Re: To Provide a Patch or to Service Pack?

From: ellipse (ellipse@cipherpunks.com)
Date: 05/30/02


Date: Thu, 30 May 2002 08:16:21 +0000
From: ellipse <ellipse@cipherpunks.com>
To: Georgi Guninski <guninski@guninski.com>


> In case you have missed it, check:
> http://www.eweek.com/article/0,3658,s%253D701%2526a%253D26875,00.asp
> "...He later acknowledged that some Microsoft code was so flawed it could not be
> safely disclosed..."

What an interesting bit of hogwash and pork-barrel politics this is turning into.

"... Unlike the states' proposed remedy, the federal settlement proposal that Microsoft and the Department of Justice agreed to in November contains a carve-out that permits Microsoft to withhold API and protocol disclosures if such disclosures would compromise security. The provision is designed to address hackers, viruses and piracy, according to Allchin. ... During his second day on the stand, Allchin conceded that Microsoft has already identified at least one protocol and two APIs that it plans to withhold from public disclosure under the security carve-out."

Find a bug, and help soften the blow against us in the anti-trust case! All in the name of security!