There’s a cat fight happening between Google and Microsoft. Basically, Google has a policy to publicly disclose any bugs it finds within 90 days of informing the software provider. In this case, it was a bug in Windows that allowed a person’s system to be taken over. It’s not easy to do, but possible nevertheless.
The 90 window passed with still no fix from Microsoft, so Google went ahead and published the bug for all hackers to learn. Microsoft did issue a fix just two days after Google went public, and obviously isn’t happy with Google. As a Microsoft representative wrote:
Although following through keeps to Google’s announced timeline for disclosure, the decision feels less like principles and more like a “gotcha”, with customers the ones who may suffer as a result. . .What’s right for Google is not always right for customers. We urge Google to make protection of customers our collective primary goal.”
So who’s right, who’s wrong?