Hi Everyone<br><br>(This can also be an open letter to Microsoft)<br><br>Recently I have see a blog post of Microsoft's security team! What i have found disturbs me even more then when we find these 0days! This is what they write!
<br><br><span style="font-family: 'Calibri','sans-serif'; font-style: italic;"><font size="3">I'm sure one question in people's minds is how we're able to release an update for this issue so quickly. I mentioned on
</font></span><a style="font-style: italic;" href="http://blogs.technet.com/msrc/archive/2007/03/30/update-on-microsoft-security-advisory-935423.aspx#Vulnerability" href="http://blogs.technet.com/msrc/archive/2007/03/30/update-on-microsoft-security-advisory-935423.aspx#Vulnerability">
<span style="font-family: 'Calibri','sans-serif';"><font color="#0000ff" size="3">Friday</font></span></a><span style="font-family: 'Calibri','sans-serif'; font-style: italic;"><font size="3">
that this issue was first brought to us in late December 2006 and we've
been working on our investigation and a security update since then.
This update was previously scheduled for release as part of the April
monthly release on April 10, 2007.<br><span style="font-style: italic;"><br><span style="font-style: italic;"><span style="font-style: italic;"></span></span></span></font></span><span style="font-family: 'Calibri','sans-serif';">
<font size="3">Are you telling me that this hole was around for just about 4 months and they did nothing about it? I am not wondering why it took them so long to come out with this patch not why they are putting out so early! Also when they were told about this vulnerability they should of fixed it right away as we have seen with the OpenBSD ICMP IP 6 hole! Core security told them about it LESS THEN A WEEK LATER THERE WAS A PATCH.
<br><br>So we ask why? Why does it take so long to put out a patch?<br><br></font></span><span style="font-family: 'Calibri','sans-serif'; font-style: italic;"><font size="3">Due
to the increased risk to customers from these latest attacks, we were
able to expedite our testing to ensure an update is ready for broad
distribution sooner than April 10.<br><br><span style="font-style: italic;"><span style="font-style: italic;"></span></span></font></span><span style="font-family: 'Calibri','sans-serif';"><font size="3">
Really? Then Please explain this paragraph <br><br></font></span><p style="font-style: italic;"><b>Disclaimer: </b></p><p style="font-style: italic;">The information provided in this advisory
is provided "as is" without warranty of any kind. Microsoft disclaims
all warranties, either express or implied, including the warranties of
merchantability and fitness for a particular purpose. In no event shall
Microsoft Corporation or its suppliers be liable for any damages
whatsoever including direct, indirect, incidental, consequential, loss
of business profits or special damages, even if Microsoft Corporation
or its suppliers have been advised of the possibility of such damages.
Some states do not allow the exclusion or limitation of liability for
consequential or incidental damages so the foregoing limitation may not
apply.</p><br>Links:<br><a href="http://blogs.technet.com/msrc/archive/2007/04/01/latest-on-security-update-for-microsoft-security-advisory-935423.aspx">http://blogs.technet.com/msrc/archive/2007/04/01/latest-on-security-update-for-microsoft-security-advisory-935423.aspx
</a><br><a href="http://www.microsoft.com/technet/security/advisory/935423.mspx">http://www.microsoft.com/technet/security/advisory/935423.mspx</a><br><br><br>I can go on and on but you all get the point!<br><br>James<br>
<br><p style="font-style: italic;"><br></p><span style="font-family: 'Calibri','sans-serif'; font-style: italic;"><font size="3"><span style="font-style: italic;"><span style="font-style: italic;"></span></span>
<br></font></span><span style="font-family: 'Calibri','sans-serif'; font-style: italic;"><font size="3"><span style="font-style: italic;"><span style="font-style: italic;"><span style="font-style: italic;">
<span style="font-style: italic;"><br><br><br><br></span><br><br></span></span></span></font></span><span style="font-family: 'Calibri','sans-serif';"><br></span><span style="font-family: 'Calibri','sans-serif'; font-style: italic;">
<font size="3"><span style="font-style: italic;"></span></font></span>-- <br><a href="http://www.goldwatches.com/watches.asp?Brand=39">http://www.goldwatches.com/watches.asp?Brand=39</a><br><a href="http://www.wazoozle.com">
http://www.wazoozle.com</a>