Re: [Full-disclosure] Reuters: Microsoft to give holes info to Uncle Sam first - responsible vendor notification may not be a good idea any more...

[bkfsec <bkfsec@xxxxxxxxxxxxxxxx>]

Niek wrote:

> What I don't get is, if a patch is fit to be used by U.S government,
> why wouldn't it be for all other Microsoft users ?
>
> Is Microsoft using the U.S. government as test bunnies for their 
> patches ?
> If that's not the case, then why wait up to a month to supply them to
> the general public ?
Just a guess, but the presumption would be that the US Government has 
more regulatory restrictions placed on their systems than the average 
person does and, as such, the US Government will be able to better 
manage patch distribution and testing. 

The same *should* work for other large organizations as well, assuming 
that they are even remotely managed environments.

               -Barry


_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://www.secunia.com/