Last week, Google faced a barrage of criticism from Microsoft for publicly disclosing a security bug in Windows 8.1, claiming that it had asked the company from withholding details as they were planning on releasing an update to fix it. Today, Google has gone and done it again, by pointing out two bugs in the Windows operating system.
The first vulnerability pointed by Google allows attackers to impersonate a user and decrypt data on machines running Windows 7 and Windows 8.1. The second vulnerability, which only affects machines on Windows 7, allows attackers to interfere with power functions.
Both disclosures come as a result of Google’s Project Zero, which scours the Internet to identify vulnerabilities in apps and communication services. If issues are found, then Google gives companies a period of 90 days to address and fix them, after which a public announcement is made. The bug in the Windows operating system was apparently identified to Microsoft on 17th October 2014, meaning that it had passed the 90-day deadline.
However, it seems as if this hasn’t gone down well with Microsoft at all. In an official blogpost, Chris Betz, senior director of the Microsoft Security Response Center said,
“We asked Google to work with us to protect customers…until we released a fix. Although following through keeps to Google’s announced timeline for disclosure, the decision feels less like principles and more like a ‘gotcha’, with customers the ones who may suffer as a result. What’s right for Google isn’t always right for customers. We urge Google to make protection of customers our collective primary goal.”
This isn’t the first instance of Google highlighting vulnerabilities in the Windows operating system, with another identification last year on December 29th. However, such actions have sparked a widespread debate on consumer security and transparency.
Microsoft claims that Google is simply compromising user security by making vulnerabilities public before a fix has been found while Google maintains that it allows companies enough time and its aims are to provide transparency for users who should be aware of the potential security problems that their devices face.
Yai to #lul hogya bhai…is golay maan sab aik dujy ko nercha dikhawain hain… hoskta hy agli bar MS Android maan koe nuqs nikal laiway…:p
MS Android, this is new!!
More like Google embarrasses itself yet again.
way to make Chromebooks relevant in the market? or typical “sir boast-a lot” attitude? or simply procrastination of Microsoft to not address the issues in a jiffy? hmm!! so much to be outraged about these days… :(
Bhai ghar aur office bhi eyse baat krty ho kya ? Kafi filmi lagty ho
lul ni lol lots of love
It was more funny due to PK. Else it is LOL… laugh out loude…:)
Not at all… i just liked the movie due to its theme and funny language..else i m professional…:)
Both are doing good. It will evantually in favor of end-users.
I mean if microsoft finds some vulnerabelity in android…:)