There is an large advantages to this form for both micorsoft and the security comunity in that this form requires some basic infomation and most importantly an decription of how to reproduce this attack. With out this infomation the form can not be sent meaning that the number of incompleet discriptions (either through ignorance of the problem or forgetfull omission) are going to be cut down leaving the microsoft security staff more time to do what we want them to do, research and fix the real problems. It is true that this form is not suffecant for a true profisonal bug report but the secure (at) microsoft (dot) com [email concealed] door is not closed, just not for the regular public, they have there route we have ours.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/articles/545/15809#15809