Comments on: Are Bugfinders Being Gagged by Microsoft? http://spiresecurity.com/?p=174 Risk and Cybersecurity Analysis Wed, 21 Aug 2013 23:28:51 +0000 hourly 1 http://wordpress.org/?v=3.5.1 By: Pete http://spiresecurity.com/?p=174&cpage=1#comment-236 Pete Mon, 21 Apr 2008 14:23:27 +0000 http://spiresecurity.com/blog/?p=174#comment-236 @David -

Great point. Thanks for the comment.

Pete

]]> By: David Litchfield http://spiresecurity.com/?p=174&cpage=1#comment-235 David Litchfield Mon, 21 Apr 2008 14:13:38 +0000 http://spiresecurity.com/blog/?p=174#comment-235 Hey Pete,

“It is not clear to me how many ‘other good researchers’ are out there focusing on Microsoft products…”

As I’m sure you know, there are companies out there with strong researchers like eEye whose very business model is in finding and publishing MS flaws. One easy way for companies like eEye to boost sales of their product would be to release in-depth threat reports about MS patches as when they come out divulging all the gory details of silently fixed flaws. But no-one does do this on an industrial scale which leads me to believe there’s nothing there to report… Then again, perhaps I’m wrong and they’ve just not thought of doing this.
Cheers,
David

]]>