Bugtraq mailing list archives

Re: [Full-Disclosure] MSIE src&name property disclosure


From: Paul Schmehl <pauls () utdallas edu>
Date: Mon, 08 Nov 2004 13:33:17 -0600

--On Monday, November 08, 2004 03:13:57 PM +0100 Michal Zalewski <lcamtuf () ghettot org> wrote:

Several days later, this statement surfaces in an article, showing beyond
any doubt that they are, quite simply, lying to the public to save face
and gain time.

As much as I am not a rabid Microsoft hater, this pissed me off more than
a bit.

Never attribute to malice what can be explained by incompetence. Most likely what happened is the left hand (PR) didn't know what the right hand (secure@) was doing.

Paul Schmehl (pauls () utdallas edu)
Adjunct Information Security Officer
The University of Texas at Dallas
AVIEN Founding Member
http://www.utdallas.edu


Current thread: