Windows 7: Microsoft Launches MSVR - reports Chrome flaws

Microsoft kicked off a new program on Tuesday, responsible for the discovery, reporting, and coordination of vulnerabilities in third-party products and services.



The Microsoft Vulnerability Research (MSVR) program launched on Tuesday with two Google Chrome vulnerabilities. Microsoft has a mixed history with Google over responsible vulnerability disclosure after Google’s senior security researcher, Tavis Ormandy, notified Microsoft about two flaws at the beginning of June then days later Ormandy published proof of concept code, saying “without a working exploit, I would have been ignored.” The working exploit saw attacks increase rapidly and Microsoft claimed the Google workers move put customers at risk.


Full Story:

Microsoft’s new vulnerability disclosure policy kicks off with two Chrome flaws | WinRumors

I somehow get the feeling that this amounts to the pot calling the kettle black, because MS has never been very good about handling IE vulnerabilities. Plus the fact that they seem to be picking on the competitors that they have a history with, especially when citing older versions of software that have already been replaced, makes this quite biased and basically nothing more than a smear campaign.

"Google started it!"

Ha ha...

But yes, this kind of school yard behavior doesn't become Google OR Microsoft. Just because Google and Opera are big babies #1 and #2 doesn't necessarily mean that it's a good idea to drop to their level. I find this a bit dissapointing...

+1 FOR THAT.

The hackers at that hacker convention Parks posted about semi-recently would have probably loved this Google Chrome flaw information. They'd have claimed the prize for smashing Chrome's security (probably.)