phyxeld's Journal: I want what the experts are smoking!

Some choice quotes from an MSNBC Article I just read:

"Having attacks reported to us where there's a vulnerability for which there isn't a patch is very unusual," Lipner [Microsoft's director of security assurance] said.

In the computer security world, such secret vulnerabilities are called "zero-day exploits." It's been at least a year since a significant zero-day exploit was revealed, said Chris Rouland, director of Internet Security Systems' X-Force research team. (emphasis mine)

I'm intrigued by this "computer security world" they speak of, where there haven't been any zero-day exploits in a year. I'm also interested to know just which Microsoft Steve Lipner is "Director of Security Assurance" at, because customers of the Microsoft I'm familiar with are regularly helpless during the month or so between release of an exploit and a patch for it. I guess if Security Assurance is his job, he's doing it well...