Your Peace of Mind is our Commitment

Contact Us English Recent Articles

Full Disclosure: part II

Microsoft has admitted that it mistakenly accused Online Solutions of publicising vulnerability in Internet Explorer before informing Microsoft of it. On the 1 November, Online Solutions discovered the hole and informed Microsoft's Security Response Center about it. Over a week later, Online Solutions issued a press release about the flaw to increase pressure on Microsoft to provide a fix. Microsoft issued a security alert, "Internet Explorer Cookie Data Can Be Exposed or Altered Through Script Injection (Q312461)" the same day, and accused Online Solutions of being irresponsible. They released a patch for it on November 14. However, by November 19 Microsoft retracted their earlier statements about Online Solutions and acknowledged they acted responsibly.