Software
Software Flaw Disclosure Deadlines Raise Vendor-Researcher Tensions
Reported by eweek.com
Google’s Project Zero puts a time limit on patching software flaws, which irks software vendors. But firm deadlines can improve security.
Google’s Project Zero puts a time limit on patching software flaws, which irks software vendors. But firm deadlines can improve security.
In early January, Google’s Project Zero—a 6-month-old effort to hunt for bugs in popular software—released, for the second time, information on a vulnerability in Microsoft software before the software giant had patched the issue. Not two weeks later, Google took the same action for security issues in Apple’s products. – See more at: http://www.eweek.com/security/software-flaw-disclosure-deadlines-raise-vendor-researcher-tensions.html#sthash.Id6kMida.dpuf
