Posted By: Mike Dimmick | Aug 10th, 2005 @ 4:52 AM
page 1 of 1
Comments: 2 | Views: 7954
Background: yesterday, Security Bulletin MS05-038 was released, a cumulative update for Internet Explorer, fixing two critical vulnerabilities, and one moderate. The IEBlog posting clarifies that these fixes were included in IE 7 beta 1 and Windows Vista beta 1.

What's Microsoft's policy on security patches for Beta software, specifically IE7? I realise that the recommendation is only to run beta software on non-production systems; however, many beta testers and some MSDN subscribers are using it as their main browser (conjecture from posts here and other forums), and the software has been made available on file-sharing networks - some 'bleeding edge' ordinary users are also using it. Back when IE betas were a more common occurrence, there was a site dedicated to them. The site still exists but has branched out more into a more general NeoWin/ActiveWin style of reporting.

As a developer, it definitely feels weird to talk about servicing unreleased software. But with the widespread use of such beta software - even if illegitimately distributed and used inappropriately - I feel that Microsoft has a responsibility to ensure that such beta software remains free of vulnerabilities.
People had a go at me for just pointing out problems with the new browser, for suggesting that Microsoft update it you're going to get ripped apart. :o
Maurits
Maurits
AKA Matthew van Eerde
Mike Dimmick wrote:
I feel that Microsoft has a responsibility to ensure that such beta software remains free of vulnerabilities.


Pfft.  "beta" and "responsibility" are mutually exclusive.

In the automotive world, cars still-in-development are test-driven by crash-test dummies.

In the software world, software still-in-development is test-driven by developers and people who send Jim Allchin big chocolate bars.

I bet if Microsoft started paying their beta testers, demand for beta products would drop.
page 1 of 1
Comments: 2 | Views: 7954
Microsoft Communities