Stephen Toulouse - What does "responsible disclosure" mean to you?

Posted: Aug 31, 2004 at 6:47 PM

By: The Channel 9 Team

(1)

15,069 Views

3 Comments

Video format

Option selected may change based on video formats available and browser capability.

Auto

Use our suggested format for this video.

Smooth Streaming

Adaptive bitrate streaming - little buffering but lower video quality at times of low bandwidth. Silverlight 5 required

Progressive

Traditional buffered video format. Silverlight 5 required

HTML5

For browsers that support H.264 MP4 or WebM video playback such as:
IE9+, Firefox 4+, Chrome 5+, or Safari 4+.

Flash

For browsers that have the Adobe Flash Player plugin installed.

Microsoft's Security Response Center gets a lot of email sent to its secure@microsoft.com alias. Stephen kept talking about "responsible disclosure" with us so we wanted to find out just what he meant by that.

Follow the Discussion

Follow
Oops, something didn't work.

Try again?

Sign In to be begin to follow these comments

What does this mean?
Following an item on Channel 9 allows you to watch for new content and comments that you are interested in. You need to be signed in to Channel 9 to use this feature.

Getting "follow" information

Stop following these comments

Start following these comments

What does this mean?
Following an item on Channel 9 allows you to watch for new content and comments that you are interested in and view them all on your notifications page.

Removing your "follow"

Setting up your "follow"

Did you know you can
sign up for email notifications?
- Subscribe to this comments

Sk4rlath The lesser of two Sampys (in age only).

Aug 31, 2004 at 9:09 PM

This video really made me smile.

If more people knew what the security teams and developers at Microsoft had to deal with, then I think there'd be a lot less hate going in their direction.

Why don't they tell you intimate details about security flaws in the software? This video explains that excellently.

Why don't they make their software standards-compliant? If they did and they broke even one single app that depended on that non-standard behavior, then you'd hate them for that instead.

Once again, keep it up guys! Just letting you know that you've still got at least one fan cheering you on!
Maurits AKA Matthew van Eerde

Sep 01, 2004 at 9:05 AM

Sk4rlath wrote:

Why don't they make their software standards-compliant? If they did and they broke even one single app that depended on that non-standard behavior, then you'd hate them for that instead.

That's a good - well, interesting - argument for not fixing a standards-incompliant piece of software. It leaves open the question "why didn't they make it standards-compliant in the first place?"
Mike Dimmick

Sep 01, 2004 at 4:27 PM

Maurits wrote:

That's a good - well, interesting - argument for not fixing a standards-incompliant piece of software. It leaves open the question "why didn't they make it standards-compliant in the first place?"

Usually because the 'standard' was written after the design was frozen.