doesn't mean they are slaves. Most of them are quite happy with their jobs.

    Yeah, 14 Foxconn employees committed suicide in 2010. That's out of 920,000 employees total. So that's about 1.5 suicides out of every 100,000 employees. Wanna guess what the suicide rate in the United States was in 2007? 11.5 out of 100,000. That's EIGHT TIMES the suicide rate at Foxconn. And the suicide rate in all of China was 6.6 in 2008. One could argue that Foxconn, in fact, IMPROVES workers lives. Of course that's not necessarily true, because correlation does not imply causation, but that data is enough to make a big huge news story worthy of being approved by Slashdot's elite editorial team with which to draw a bunch of sheep to hark the benefits of working for Chinese electronics manufacturers.

    Do some of your own research before believing the bullshit and comparing Chinese laborers to slaves.