Seems to me that this is another intention that should invite the attention of the anti-trust officials. It amounts to another example of contractual limitation which could prevent security vendors who need the offical "I'm a MS partner" from competing on a level field with security vendors who do not fall into this trap. MS is entitled to their own opinion on the question of disclosure of vulnerabilities, but they should not be able to extend their opinion to other parties by virtue of contractual containment. This will be a new question for IT managers such as myself to ask security solution providers when looking for solutions; are you in bed with MS to the point that you will have to forego providing me with information you have concerning MS security problems?

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/articles/277/8567#8567