Before you get all uber-geek arrogant on me - I do understand the technical details. I do understand that this is not an especially easy exploit vector to take advantage of. I also know that there are terribly clever people with no scruples who you simply do not provide this kind of information to in this fashion.
If you want to arm wrestle Microsoft into compliance this is not the way to do it. A unilateral power play like this sets an extraordinarily bad precedent and it is inexcusable for that reason alone. What happens when someone else with fewer scruples decides to follow Zalewski's example and reveals something easier to exploit?
Get involved with a group of people - air your greivances in public - try to bring Microsoft to the table if you really think they are as bad as Zalewski describes them. But do not, under any circumstances, put the public at risk making a bonehead grandstand plays for attention. It's unprofessional. It's irresponsible. It's indefensible.
Period.
The best of ZDNet, delivered
ZDNet Newsletters
Get the best of ZDNet delivered straight to your inbox
