Re: [Full-disclosure] Microsoft Windows Help Centre Handles Malformed Escape Sequences Incorrectly



because when she gets 0wn3d she can be all like 'ruh roh, well, 0day
can happen to anyone'

On Fri, Jun 11, 2010 at 4:01 PM, Benjamin Franz <jfranz@xxxxxxxxxxx> wrote:
On 06/11/2010 02:40 AM, Christian Sciberras wrote:
In my humble opinion, he could have waited a couple more days just in
case Microsoft decided to do the unprecedented.
In which case, I progressive change of policies at Microsoft are
better than a couple of users getting hacked from pron sites...
As I said: Travis indicated in his original post he believes the exploit
*was already being used in the wild*. So NOT releasing it wouldn't
protect users. It would just keep it "secret" from everyone except
Microsoft *and the black hats who were already using it*. While
maintaining a false air of intact security for everyone else.

That is better, how?

--
Benjamin Franz

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/



Relevant Pages