Microsoft Makes Fun Of Cigital
from the I-know-you-are-but-what-am-I? dept
Ah, mudslinging. Last week there was the kerfuffle (my new favorite word) over Cigital's pointing out a security flaw in Microsoft's .Net compiler. The problem, according to Microsoft, is that Cigital went public with the flaw without giving them much of a chance to fix it. Today, Microsoft struck back in about as childish a way as they could. A VP from Microsoft publicly announced a flaw he found in a Cigital product. Yes, this appears like school children bickering.
4 Comments | Leave a Comment..
If you liked this post, you may also be interested in...





Reader Comments (rss)
(Flattened / Threaded)
Hey - children behave better than that!
[ reply to this | link to this | view in thread ]
-1 Troll
it's ok for people to find flaws in MS's gear, but not in others?
please....
this place is as anti-MS as /. how sad.
[ reply to this | link to this | view in thread ]
Re: -1 Troll
However, it appears that Microsoft's move here was purely vindictive for Cigital's action.
[ reply to this | link to this | view in thread ]
Re: -1 Troll
But this incident demonstrates that - Trustworthy Computing notwithstanding - Microsoft still views security problems as PR problems, not product problems. The company's first response was that this was a narrow technical issue (try to diminish the perceived severity), then they pitched it as a feature (obfuscate the issue), then they said it was just sour grapes (discredit the opposition). Since Cigital had spoiled their coming out party, they took the extra step to find a bug they could try and embarrass Cigital with...if you think that it was just coincidence they found the Cigital bug in a matter of hours, I'd suggest you're a bit gullible.
Microsoft had the opportunity to discuss this and make their case in a calm, informed, adult manner. They didn't.
[ reply to this | link to this | view in thread ]
Add Your Comment