It's hard to say if it's right or wrong to release a six month old bug into the wild. In a way, I am glad that he did it but also frighted that someone might steal my information.

I guess in my opinion Microsoft is at fault for not working more with the researcher. If they had kept him updated and given a patch release date he may have held out until a day before the patch release.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/newsbriefs/875/2744#2744