Ferris, an independent security researcher in Mission Viejo, Calif., found what he calls a serious vulnerability in Microsoft’s Internet Explorer Web browser. He reported it to the software giant on Aug. 14 via the “[email protected]” e-mail address and has since exchanged several e-mail messages with a Microsoft researcher. Up to that point, Ferris did everything according to Microsoft’s “responsible disclosure” guidelines, which call for bug hunters to delay the announcement of security holes until some time after the company has provided a fix. That way, people who use flawed products are protected from attack, the argument goes.Full Story
About OODA Analyst
OODA is comprised of a unique team of international experts capable of providing advanced intelligence and analysis, strategy and planning support, risk and threat management, training, decision support, crisis response, and security services to global corporations and governments.