Security Slice: Project Zero Day Problems

Google’s Project Zero recently published  a new Window’s 8.1 bug along with exploit code. Project Zero gives vendors a 90-day window for a fix before an exploit goes live and Microsoft failed to respond in time; so Google’s team decided to publish the vulnerability before a patch was available.

Did Google give Microsoft a fair shot at a fix?

Listen to our latest security slice podcast and hear Ken Westin, Tyler Reguly and Craig Young discuss the potential impact of Project Zero  on software vendors’ security behavior, why publishing the exploit code for this vulnerability may not introduce new risks to consumers and the relative “fairness” of Project Zero’s 90-day timeline.

 CLICK HERE TO LISTEN TO THE PODCAST

MORE PODCASTS

• Security Slice: The Sony Pictures Breach – Part Two
• Security Slice: The Sony Pictures Breach – Part One
• Security Slice: Reginomics
• Security Slice: Password Mismanagement