No Surprise: Exposed XP Flaw Now Exploited
On Monday I told you how Google publicly disclosed an XP Help flaw that had yet to be patched. As of then, there were no reported attacks, but I wondered aloud how long it would take to exploit this now well-known and understood hole.
It didn't take long -- Microsoft now says hackers are now going after the flaw which allows for remote code execution.
Some of you were on Google's side, arguing that Microsoft has no real motivation to fix a hole if no one knows about it. Others believe it is irresponsible to tell hackers how they attack our software. The latter group seems to have some pretty good evidence on their side.
What is your take? Let me know at firstname.lastname@example.org.
Posted by Doug Barney on June 18, 2010 at 11:53 AM