SecurityFocus

MSIE src&name property disclosure Nov 08 2004 11:40AM
Berend-Jan Wever (skylined edup tudelft nl) (1 replies)

Re: [Full-Disclosure] MSIE src&name property disclosure Nov 08 2004 02:13PM
Michal Zalewski (lcamtuf ghettot org) (2 replies)

Re: [Full-Disclosure] MSIE src&name property disclosure Nov 08 2004 07:33PM
Paul Schmehl (pauls utdallas edu) (1 replies)

--On Monday, November 08, 2004 03:13:57 PM +0100 Michal Zalewski
<lcamtuf (at) ghettot (dot) org [email concealed]> wrote:
>
> Several days later, this statement surfaces in an article, showing beyond
> any doubt that they are, quite simply, lying to the public to save face
> and gain time.
>
> As much as I am not a rabid Microsoft hater, this pissed me off more than
> a bit.
>
Never attribute to malice what can be explained by incompetence. Most
likely what happened is the left hand (PR) didn't know what the right hand
(secure@) was doing.

Paul Schmehl (pauls (at) utdallas (dot) edu [email concealed])
Adjunct Information Security Officer
The University of Texas at Dallas
AVIEN Founding Member
http://www.utdallas.edu

[ reply ]

Re: [Full-Disclosure] MSIE src&name property disclosure Nov 08 2004 08:37PM
Michal Zalewski (lcamtuf coredump cx)

Re: [Full-Disclosure] MSIE src&name property disclosure Nov 08 2004 02:48PM
Dave Aitel (dave immunitysec com)