Hacker News Reader

I am not happy that Google has published a full exploit well before it has been possible to anyone to actually deploy the patch and within just 3 days of notifying the vendor.

It seems that Google is eager for someone to use this exploit to attack as many systems as possible before they can be patched against it.

View on HN

Google only made it publicly visible after Microsoft publicly published this: https://technet.microsoft.com/en-us/library/security/4022344

I know but the exploit, a template virus, has been published before i could actually install the fix, and this applies to everyone. I actually think this behaviour is appalling. This kind of exploit could propagate very quickly.

The exploit is deployed quickly via the automatic daily update of the Windows Defender engine (the same thing that fetches new virus defintions) if I understand correctly. My system already had the patch when I checked.

Reply on news.ycombinator.com