Re: [Full-disclosure] How to Report a Security VulnerabilitytoMicrosoft

[mcbain@xxxxxxx]

i guessing the *'s are sarcasm or flaming so let me respond.  
 
did i say "never" ââ no.
 
I personally have only been effected once _severely_  after patch Tuesday. 
 
 But think about it,  the testing scenarios that exist on planet earth can not 
possibly be even accounted for let alone tested in Redmond.
 
 
-----Original Message-----
From: Valdis.Kletnieks@xxxxxx
To: mcbain@xxxxxxx
Cc: guninski@xxxxxxxxxxxx; full-disclosure@xxxxxxxxxxxxxxxxx
Sent: Tue, 12 Apr 2005 17:11:26 -0400
Subject: Re: [Full-disclosure] How to Report a Security 
VulnerabilitytoMicrosoft 


On Tue, 12 Apr 2005 17:00:46 EDT, mcbain@xxxxxxx said:

> Also, they do not "patch" they find the root of the problem which adds more 
time.

This explains why we *never* *ever* see stuff 2 days after Patch Tuesday where
people are reporting "this slight variant still works" because Microsoft always
gets to the *root* of the problem and fixes it *right*, rather than just fixing
the one already-known manifestation....

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/