Sure he got a bitter taste from the MS slop trough, he's
CIO of a company that makes security-oriented accounting
software that only runs on MS platforms. He's probably
looking at significant financial losses over MS's awful
security record.

I find the claim that there are no exploits for this bug to
be pretty amusing. MS has made it pretty clear that those
who do not keep their mouths shut about their bugs are "the
enemy", and those who don't want big trouble had better not
publish anything. If the hole was so big that it was
found within a day, if even MS said it was horrible, who is
Mr. Mullen, who has NOT seen the details, to deny that any
exploit exists?

Ah well, I'm a CISSP, my code requires me to tell the
truth...

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/50/9591#9591