Daily Exploit Releases Irk Both Vendors and Crooks

conJunk writes "Security Focus has an article about HD Moore's Exploit-Every-Day-in-July endeavor raising the hackles of both browser vendors and criminals. He started the project because he felt that vendors were not taking his analysis seriously enough, but he appears to be the only one enjoying it. 'Black Hats' are having their exploits exposed, and Microsoft (who bears responsibility for the majority of the browser holes) can't keep up with the pace he's setting." From the article: "The software giant indirectly criticized the release of vulnerabilities in a statement to SecurityFocus, underscoring the importance of getting customers updated before they are exposed to threats from malicious attackers. 'Microsoft continues to encourage responsible disclosure of vulnerabilities,' the software giant said in a statement sent to SecurityFocus. 'We believe the commonly accepted practice of reporting vulnerabilities directly to a vendor serves everyone's best interests.'"

No! Don't tell anyone!!!

[dubmun]

A direct quote from the IE team over at Microsoft: "Don't tell anyone about all our holes! Then we won't have to fix them."

In releated news...

[Kenja]

I feel that there's not enough being done to curb gun violence here in Oakland Ca. So I'm going to shoot one person a day, every day, for the month of July. Any reports that I'm enjoying it are exaggerations.

Re:In releated news...

[Anonymous Coward]

I feel that there is not enough being done about stupid legislators. So I'm going to pass a stupid law a day, every day, for the month of July. Any reports I'm getting huge checks under the table are lies.

Re:No! Don't tell anyone!!!

[Kesch]

Here are the responses from the different browsers after recieving vulnerability reports:

Firefox: Fixed!
Opera: Fixed in 9.0
IE: ...(4 months later) DUDE!? Why you have to go tattle on us!?

Re:Or

[Anonymous Coward]

for those of you who like to read nothing. [about]

Re:Or

[Anonymous Coward]

Very interesting!

Dep't of Redundancy Dept

[PavementPizza]

Headline says: Daily Exploit Releases Irk Both Vendors and Crooks

Considering that Microsoft is the only Vendor complaining, and considering they've had months to fix all of these and didn't, the headline should be:

Daily Exploit Releases Irk Crooks

Re:Or

[mobby_6kl]

I'm intrigued by your ideas and would like to subscribe to your newsletter.

Re:Too bad these WERE reported to mickeysoft

[Ohreally_factor]

That sounds almost like my scheme of using a magnifying glass to warn insects of the dangers from the sun's rays.

Oh NO...

[Anonymous Coward]

...it seems like a Win-Win situation for the consumer... it must be wrong.