With limited or no disclosure nobody will be able to determine if they NEED a patch or not. This leaves things open for Microsoft to trick people into getting some 'patch' only to find out later it adds some totally different 'feature' that they didn't want.

With no exploit code, nobody will be able to confirm that any patches issued actually fix the problem.

Sounds like Microsoft wants to get everyone to be totally stupid and trust them to make all the right decisions. Almost like hypnosis - "You will apply every patch we offer and never question anything we say and always buy the next new version of everything we offer"

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/articles/281/8807#8807