<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=ISO-8859-1">
</head>
<body bgcolor="#ffffcc" text="#000000">
It's standard practice for a security researcher who finds holes in
software to privately inform the software vendor before making the flaw
known to the public. How much time should elapse between the two events
is debatable, but a Google researcher has recently come under fire for
giving Microsoft just four days notice about a flaw, then releasing a
proof-of-concept exploit.<br>
<br>
<a class="moz-txt-link-freetext" href="http://www.technewsworld.com/edpick/70191.html?wlc=1276284403">http://www.technewsworld.com/edpick/70191.html?wlc=1276284403</a><br>
<pre class="moz-signature" cols="72">--
“The strongest reason for people to retain the right to keep and bear
arms is, as a last resort, to protect themselves against tyranny in
government.” — (Thomas Jefferson)
</pre>
</body>
</html>